Analyzing Flow Rule Attacks and Policy Enforcement in Software Defined Networking

Bachelor thesis (2022)

Authors

V. Florea Electrical Engineering, Mathematics and Computer Science

Contributors

M. Conti Cyber Security - EEMCS (mentor)
C. Lal Cyber Security - EEMCS (mentor)
Julián Urbano (graduation committee member)
Faculty
Electrical Engineering, Mathematics and Computer Science, Electrical Engineering, Mathematics and Computer Science
Copyright: © 2022 Vlad Florea
More Info
expand_more

Published Date

20-06-2022

Language

English

Reuse Rights

Other than for strictly personal use, it is not permitted to download, forward or distribute the text or part of it, without the consent of the author(s) and/or copyright holder(s), unless the work is under an open content license such as Creative Commons.

Faculty

Electrical Engineering, Mathematics and Computer Science

Abstract

Software Defined Networking (SDN) is a new paradigm that allows for greater reliability and more efficient management compared to traditional networks. However, SDN security is a developing field, and research towards fixing significant security vulnerabilities is still ongoing. One major threat to SDN security are attacks that seek to exploit policy and flow rule enforcement. This paper aims to summarise how these attacks are conducted and the weaknesses they target. Then, state-of-the-art solutions to these weaknesses will be presented, along with their use cases, advantages and disadvantages. Finally, an improvement on the state-of-the-art solutions will be proposed, as well as a potential direction for future research.