Identifier Binding Attacks and Defenses in Software-Defined Networks
summary
Demonstrates Persona Hijacking, an SDN attack that persistently claims a victim’s MAC IP and hostname by spoofing DHCP and poisoning flows, and builds SECUREBINDER, an OpenFlow 1.3 app plus 802.1X integration that mediates ARP DHCP DNS, uses per‑port egress filters and a global controller view, and is implemented in Mininet on ONOS and Floodlight and verified with SPIN model checking. Experimental results show SECUREBINDER blocks three identifier attacks, model checking finds six attacks without it, adds ~3 s host join latency and a 47% controller packet increase.
AI-written summary · about
chapters (17)
- 0:00Introduction
- 0:36Web Browser Attack
- 1:46Device Identifiers
- 2:44Binding Protocols
- 4:04Existing Defenses
- 7:18Identifier Binding Defenses
- 8:36Outline
- 9:08Persona Hijacking
- 10:18IP Takeover
- 11:39Flow Poisoning
- 14:12Secure Binder Goals
- 15:53Secure Binder Goal 1
- 18:42Secure Binder Solution
- 19:47Secure Binder Implementation
- 20:23Secure Binder Evaluation
- 23:33Conclusion
- 24:17Questions
related talks
48mAbusing Software Defined Networks
22mAttacking SDN Infrastructure: Are We Ready for the Next-Gen Networking?
40mISE-Skating: Lessons Learned in Bypassing Network Access Control
19mNames and Security
30mBlank Space: Filling the Gaps in Atomic and...
33mCAP_NET_RAW And ARP Spoofing in Your Cluster: It's Going Downhill From Here
31mNew Techniques for Split-Second DNS Rebinding
40mAttacking Kubernetes Clusters Through Your Network Plumbing