Proceedings of the 2018 ACM International Workshop on Security in Software Defined Networks & Network Function Virtualization最新文献_第7页

IDS Alert Priority Determination Based on Traffic Behavior 基于流量行为的IDS警报优先级确定

Proceedings of the 2018 ACM International Workshop on Security in Software Defined Networks & Network Function Virtualization Pub Date : 2019-08-28 DOI: 10.1007/978-3-030-26834-3_11

Shohei Hiruta, Satoshi Ikeda, Shigeyoshi Shima, H. Takakura

引用次数: 2

How to Solve Multiple Short-Exponent Discrete Logarithm Problem 如何解决多重短指数离散对数问题

Proceedings of the 2018 ACM International Workshop on Security in Software Defined Networks & Network Function Virtualization Pub Date : 2019-08-28 DOI: 10.1007/978-3-030-26834-3_4

K. Kurosawa, Akinaga Ueda, Hayato Matsuhashi, Y. Sakagami

引用次数: 0

A Blockchain Future for Secure Clinical Data Sharing: A Position Paper 安全临床数据共享的区块链未来:立场文件

Proceedings of the 2018 ACM International Workshop on Security in Software Defined Networks & Network Function Virtualization Pub Date : 2019-03-19 DOI: 10.1145/3309194.3309198

Yan Luo, Hao Jin, Peilong Li

引用次数: 13

Securing Large-scale Data Transfers in Campus Networks: Experiences, Issues, and Challenges 保护校园网中的大规模数据传输:经验、问题和挑战

Proceedings of the 2018 ACM International Workshop on Security in Software Defined Networks & Network Function Virtualization Pub Date : 2019-03-19 DOI: 10.1145/3309194.3309444

Deepak Nadig, B. Ramamurthy

引用次数: 2

A Formal Access Control Model for SE-Floodlight Controller se泛光灯控制器的形式化访问控制模型

Proceedings of the 2018 ACM International Workshop on Security in Software Defined Networks & Network Function Virtualization Pub Date : 2019-03-19 DOI: 10.1145/3309194.3309195

Abdullah Al-Alaj, R. Sandhu, R. Krishnan

{"title":"A Formal Access Control Model for SE-Floodlight Controller","authors":"Abdullah Al-Alaj, R. Sandhu, R. Krishnan","doi":"10.1145/3309194.3309195","DOIUrl":"https://doi.org/10.1145/3309194.3309195","url":null,"abstract":"Software defined networking (SDN) offers a promising approach for the next generation of networking technology. However, at present there is no widely accepted model for network applications authorization. One reason for lack of access control system is the absence of clear definition of an authorization model in SDN. Porras et al citeporras2015securing recently developed SE-Floodlight for this purpose. They partly employed the notion of the well-known role-based access control (RBAC) model. They informally presented a role-based authorization system to manage applications access rights to network operations, submitted during the interaction between the application layer and the switch-side infrastructure. In this paper we develop a formal role-based authorization model in SDN using SE-Floodlight as a reference controller. Based on the formal model we discuss security aspects and propose some extensions. We also provide an administrative model for the authorization system. We show a configuration of the formal model for a use case scenario and discuss the security aspects of the authorization model and describe some security issues related to over-privileged apps, limitations of role hierarchy, app upgrading, and app downgrading problem. Finally, we propose a refined role hierarchy to address these problems.","PeriodicalId":20513,"journal":{"name":"Proceedings of the 2018 ACM International Workshop on Security in Software Defined Networks & Network Function Virtualization","volume":"1 1","pages":""},"PeriodicalIF":0.0,"publicationDate":"2019-03-19","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"90802197","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 8

Enabling Dynamic Network Access Control with Anomaly-based IDS and SDN 启用基于异常的IDS和SDN动态网络访问控制

Proceedings of the 2018 ACM International Workshop on Security in Software Defined Networks & Network Function Virtualization Pub Date : 2019-03-19 DOI: 10.1145/3309194.3309199

Hongda Li, Feng Wei, Hongxin Hu

引用次数: 32

SDNSOC: Object Oriented SDN Framework 面向对象的SDN框架

Proceedings of the 2018 ACM International Workshop on Security in Software Defined Networks & Network Function Virtualization Pub Date : 2019-03-19 DOI: 10.1145/3309194.3309196

Ankur Chowdhary, Dijiang Huang, Gail-Joon Ahn, Myong H. Kang, Anya Kim, Alexander Velazquez

{"title":"SDNSOC: Object Oriented SDN Framework","authors":"Ankur Chowdhary, Dijiang Huang, Gail-Joon Ahn, Myong H. Kang, Anya Kim, Alexander Velazquez","doi":"10.1145/3309194.3309196","DOIUrl":"https://doi.org/10.1145/3309194.3309196","url":null,"abstract":"The cloud networks managed by SDN can have multi-tier policy and rule conflicts. The application plane can have conflicting user-defined policies, and the infrastructure layer can have OpenFlow rules conflicting with each other. There is no scalable, and, automated programming framework to detect and resolve multi-tier conflicts in SDN-based cloud networks. We present an object-oriented programming framework - SDN Security Operation Center (SDNSOC), which handles policy composition at application plane, flow rule conflict detection and resolution at the control plane. We follow the design principles of object-oriented paradigm such as code-re-utilization, methods abstraction, aggregation for the implementation of SDNSOC on a multi-tenant cloud network. The key benefits obtained using this approach are (i) The network administrator is abstracted from complex-implementation details of SFC. The end-to-end policy composition of different network functions is handled by an object-oriented framework in an automated fashion. We achieve 37% lower latency in SFC composition compared to nearest competitors - SICS and PGA. (ii) Policy conflict detection between the existing traffic rules and incoming traffic is handled by SDNSOC in a scalable manner. The solution scales well on a large cloud network., and 18% faster security policy conflict detection on a cloud network with 100k OpenFlow rules compared to similar works - Brew, and Flowguard.","PeriodicalId":20513,"journal":{"name":"Proceedings of the 2018 ACM International Workshop on Security in Software Defined Networks & Network Function Virtualization","volume":"38 1","pages":""},"PeriodicalIF":0.0,"publicationDate":"2019-03-19","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"80029412","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 11

An Anonymous Credential System with Constant-Size Attribute Proofs for CNF Formulas with Negations 带否定的CNF公式的常大小属性证明匿名凭证系统

Proceedings of the 2018 ACM International Workshop on Security in Software Defined Networks & Network Function Virtualization Pub Date : 2019-01-01 DOI: 10.1007/978-3-030-26834-3_6

Ryo Okishima, T. Nakanishi

引用次数: 0

Inference Attacks on Encrypted Databases Based on Order Preserving Assignment Problem 基于保序分配问题的加密数据库推理攻击

Proceedings of the 2018 ACM International Workshop on Security in Software Defined Networks & Network Function Virtualization Pub Date : 2018-09-03 DOI: 10.1007/978-3-319-97916-8_3

Sota Onozawa, N. Kunihiro, M. Yoshino, Ken Naganuma

引用次数: 2

Integer Linear Programming for Three-Subset Meet-in-the-Middle Attacks: Application to GIFT 三子集中间相遇攻击的整数线性规划:在GIFT中的应用

Proceedings of the 2018 ACM International Workshop on Security in Software Defined Networks & Network Function Virtualization Pub Date : 2018-09-03 DOI: 10.1007/978-3-319-97916-8_15

Yu Sasaki

引用次数: 25