Attacking SDN Infrastructure: Are We Ready for the Next-Gen Networking?
summary
Demonstrates practical attacks against OpenDaylight and ONOS, plus OpenFlow switches (HP, Pica8): a Maven supply-chain injection inserts malware into controller builds, yields remote shells and expands a three-node ONOS cluster to four with an unauthorized cluster node; a social-engineered SDN app replaces IP flows with MAC matches on an HP3800 and doubles ping latency from ~0.3 ms to ~0.7 ms. Shows tools and working demos, highlights missing protections — no code signing, no PKI for nodes, no app access control — and points to Project Delta and Security-Mode ONOS as mitigations.
AI-written summary · about
chapters (20)
- 0:00Intro
- 1:12Traditional Networking
- 1:52What is Software Defined Networking (SDN)?
- 2:39Basic SDN operation
- 3:26Data Center Network Design
- 4:15Software-Defined Data Center (SDDC)
- 5:32SDN Control Plane Components
- 6:01Attack Vector: Misconfiguration
- 6:33Attack Vector: Malware 1
- 8:20Attack Vectors: Insider (tenant) attacks
- 8:47Attack Scenario 1
- 11:27Attack Scenario 2
- 14:04No system integrity protection
- 14:44No authentication of NOS cluster nodes
- 15:34No application access control
- 16:34Switch device firmware abuse
- 18:04SDN Security Assessment: Project DELTA
- 18:44SDN Application security policy enforcement
- 19:32Final remarks
- 19:50Thank you
related talks
48mAbusing Software Defined Networks
29mAttacking the Brain: Races in the SDN Control Plane
26mRedefining the Networking Industry Through Collaboration
31mKeynote Panel: SDN@10
40mLeveraging Cloud SDNs to Solve OWASP Top Ten
29mOpening Remarks & The State of the Industry
26mKeynote: Make SDN Real
36mWhen The Front Door Becomes a Backdoor: The Security Paradox of OSDP