VeriFlow: verifying network-wide invariants in real time

By Ahmed Khurshid, Wenxuan Zhou, Matthew C. Caesar, Brighten Godfrey. HotSDN '12, 2012

1,047 citations recorded by the source corpus.

Subfields: Computer Networks and Communications

View Paper: https://www.semanticscholar.org/paper/c438e1146d2e3a6f13b6f75afd70e6cc12c268ca

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Computer Networks and Communications

1. Ian F. Akyildiz
2. Guofei Gu
3. Sandra Scott-Hayward
4. Sakir Sezer
5. Martin Reisslein
6. Ratul Mahajan
7. Haopei Wang
8. Lei Xu

Citations in the corpus

• A Survey on Software-Defined Wireless Sensor Networks: Challenges and Design Requirements (2017, methodology): “Beckett et al. [65] propose an assertion language based on the VeriFlow [66] algorithm to enable verification and debugging of the SDN applications with dynamic verification conditions.”
• SPHINX: Detecting Security Attacks in Software-Defined Networks (2015, background): “Controllers process LLDP messages for topology discovery and IGMP messages to maintain multicast groups, whereas it forwards ARP requests and replies enabling end hosts to build up ARP caches facilitating network communication.”
• Poisoning Network Visibility in Software-Defined Networks: New Attacks and Countermeasures (2015, background): “VeriFlow [19] presents a layer between the control plane and the data plane that monitors network state updates and verifies the violations of invariants dynamically at real time.”
• Sdn Security: A Survey (2013, background): “Without a signi fi cant increase in focus on security, it will not be possible for SDN to support the evolving capability associated with, for example, Network Functions Virtualization (NFV) [3].”
• Software-defined networking (SDN): a survey (2016, background): “(3) Unstructured : Generally, this type of threat comes from script kiddies, bugs/miscon fi gurations, or con fl icting rules [141,145] in the SDN components (e.g., applications, security policies, con fl icting rule tables in the switches, etc.).”
• Hybrid SDN Networks: A Survey of Existing Approaches (2018, background): “Veriflow [316], HSA [317], and ndb [318].”
• Network Innovation using OpenFlow: A Survey (2014, background): “[77] propose VeriFlow to check network invariants in real time.”
• Towards secure and dependable software-defined networks (2013, background): “such designs may benefit from the use of traditional techniques, such as firewalls or intrusion detection systems, and novel tools to specify and compose packet-forwarding policies (and updating them in a consistent way) [31] and to check network-wide invariants in real time [32].”
• Software defined networking: State of the art and research challenges (2014, neutral): “Other studies have presented a network debugging tool, Veriflow [85], which is capable of discovering the faults in SDN application rules and hence preventing them from disrupting network performance.”
• Packet-Level Telemetry in Large Datacenter Networks (2015, background): “Therefore it cannot be detected by tools that examine forwarding table entries [22, 23].”
• Security in Software Defined Networks: A Survey (2015, neutral): “Since, VeriFlow [66] provides mechanisms to inspect flow rules in run-time, the proposed verification procedure of [53] uses the VeriFlow verification algorithm with an incremental data structure to efficiently verify properties with dynamically changing verification conditions.”
• A General Approach to Network Configuration Analysis (2015, methodology): “More recent data plane analysis tools focus on SDNs and faster computations [13, 15, 20, 37].”
• A Survey of Software-Defined Networking: Past, Present, and Future of Programmable Networks (2014, background): “VeriFlow [70] has a similar goal, but goes further by proposing a real-time verification tool that resides between the controller and the forwarding elements.”
• A General Approach to Network Configuration Verification (2017, methodology): “A more recent class of data plane analysis tools such as HSA [18] and Veri ow [19] have better data plane coverage.”
• A roadmap for traffic engineering in SDN-OpenFlow networks (2014, methodology): “Moreover, SDN allows multiple applications or even multiple users to program the same physical network simultaneously, potentially resulting in conflicting rules that alter the intended behavior of one or more applications [107,108].”