~/talk

CrossCheck: Input Validation for WAN Control Systems

on YouTube 17m
Talkat NSDI '26 · 2026-05-04..05-06· [networking, security]

speakers

name:Alexander Krentsel
links:none on file
name:Rishabh Iyer
links:none on file
name:Isaac Keslassy
links:none on file
name:Bharath Modhipalli
links:none on file
name:Sylvia Ratnasamy
links:none on file
name:Anees Shaikh
links:none on file
name:Rob Shakir
links:none on file

resources

video:https://youtu.be/UFaw66muKOo
slides:none on file

summary

CrossCheck validates SDN controller inputs by repairing telemetry via democratic trust propagation and then cross-checking controller topology and demand against the hardened telemetry. Deployed as a four‑week shadow system in a production WAN, it detects the single invalid‑input incident while sustaining 0% false positives. Simulations show 100% detection of demand perturbations of 5% or more and near‑zero false positives even with up to 30% corrupted telemetry, preventing historical outages driven by bad inputs.

AI-written summary · about

chapters (12)

  1. 0:00CrossCheck and network outages
  2. 1:23Incorrect inputs in controllers
  3. 3:29Input-induced outages examples
  4. 5:13Why input validation is hard
  5. 6:37Cross-check inputs with telemetry
  6. 8:03Telemetry redundancy enables corroboration
  7. 10:13CrossCheck system design
  8. 12:22Evaluating CrossCheck's effectiveness
  9. 13:44Detecting buggy inputs
  10. 15:06Resilience to buggy telemetry
  11. 16:07Shadow deployment caught bug
  12. 17:12Conclusion and future

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.