Real Time Network Policy Checking Using Header Space Analysis

By Peyman Kazemian, Michael Chan, Hongyi Zeng, George Varghese, Nick McKeown, Scott Whyte. Symposium on Networked Systems Design and Implementation, 2013

577 citations recorded by the source corpus.

View Paper: https://www.semanticscholar.org/paper/d0017ea0bf8d2e5f64aa59819aeb72013f4ebe3f

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

Citations in the corpus

A roadmap for traffic engineering in SDN-OpenFlow networks (2014, methodology): “It employs a similar concept of the real-time network policy checking from [93,92].”
A Survey of Security in Software Defined Networks (2016, background): “NetPlumber [64] is also a real-time policy checking tool that incrementally checks for compliance of state changes.”
Poisoning Network Visibility in Software-Defined Networks: New Attacks and Countermeasures (2015, methodology): “NetPlumber [18] introduces a realtime network-wide policy checking tool using Header Space Analysis (HSA).”
The Design and Implementation of Open vSwitch (2015, unknown): “2Header space analysis [16] provides the algebra to identify the flows but the feasibility of efficient, online analysis (such as in [15]) in this context remains an open question.”
Hybrid SDN Networks: A Survey of Existing Approaches (2018, background): “Veriflow [316], HSA [317], and ndb [318].”
Software Defined Networking Architecture, Security and Energy Efficiency: A Survey (2017, methodology): “It is located between data plane and control plane, and enforces policies into switches at the rate of 50 − 500μs [157].”
Packet-Level Telemetry in Large Datacenter Networks (2015, background): “Therefore it cannot be detected by tools that examine forwarding table entries [22, 23].”
A General Approach to Network Configuration Analysis (2015, background): “Researchers have recently proposed a second approach that can be used to detect configuration errors: analyzing the data plane snapshots (i.e., forwarding behavior) of the network [13] [14] [22] [37].”
A Survey and a Layered Taxonomy of Software-Defined Networking (2014, methodology): “NetPlumber [132] is a real-time policy checking tool based on Header Space”
SPHINX: Detecting Security Attacks in Software-Defined Networks (2015, background): “Controllers process LLDP messages for topology discovery and IGMP messages to maintain multicast groups, whereas it forwards ARP requests and replies enabling end hosts to build up ARP caches facilitating network communication.”