Loading [MathJax]/extensions/MathMenu.js
Model checking invariant security properties in OpenFlow | IEEE Conference Publication | IEEE Xplore

Model checking invariant security properties in OpenFlow


Abstract:

The OpenFlow (OF) switching specification represents an innovative and open standard for enabling the dynamic programming of flow control policies in production networks....Show More

Abstract:

The OpenFlow (OF) switching specification represents an innovative and open standard for enabling the dynamic programming of flow control policies in production networks. Unfortunately, thus far researchers have paid little attention to the development of methods for verifying that dynamic flow policies inserted within an OpenFlow network do not violate the network's underlying security policy. We introduce Flover, a model checking system which verifies that the aggregate of flow policies instantiated within an OpenFlow network does not violate the network's security policy. We have implemented Flover using the Yices SMT solver, which we then integrated into NOX, a popular OpenFlow network controller. Flover provides NOX a formal validation of the OpenFlow network's security posture.
Date of Conference: 09-13 June 2013
Date Added to IEEE Xplore: 07 November 2013
Electronic ISBN:978-1-4673-3122-7

ISSN Information:

Conference Location: Budapest, Hungary

References

References is not available for this document.