Procera

Voellmy, Andreas; Kim, Hyojoon; Feamster, Nick

doi:10.1145/2342441.2342451

Cited by 178 publications

(31 citation statements)

References 23 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Additional controllers may be deployed according to security and survivability requirements; (iii) the application plane can accommodate several types of network applications, thus promoting research on more sophisticated resilience systems to protect the network against a wide range of challenges. High-level policy languages, such as Procera [125] and Pyretic [126], and troubleshooting systems can also be used to facilitate these tasks.…”

Section: Discussionmentioning

confidence: 99%

“…To enforce capabilities related to policy management in the performance context, Qazi et al [84] propose the use of middleboxes orchestrated by SIMPLE, a policy enforcement layer in the control plane. Additionally, the specification of packet-forwarding policies can be assisted by highlevel languages, such as those proposed by Voellmy et al [125] and Foster et al [126].…”

Section: Legitimate Trafficmentioning

confidence: 99%

See 1 more Smart Citation

Resilience support in software-defined networking: A survey

et al. 2015

View full text Add to dashboard Cite

Software-Defined Networking (SDN) is an architecture for computer networking that provides a clear separation between network control functions and forwarding operations. The abstractions supported by this architecture are intended to simplify the implementation of several tasks that are critical to network operation, such as routing and network management. Computer networks have an increasingly important societal role, requiring them to be resilient to a range of challenges. Previously, research into network resilience has focused on the mitigation of several types of challenges, such as natural disasters and attacks. Capitalising on its benefits, including increased programmability and a clearer separation of concerns, significant attention has recently focused on the development of resilience mechanisms that use software-defined networking approaches. In this article, we present a survey that provides a structured overview of the resilience support that currently exists in this important area. We categorize the most recent research on this topic with respect to a number of resilience disciplines. Additionally, we discuss the lessons learned from this investigation, highlight the main challenges faced by SDNs moving forward, and outline the research trends in terms of solutions to mitigate these challenges . 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 This article presents a survey on the support for network resilience in SoftwareDefined Networking (SDN). This has been the subject of intense investigation by the academic and industrial community in the past few years, as evidenced by the number of papers included in our survey (159 references in total). Capitalizing on the benefits of SDN, including increased programmability and a clearer separation of concerns, significant attention has recently focused on the development of resilience mechanisms that use software-defined networking approaches. Thus, a wide range of solutions to classical network problems have been revisited using this architecture, but many problems continue to be challenging.Our survey investigates the resilience support that currently exists in this important area, and categorizes the most recent research on this topic with respect to a number of resilience disciplines. Additionally, we discuss the lessons learned from this investigation, highlight the main challenges faced by SDNs moving forward, and outline the research trends in terms of solutions to mitigate these challenges. The aim of the survey is to offer to the reader a structured view of network resilience in the SDN spectrum, and how resilience aspects are supported in these architectures.We believe that this subject material is closely aligned with the objectives of the journal. Please be assured that:1. This paper has not been published or accepted for publication w...

show abstract

Section: Discussionmentioning

confidence: 99%

Section: Legitimate Trafficmentioning

confidence: 99%

Resilience support in software-defined networking: A survey

et al. 2015

View full text Add to dashboard Cite

show abstract

“…An orthogonal approach would be to use secure-by-construction controllers that utilize languages whose type systems guarantee properties such as app composability [1,23,49,50,84]. In such systems, the controller acts more as a language runtime than as an operating system, and applications are written in a formal language and composed using logical operators.…”

Section: Related Workmentioning

confidence: 99%

Cross-App Poisoning in Software-Defined Networking

Ujcich

Jero

Edmundson

et al. 2018

Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security

View full text Add to dashboard Cite

Software-defined networking (SDN) continues to grow in popularity because of its programmable and extensible control plane realized through network applications (apps). However, apps introduce significant security challenges that can systemically disrupt network operations, since apps must access or modify data in a shared control plane state. If our understanding of how such data propagate within the control plane is inadequate, apps can co-opt other apps, causing them to poison the control plane's integrity. We present a class of SDN control plane integrity attacks that we call cross-app poisoning (CAP), in which an unprivileged app manipulates the shared control plane state to trick a privileged app into taking actions on its behalf. We demonstrate how role-based access control (RBAC) schemes are insufficient for preventing such attacks because they neither track information flow nor enforce information flow control (IFC). We also present a defense, ProvSDN, that uses data provenance to track information flow and serves as an online reference monitor to prevent CAP attacks. We implement ProvSDN on the ONOS SDN controller and demonstrate that information flow can be tracked with low-latency overheads. CCS CONCEPTS • Security and privacy → Access control; Information flow control; Information accountability and usage control; • Networks → Programmable networks; KEYWORDS software-defined networking; data provenance; information flow control; network operating system * DISTRIBUTION STATEMENT A. Approved for public release: distribution unlimited.

show abstract

“…For various reasons controllers may need to communicate with each other, on the other side, network applications may require extraction of information about the underlying network policy aspect, then there should be a clearly defined interface. There are some proposals such as Procera [48], Frenetic [49], FML [50] and Nettle [51] which build a policy layer by using a network configuration language. In addition, the northbound API must authorize employment of different policies to the same flow.…”

Section: Control Layermentioning

confidence: 99%

A survey on SDN, the future of networking

Rowshanrad¹,

Namvarasl²,

Abdi³

et al. 2014

JACST

View full text Add to dashboard Cite

Software Defined Networking (SDN) is an emerging architecture which decouples networks control plane and data plane physically. It makes control plane programmable trough a centralized controller, and builds intelligent and flexible networks. The OpenFlow is one of the most famous SDN protocols, which acts as a southbound interface between control plane and data plane. In this survey, SDN implementation approaches and different southbound interfaces, beside different version of OpenFlow, are introduced. In addition to general architecture of SDN, different wireless architectures are discussed. Here, also potential SDN's applications and research areas including hot topics such as Information Centric Networks, Cloud and datacenters, multimedia, wireless and mobile networks over SDN are reviewed.

show abstract

Procera

Cited by 178 publications

References 23 publications

Resilience support in software-defined networking: A survey

Resilience support in software-defined networking: A survey

Cross-App Poisoning in Software-Defined Networking

A survey on SDN, the future of networking

Contact Info

Product

Resources

About