FRESCO: Modular Composable Security Services for Software-Defined Networks

By Seungwon Shin, Phillip A. Porras, Vinod Yegneswaran, Martin W. Fong, Guofei Gu, Mabry Tyson. Network and Distributed System Security Symposium, 2013

595 citations recorded by the source corpus.

View Paper: https://www.semanticscholar.org/paper/ca089bc0bf0214da61098d06b5ad16ecf28f37a3

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

1. Danda B. Rawat
2. Qiao Yan
3. I. Farris
4. F. Yu
5. Sandra Scott-Hayward
6. S. Reddy
7. Hlabishi I. Kobo
8. B. Hou

Citations in the corpus

• Poisoning Network Visibility in Software-Defined Networks: New Attacks and Countermeasures (2015, methodology): “FRESCO [30] introduces an OpenFlow security application development framework which provides modular composable security services for application developers.”
• A Survey on Emerging SDN and NFV Security Mechanisms for IoT Systems (2019, methodology): “In the context of security applications, the FRESCO framework [134] offers a scripting language to assist programmers in developing new SDN-based secu-”
• Hybrid SDN Networks: A Survey of Existing Approaches (2018, background): “For example, FRESCO [336] and SDNsec [337] are popular security mechanisms for pure SDN networks.”
• SPHINX: Detecting Security Attacks in Software-Defined Networks (2015, background): “…SPHINX to detect both known and potentially unknown attacks on network topology and data plane forwarding originating within an SDN. SPHINX leverages the novel abstraction of flow graphs, which closely approximate the actual network operations, to enable incremental validation of all network…”
• A Survey of Security in Software Defined Networks (2016, background): “The idea behind FRESCO is to allow the rapid design and development of security specific modules, which can be incorporated as OpenFlow applications.”
• A Survey on Software-Defined Wireless Sensor Networks: Challenges and Design Requirements (2017, background): “Fresco [61] defines an application layer and a security kernel on top of the network operating system NOX [62] controller, which interface with the security applications and ensures that their policies are implemented.”
• A Survey on Software-Defined Network and OpenFlow: From Concept to Implementation (2014, methodology): “FRESCO-DB [107], a database module, can simplify the SDN security key management.”
• Towards secure and dependable software-defined networks (2013, background): “[6] S. Shin et al. FRESCO: Modular Composable Security Services for Software-De.ned Networks .”
• A Survey and a Layered Taxonomy of Software-Defined Networking (2014, background): “Indeed, few works [70], [162], [163] have proposed frameworks for orchestrating policies expressed in different contexts (QoS, traffic engineering, access control, etc.”
• Security in Software Defined Networks: A Survey (2015, unknown): “FRESCO [52] and FortNOX [65] provides mechanisms to ensure data confidentiality by flow rules legitimacy.”
• Sdn Security: A Survey (2013, methodology): “Fresco [32] is one notable contribution; which presents an OpenFlow Security Application Development Framework incorporating FortNox [33]; a security enforcement kernel.”
• AVANT-GUARD: scalable and vigilant switch flow management in software-defined networks (2013, background): “The network research community postulates that one approach to meeting these challenges lies within the tenet of software-defined networking (SDN) [19].”
• DDoS Attack Protection in the Era of Cloud Computing and Software-Defined Networking (2014, methodology): “[26] proposed an OpenFlow security application development framework, FRESCO, to enhance the secure application development in SDN.”
• AmoebaNet: An SDN-enabled network service for big data science (2018, unknown): “SDN security or applying SDN to address security problems are discussed in(Zheng et al., 2016; Zhaogang et al., 2016; Scott-Hayward et al., 2013; Shin et al., 2013; Kreutz et al., 2013) and these are also hot research areas.”
• DDoS Attack Detection and Mitigation Using SDN: Methods, Practices, and Solutions (2017, background): “Foreseeing the SDN platform’s success in providing security solutions, Shin et al. [61] presented a comprehensive framework—FRESCO, for development of OpenFlow-based security applications.”
• FloodGuard: A DoS Attack Prevention Extension in Software-Defined Networks (2015, unknown): “FRESCO [31] proposes a framework designed to facilitate the rapid design and modular composition of security applications.”
• Software-defined networking (SDN): a survey (2016, methodology): “In terms of securely implementing the SDN, a number of solutions have been presented such as FRESCO [165], OFHIP [143], Secure SDMN [166], and Debugger for SDN [167].”
• Software-Defined Networking (SDN) and Distributed Denial of Service (DDoS) Attacks in Cloud Computing Environments: A Survey, Some Research Issues, and Challenges (2016, methodology): “FRESCO, an OpenFlow security application development framework designed to facilitate the rapid design, and modular composition of OF-enabled detection and mitigatio n modules is presented in [80].”