Header Space Analysis: Static Checking for Networks

By Peyman Kazemian, George Varghese, Nick McKeown. Symposium on Networked Systems Design and Implementation, 2012

906 citations recorded by the source corpus.

View Paper: https://www.semanticscholar.org/paper/34050dcb56af321c4e20a00ebf753f9be594a0db

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

Citations in the corpus

A security enforcement kernel for OpenFlow networks (2012, methodology): “In this space, our work is perhaps most closely related to header space analysis, a static analysis approach to detecting network misconfigurations [11].”
Real Time Network Policy Checking Using Header Space Analysis (2013, unknown): “HSA provides a uniform, vendor-independent and protocol-agnostic model of the network using a geometric model of packet processing.”
A General Approach to Network Configuration Verification (2017, methodology): “While this approach has proven effective for stateless data plane analysis (e.g., HSA [18]), it creates substantial problems for control plane analysis.”
FRESCO: Modular Composable Security Services for Software-Defined Networks (2013, background): “More recently, header space analysis was proposed, which is a generic framework to express various network misconfigurations and policy violations [17].”
A General Approach to Network Configuration Analysis (2015, background): “Researchers have recently proposed a second approach that can be used to detect configuration errors: analyzing the data plane snapshots (i.e., forwarding behavior) of the network [13] [14] [22] [37].”
The Design and Implementation of Open vSwitch (2015, unknown): “2Header space analysis [16] provides the algebra to identify the flows but the feasibility of efficient, online analysis (such as in [15]) in this context remains an open question.”
A Survey of Security in Software Defined Networks (2016, methodology): “in the literature [59]–[76], [84]–[86].”
SPHINX: Detecting Security Attacks in Software-Defined Networks (2015, background): “Like Anteater, Header Space Analysis (HSA) [29] also leverages static analysis to detect forwarding and configuration errors.”
A roadmap for traffic engineering in SDN-OpenFlow networks (2014, methodology): “It employs a similar concept of the real-time network policy checking from [93,92].”
Abstractions for network update (2012, methodology): “However, other tools, such as the recently-proposed header space analysis tool [14], also benefit from our approach.”
SIMPLE-fying middlebox policy enforcement using SDN (2013, methodology): “When middleboxes change packet header fields, the controller can verify these properties by combining the header space analysis [27] and the similarity-based correlation in the DynHandler.”
A Survey and a Layered Taxonomy of Software-Defined Networking (2014, methodology): “This work is summarized in Table V. NetPlumber [132] is a real-time policy checking tool based on Header Space Analysis (HSA) [156].”