Investigating current state Security of OpenFlow Networks

Investigating current state Security of OpenFlow Networks: Focusing on the control-data plane communications

Pors, Marlou (TU Delft Electrical Engineering, Mathematics and Computer Science)

Kuipers, Fernando (mentor)
Dominguez, Francisco (mentor)
Doerr, Christian (graduation committee)

Delft University of Technology

2017-07-06

Software-Defined Networking (SDN) is the emerging paradigm that breaks vertical integration in networks, separating the network’s control logic from the underlying network devices such as routers and switches.
The decoupling of this data plane and control plane, there is need for a new communication channel which is used for the communication between the SDN controller and the network devices.
This channel is the so-called control channel and a popular protocol used over this channel is OpenFlow.
In this work we focus on the security of SDN while focusing on the control channel and the OpenFlow protocol. In example, we show several impersonation attacks and achieve denial-of-service by misusing the ARP protocol to generate a lot of OpenFlow traffic.
We also discuss how we can protect SDN against such attacks in order to improve SDN security.
This work has been performed at the IT security company Fox IT.

Software Defined Networking
OpenFlow
Security

http://resolver.tudelft.nl/uuid:7c917480-5eb3-46e2-93be-07e95efa30fd

Student theses

master thesis

© 2017 Marlou Pors