Abstract:Software-Defined Networking (SDN) greatly meets the need in industry for programmable, agile, and dynamic networks by deploying diversified SDN applications on a centralized controller. However, SDN application ecosystem inevitably introduces new security threats since compromised or malicious applications can significantly disrupt network operations. Thus, a number of effective security enhancement systems have been developed to defend against potential attacks from SDN applications. In this paper, we identify a new vulnerability on flow rule installation in SDN, namely, buffered packet hijacking, which can be exploited by malicious applications to launch effective attacks bypassing all existing defense systems. The root cause of this vulnerability lies in that SDN systems do not check the inconsistency between buffer IDs and match fields when an application attempts to install flow rules. Thus, a malicious application can manipulate buffer IDs to hijack buffered packets even though they do not match any installed flow rules. We design effective attacks exploiting this vulnerability to disrupt all three SDN layers, i.e., application layer, data plane layer, and control layer. First, by modifying buffered packets and resending them to controllers, a malicious application can poison other applications. Second, by manipulating forwarding behaviors of buffered packets, a malicious application can not only disrupt TCP connections of flows but also make flows bypass network security policies. Third, by copying massive buffered packets to controllers, a malicious application can saturate the bandwidth of SDN control channels and their computing resources. We demonstrate the feasibility and effectiveness of these attacks with both theoretical analysis and experiments in a real SDN testbed. Finally, we develop a lightweight defense system that can be readily deployed in existing SDN controllers as a patch.

A Formal Analysis of SCTP: Attack Synthesis and Patch Verification

Vulnerabilities and Attacks of Inter-device Coordination in Programmable Networks.

Vulnerability Analysis of CSP Based on Stochastic Game Theory

Vulnerability Analysis of Clock Synchronization Protocol Using Stochastic Petri Net

Strand-Based Approach to Patch Security Protocols

Protocol Security Testing with SPIN and TTCN-3

Exploiting Cross-Layer Vulnerabilities: Off-Path Attacks on the TCP/IP Protocol Suite

A Security Analysis and Revised Security Extension for the Precision Time Protocol

Terrapin Attack: Breaking SSH Channel Integrity By Sequence Number Manipulation

Securing Middlebox Policy Enforcement in SDN

Toward Security-Enhanced In-band Network Telemetry in Programmable Networks

Reflection Scan: an Off-Path Attack on TCP

Design and Simulation on Improving SCTP Performance Based on a Collaborative Approach

A CAD Framework for Simulation of Network Level Attack on Platoons

An Attack—Finding Algorithm for Security Protocols

A Robustness Analysis to Structured Channel Tampering Over Secure-by-Design Consensus Networks

A Formal Approach To Conformance Testing Of Distributed Routing Protocols

Novel Mitm Attacks On Security Protocols In Sdn: A Feasibility Study

When Match Fields Do Not Need to Match: Buffered Packets Hijacking in SDN

Analysis of the DoIP Protocol for Security Vulnerabilities

PTPsec: Securing the Precision Time Protocol Against Time Delay Attacks Using Cyclic Path Asymmetry Analysis