Paper Info
Title
Cross-App Poisoning in Software-Defined Networking.
Abstract
Software-defined networking (SDN) continues to grow in popularity because of its programmable and extensible control plane realized through network applications (apps). However, apps introduce significant security challenges that can systemically disrupt network operations, since apps must access or modify data in a shared control plane state. If our understanding of how such data propagate within the control plane is inadequate, apps can co-opt other apps, causing them to poison the control plane's integrity. We present a class of SDN control plane integrity attacks that we call cross-app poisoning (CAP), in which an unprivileged app manipulates the shared control plane state to trick a privileged app into taking actions on its behalf. We demonstrate how role-based access control (RBAC) schemes are insufficient for preventing such attacks because they neither track information flow nor enforce information flow control (IFC). We also present a defense, ProvSDN, that uses data provenance to track information flow and serves as an online reference monitor to prevent CAP attacks. We implement ProvSDN on the ONOS SDN controller and demonstrate that information flow can be tracked with low-latency overheads.
Year
DOI
Venue
2018
10.1145/3243734.3243759
ACM Conference on Computer and Communications Security
Keywords
Field
DocType
software-defined networking, data provenance, information flow control, network operating system
Information flow (information theory),Control theory,Computer science,Computer security,Role-based access control,Network operating system,Network operations center,Reference monitor,Access control,Software-defined networking
Conference
ISBN
Citations 
PageRank 
978-1-4503-5693-0
8
0.60
References 
Authors
46
10
Name
Order
Citations
PageRank
Benjamin E. Ujcich1162.54
Samuel Jero2588.15
Anne Edmundson3423.55
Qi Wang4182.92
Richard Skowyra5416.54
James P Landry6122.25
Adam Bates732423.66
William H. Sanders82634239.75
Cristina Nita-Rotaru91855100.14
Hamed Okhravi1027723.66