Challenges and Preparedness of SDN-based Firewalls

Dixit, Vaibhav Hemant; Kyung, Sukwha; Zhao, Ziming; Doupé, Adam; Shoshitaishvili, Yan; Ahn, Gail-Joon

doi:10.1145/3180465.3180468

Cited by 14 publications

(12 citation statements)

References 7 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…It also focuses on maintaining the accuracy and agility of multiple stateful firewalls. Dixit et al [14] identified various metrics for SDN-based firewalls in enterprise network environments. They evaluated seven different SDN-based firewalls for these metrics and proposed possible mitigation methods.…”

Section: Sdn-based Firewallsmentioning

confidence: 99%

Secure Collecting, Optimizing, and Deploying of Firewall Rules in Software-Defined Networks

et al. 2020

View full text Add to dashboard Cite

Firewalls are a fundamental element of network security systems with the ability to block network data traffic flows according to pre-defined rules. Software-defined networking (SDN) technology, which can provide flexibility, elasticity, and programmability for network management, has been applied to network security systems. We propose a software-defined firewall cyber-security system, which securely gathers the firewall rules of the host/network-based firewalls through the SDN control plane, converts the collected firewall rules in the form of SDN flow rules, and deploys them on OpenFlow (OF)-enabled switches. Furthermore, we formulate an optimization problem to find appropriate OF-enabled switches to which the SDN flow rules are to be sent. The proposed firewall system makes the traffic flows that are destined to be dropped by a firewall be dropped in advance at the OF-enabled switch with the corresponding SDN flow rules. The SDN-based testbed experiments demonstrate that the proposed firewall system reduces the aggregate network traffic volume and the resource utilization of end-hosts in the network.

show abstract

Section: Sdn-based Firewallsmentioning

confidence: 99%

Secure Collecting, Optimizing, and Deploying of Firewall Rules in Software-Defined Networks

et al. 2020

View full text Add to dashboard Cite

show abstract

“…Apesar da ampla utilização e do relativo sucesso, os firewalls tradicionais não atendem as demandas das novas redes, como as SDNs, onde a quantidade e a diversidade de equipamentos conectados e os novos desafios de segurança exigem novos tipos de políticas que são difíceis de serem implementadas nos firewalls atuais [Dixit et al 2018]. Questões como flexibilidade, granularidade, desempenho, capacidade de identificar e bloquear novos malwares e necessidade de manutenção simplificada levam a academia e a indústria a propor e desenvolver novas soluções.…”

Section: Firewalls Tradicionaisunclassified

“…entre a rede interna e a Internet). Já um firewall SDNé mais uma aplicação executando no controlador SDN [Dixit et al 2018]. Entre as principais vantagens de um firewall SDN estão o acesso a informações cruciais da rede (como a topologia detalhada) e a possibilidade de aplicar, em tempo de execução, políticas de segurança em todos os dispositivos da rede gerenciados pelo controlador.…”

Section: Firewalls Em Sdns: Flexibilidade E Inovaçãounclassified

“…Independente das características escolhidas para a criação de firewalls em SDNs, alguns requisitos, considerados essenciais, são esperados para que a solução seja vista como robusta e aplicável na prática. A seguir, são apresentados e detalhados alguns dos requisitos mais importantes e destacados na literatura [Dixit et al 2018, Scott-Hayward et al 2015.…”

Section: Requisitos Essenciais (Res)unclassified

“…Estudos indicam que os mecanismos de segurança tradicionais são inadequados para proteger infraestruturas baseadas em redes definidas por software [Dixit et al 2018]. De fato, as funções tradicionais de um firewall, baseadas em conjuntos de regras estáticas, não são o suficiente para atender demandas e características essenciais de SDNs, como granularidade, adaptabilidade e escalabilidade.…”

Section: Introductionunclassified

See 2 more Smart Citations

Firewalls em Redes Definidas por Software: Estado da Arte

Fiorenza¹,

Kreutz²

2019

Anais Da XVII Escola Regional De Redes De Computadores (ERRC 2019)

View full text Add to dashboard Cite

Redes Definidas por Software, ou SDNs, representam um novo paradigma onde o controle da rede é logicamente centralizado. Este novo paradigma vem transformando o modo de pensar e gerir as redes, incluindo mudanças significativas na engenharia de tráfego e controle da topologia da rede, por exemplo. Serviços de segurança, como firewalls, também podem tirar proveito da flexibilidade oferecida pelas SDNs, como de fato de ocorrido. O objetivo deste trabalho é apresentar e discutir uma revisão do estado da arte sobre firewalls em SDNs, buscando identificar padrões que possibilitem classificar as soluções existentes quanto a sua arquitetura e modos de operação e, também, identificar oportunidades e desafios de pesquisa.

show abstract

DMoiSDN: A defensive mechanism of object integrity for SDN

Alsalamh,

Al‐Mutairi,

Humayed

et al. 2023

Concurrency and Computation

View full text Add to dashboard Cite

SummarySoftware‐defined network (SDN) technology is widely used for computer networks, especially in enterprise data centers and virtualized networking. However, SDN networks encounter severe challenges to security. One such challenge comes from third‐party applications that contain malicious logic and security vulnerabilities, resulting in controller integrity attacks. In this paper, we propose a defensive mechanism of object integrity for SDN (DMoiSDN) to mitigate the issue known as Cross‐App Poisoning (CAP). Our results contribute to increasing the integrity level of the controller's resources by conducting a potential risk analysis, which showed a decrease of 57% in the risk factor for potential attacks. We further examined the results of comparing DMoiSDN's performance with related work that uses information flow control (IFC) policies. The best results among the three conducted scenarios were as follows: we found that decreased latency in our system ranged from 12% to 90%, with an average of 59%, when encountering an increase in requests. It ranged from 78% to 49%, with an average of 63%, when receiving a variable number of total permissions for each application. DMoiSDN is expected to show a perceptible but reasonable latency and, to some extent, be able to avoid a critical impact on performance.

show abstract

Challenges and Preparedness of SDN-based Firewalls

Cited by 14 publications

References 7 publications

Secure Collecting, Optimizing, and Deploying of Firewall Rules in Software-Defined Networks

Secure Collecting, Optimizing, and Deploying of Firewall Rules in Software-Defined Networks

Firewalls em Redes Definidas por Software: Estado da Arte

DMoiSDN: A defensive mechanism of object integrity for SDN

Contact Info

Product

Resources

About