Title
Identifier Binding Attacks And Defenses In Software-Defined Networks
Abstract
In this work, we demonstrate a novel attack in SDN networks, Persona Hijacking, that breaks the bindings of all layers of the networking stack and fools the network infrastructure into believing that the attacker is the legitimate owner of the victim's identifiers, which significantly increases persistence. We then present a defense, SECUREBINDER, that prevents identifier binding attacks at all layers of the network by leveraging SDN's data and control plane separation, global network view, and programmatic control of the network, while building upon IEEE 802.1x as a root of trust. To evaluate its effectiveness we both implement it in a testbed and use model checking to verify the guarantees it provides.
Year
Venue
Field
2017
PROCEEDINGS OF THE 26TH USENIX SECURITY SYMPOSIUM (USENIX SECURITY '17)
Identifier,Computer security,Computer science,Software-defined networking
DocType
Citations 
PageRank 
Conference
0
0.34
References 
Authors
8
6
Name
Order
Citations
PageRank
Samuel Jero1588.15
William Koch221.38
Richard Skowyra3416.54
Hamed Okhravi427723.66
Cristina Nita-Rotaru51855100.14
David Bigelow6915.25