@inproceedings{b322991d87da4e09a0809eb540eb88a2,
title = "FLOWGUARD: Building robust firewalls for software-defined networks",
abstract = "Software-Defined Networking (SDN) introduces significant granularity, visibility and flexibility to networking, but at the same time brings forth new security challenges. One of the fundamental challenges is to build robust firewalls for protecting OpenFlow-based networks where network states and traffic are frequently changed. To address this challenge, we introduce FlowGuard, a comprehensive framework, to facilitate not only accurate detection but also effective resolution of firewall policy violations in dynamic OpenFlow-based networks. FlowGuard checks network flow path spaces to detect firewall policy violations when network states are updated. In addition, FlowGuard conducts automatic and real-time violation resolutions with the help of several innovative resolution strategies designed for diverse network update situations. We also implement our framework and demonstrate the efficacy and efficiency of the proposed detection and resolution approaches in FlowGuard through experiments with a real-world network topology.",
keywords = "firewalls, openflow, security, software-defined networking",
author = "Hongxin Hu and Wonkyu Han and Gail-Joon Ahn and Ziming Zhao",
year = "2014",
doi = "10.1145/2620728.2620749",
language = "English (US)",
isbn = "9781450329897",
series = "HotSDN 2014 - Proceedings of the ACM SIGCOMM 2014 Workshop on Hot Topics in Software Defined Networking",
publisher = "Association for Computing Machinery",
pages = "97--102",
booktitle = "HotSDN 2014 - Proceedings of the ACM SIGCOMM 2014 Workshop on Hot Topics in Software Defined Networking",
note = "3rd ACM SIGCOMM 2014 Workshop on Hot Topics in Software Defined Networking, HotSDN 2014 ; Conference date: 22-08-2014 Through 22-08-2014",
}