Cloud Computing Security: What Changes with Software-Defined Networking?

Tsugawa, Mauricio; Matsunaga, Andrea; Fortes, José A. B.

doi:10.1007/978-1-4614-9278-8_4

Cited by 20 publications

(16 citation statements)

References 17 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The flow table capacity issue has been presented in many previous works like [20][21][22][23][24]. They all point out the limitation of switch flow table memory and potential scalability and security issue.…”

Section: Related Workmentioning

confidence: 99%

Exploiting the Vulnerability of Flow Table Overflow in Software-Defined Network: Attack Model, Evaluation, and Defense

Zhou

Chen

Zhang

et al. 2018

Security and Communication Networks

View full text Add to dashboard Cite

As the most competitive solution for next-generation network, SDN and its dominant implementation OpenFlow are attracting more and more interests. But besides convenience and flexibility, SDN/OpenFlow also introduces new kinds of limitations and security issues. Of these limitations, the most obvious and maybe the most neglected one is the flow table capacity of SDN/OpenFlow switches. In this paper, we proposed a novel inference attack targeting at SDN/OpenFlow network, which is motivated by the limited flow table capacities of SDN/OpenFlow switches and the following measurable network performance decrease resulting from frequent interactions between data and control plane when the flow table is full. To the best of our knowledge, this is the first proposed inference attack model of this kind for SDN/OpenFlow. We implemented an inference attack framework according to our model and examined its efficiency and accuracy. The evaluation results demonstrate that our framework can infer the network parameters (flow table capacity and usage) with an accuracy of 80% or higher. We also proposed two possible defense strategies for the discovered vulnerability, including routing aggregation algorithm and multilevel flow table architecture. These findings give us a deeper understanding of SDN/OpenFlow limitations and serve as guidelines to future improvements of SDN/OpenFlow.

show abstract

Section: Related Workmentioning

confidence: 99%

Exploiting the Vulnerability of Flow Table Overflow in Software-Defined Network: Attack Model, Evaluation, and Defense

Zhou

Chen

Zhang

et al. 2018

Security and Communication Networks

View full text Add to dashboard Cite

show abstract

“…Attacks or strikes like jamming, sniffing can be tended to in the examination range of wireless networks. Commonly, in network, it is something has to trust the configurations manually delivered by a framework/network manager and detach network management traffic from general data traffic [Tsugawa et al, 2014]. Nevertheless, fog nodes are sent at the edge of Internet, which definitely pass on overpowering load to the network management, imagining the cost of keeping up massive scale cloud servers which are scattered all around all through the framework/network edge without basic access for upkeep.…”

Section: Network Fortificationmentioning

confidence: 99%

Privacy and Security Problems in Fog Computing

Khalid¹

2016

CAE

View full text Add to dashboard Cite

Fog Computing is a term made by Cisco that insinuates extending cloud computing to the edge of a network. Generally called Edge Computing or preliminaries, fog computing supports the operation of Fog/cloud, storage and networking services between end devices and conveyed processing data centers. Fog computing is a gifted computing perspective that extends cloud computing to the edge of frameworks/networks. Like cloud computing however with specific characteristics, fog computing faces new-fangled security and assurance defies other than those procured from cloud computing. We have reviewed these defies/concerns and prospective plans briefly in this paper.

show abstract

“…1 is the highest level view of the architecture, the cloud computing environment, called a cloud ecosystem in [8], and its main purpose is to provide a perspective of its components. Each component can be refined in the same way to define concrete architectures; for example, the network model can include firewalls or software-defined network (SDN) structures [39]. In Sect.…”

Section: Introductionmentioning

confidence: 99%

Building a security reference architecture for cloud systems

2015

View full text Add to dashboard Cite

Reference architectures (RAs) are useful tools to understand and build complex systems, and many cloud providers and software product vendors have developed versions of them. RAs describe at an abstract level (no implementation details) the main features of their cloud systems. Security is a fundamental concern in clouds and several cloud vendors provide security reference architectures (SRAs) to describe the security features of their services. A SRA is an abstract architecture describing a conceptual model of security for a cloud system and provides a way to specify security requirements for a wide range of concrete architectures. We propose here a method to build a SRA for clouds defined using UML models and patterns, which goes beyond existing models in providing a global view and a more precise description. We present a metamodel as well as security and misuse patterns for this purpose. We validate our approach by showing that it can describe more precisely existing models and that it has a variety of uses. We describe in detail one of these uses, a way of evaluating the security level of a SRA.

show abstract

Cloud Computing Security: What Changes with Software-Defined Networking?

Cited by 20 publications

References 17 publications

Exploiting the Vulnerability of Flow Table Overflow in Software-Defined Network: Attack Model, Evaluation, and Defense

Exploiting the Vulnerability of Flow Table Overflow in Software-Defined Network: Attack Model, Evaluation, and Defense

Privacy and Security Problems in Fog Computing

Building a security reference architecture for cloud systems

Contact Info

Product

Resources

About