Defending lightweight virtual switches from cross-app poisoning attacks with vIFC

Abstract

We present vIFC, a conceptual architecture for Information Flow Control (IFC) policy enforcement in lightweight programmable data planes (PDP) virtualization solutions. In contrast to existing solutions for preventing Cross-App Poisoning Attacks (CAP) like ProvSDN, our solution can monitor and prevent CAP attacks launched against lightweight virtual switches emulated by a general-purpose switch program or composed in a single switch program.