Attacking the Brain: Races in the SDN Control Plane
summary
Introduces CONGUARD, a dynamic framework that instruments SDN controllers (bytecode rewriting) and logs critical operations, builds happens-before graphs, and forces execution reorderings to verify harmful races. Evaluated on Floodlight, ONOS and OpenDaylight with 34 apps using Mininet, it finds 15 previously unknown vulnerabilities (causing controller crashes, service disruption, or info leaks) and helps get 12 patched. Attack model assumes only malware-infected hosts injecting benign-looking network events; exploits succeed without compromising controllers or switches.
AI-written summary · about
chapters (10)
- 0:00Intro
- 0:40Background
- 3:47Race Condition
- 9:39Two Problems
- 10:24Framework
- 17:44Evaluation
- 18:40Results
- 21:23No Potential
- 22:30Conclusion
- 23:06Question
related talks
22mAttacking SDN Infrastructure: Are We Ready for the Next-Gen Networking?
48mAbusing Software Defined Networks
31mKeynote Panel: SDN@10
26mRedefining the Networking Industry Through Collaboration
40mLeveraging Cloud SDNs to Solve OWASP Top Ten
44mHow to Test SDN, or Software‑Defined Networks?
40mThe 9th Annual Black Hat USA Network Operations Center (NOC) Report
14mBrain-on-Switch: Towards Advanced Intelligent Network Data Plane via NN-Driven Traffic...