FlowChecker: configuration analysis and verification of federated openflow infrastructures

By Ehab S. Al-Shaer, Saeed Al-Haj. Workshop on Automated Decision Making for Active Cyber Defense, 2010

297 citations recorded by the source corpus.

Subfields: Computer Networks and Communications, Electrical and Electronic Engineering

View Paper: https://www.semanticscholar.org/paper/7af6489d51eb9d55a0298b778bb822c7f75e9936

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Computer Networks and Communications

In Electrical and Electronic Engineering

Citations in the corpus

Sdn Security: A Survey (2013, methodology): “Binary Decision Diagrams can also be used to test for intra-switch miscon ﬁ gurations within a single ﬂ ow table [26].”
A Survey on Software-Defined Network and OpenFlow: From Concept to Implementation (2014, background): “FlowCheck [63] can check the updating status of flow tables.”
NetKAT: semantic foundations for networks (2014, methodology): “Systems such as Anteater [19], FlowChecker [1], Header Space Analysis [10], VeriFlow [11], and Formally Verifiable Networking [33], encode information about network topology and forwarding policies into SAT formulae (Anteater), graph-based representations (VeriFlow, Header Space Analysis), or higher”
A Survey of Security in Software Defined Networks (2016, methodology): “FlowChecker [60] uses binary decision diagrams to test for intraswitch misconfigurations within a single flow table.”
FRESCO: Modular Composable Security Services for Software-Defined Networks (2013, methodology): “The FlowChecker system encodes OpenFlow flow tables into Binary Decision Diagrams (BDD) and uses model checking [1] to verify security properties.”
A NICE Way to Test OpenFlow Applications (2012, unknown): “FlowChecker [32] applies symbolic model”
A Survey on Software-Defined Wireless Sensor Networks: Challenges and Design Requirements (2017, background): “FlowChecker [68] is a conﬁguration veriﬁcation model which ensures that Open-Flow rules are consistent within ﬂow tables as well as with other ﬂow rules residing in other switches in a federated network.”
Software-defined networking (SDN): a survey (2016, methodology): “(3) Unstructured : Generally, this type of threat comes from script kiddies, bugs/miscon ﬁ gurations, or con ﬂ icting rules [141,145] in the SDN components (e.g., applications, security policies, con ﬂ icting rule tables in the switches, etc.).”
Security for 5G and Beyond (2019, background): “The FlowChecker [218] can check and identify inconsistencies in ﬂow rules in OpenFlow switches.”
A Survey and a Layered Taxonomy of Software-Defined Networking (2014, methodology): “FlowChecker [82] is another tool to analyze, validate, and enforce end-to-end OpenFlow configuration in federated OpenFlow infrastructures.”
A roadmap for traffic engineering in SDN-OpenFlow networks (2014, methodology): “FlowChecker [110] deploys the similar ideas in ConfigChecker [111] which uses Binary Decision Diagrams (BDDs) to analyze the end-to-end access control configuration of all network devices (such as routers, firewalls, IPSec gateways, NAT and multicasting), FlowChecker allows OF administrators/users t”
SPHINX: Detecting Security Attacks in Software-Defined Networks (2015, background): “…known and potentially unknown attacks on network topology and data plane forwarding originating within an SDN. SPHINX leverages the novel abstraction of flow graphs, which closely approximate the actual network operations, to enable incremental validation of all network updates and constraints.”
Security in Software Defined Networks: A Survey (2015, unknown): “FlowChecker [44] is a configuration verification tool used to identify inconsistencies in OpenFlow rules within a single switch or multiple inter-federated datapath elements.”