outsmarting network security with sdn teleportation
play

Outsmarting Network Security with SDN Teleportation KASHYAP - PowerPoint PPT Presentation

Apr 03, 2024 •96 likes •279 views

Outsmarting Network Security with SDN Teleportation KASHYAP THIMMARAJU (TU BERLIN, GERMANY) LIRON SCHIFF (GUARDICORE LABS, ISRAEL) STEFAN SCHMID (AALBORG UNIVERSITY, DENMARK) IEEE EURO S&P, PARIS, FRANCE APRIL 2017 Networking Equipment

  1. Outsmarting Network Security with SDN Teleportation KASHYAP THIMMARAJU (TU BERLIN, GERMANY) LIRON SCHIFF (GUARDICORE LABS, ISRAEL) STEFAN SCHMID (AALBORG UNIVERSITY, DENMARK) IEEE EURO S&P, PARIS, FRANCE APRIL 2017

  2. Networking Equipment is Critical • It forms a technological foundation for communication • It contributes to the economy • Vital for national security

  3. Backdoors, exploits and 0days in Networking Equipment

  4. Backdoors in SDN equipment • Does that introduce new attacks? • Can we detect backdoor activity?

  5. Software Defined Networking (SDN) is a networking paradigm ● Separated planes ● Centralized model Control Controller plane Data plane Switch

  6. SDN Teleportation: An attack previously not possible Control plane Teleportation Control plane Data plane Software Defined Traditional Networks Networks

  7. SDN Teleportation poses several threats ● Bypass security mechanisms ● Attack coordination ● Exfiltration ● Eavesdrop

  8. The Teleportation Model 1)Switch to Controller 2)Controller to Switches 3)Destination Processing Controller (2) ) 1 ( 01 10 ... (3) Switch Switch

  9. Teleportation Techniques • Out-of-band Forwarding • Flow (re-)configurations • Switch Identification

  10. Out-of-band Forwarding Teleportation ● Complete packets from one switch are teleported to another switch Packet-Out Packet-in

  11. Flow (Re-)Confjguration T eleportation ● Exploit the controllers centralized control to e t e Flow-add l reconfjgure the network Flow-add e P d n - a w i - c t o e k l k e F when a host moves across c t - a i n P the network

  12. Switch Identification Teleportation ● Impersonate the Features-reply (DPID=1) Features-reply (DPID=1) Datapath-ID to Features-request Features-request communicate Hello Hello information

  13. Attacks using Teleportation ● Bypass firewalls, IDS and IPS ● Exfiltration ● Man-in-the-middle ● Rendezvous/Attack coordination

  14. Teleportation Bandwidth

  15. Countermeasures ● Packet-in-Packet-Out Watcher ● Audit-Trails and Accountability ● Enhanced IDS with Waypoint Enforcement

  16. Conclusions ● Introduced a conceptually novel SDN attack ● Teleportation enables several attacks ● Teleportation has high quality and throughput ● Suggested Teleportation countermeasures

  17. Questions

Recommend

Quantum teleportation, diagrams, and the one-time pad A. Kissinger Digital Security Group

Quantum teleportation, diagrams, and the one-time pad A. Kissinger Digital Security Group

Process theories Non-separability Radboud University Nijmegen One-time pad Quantum teleportation Quantum teleportation, diagrams, and the one-time pad A. Kissinger Digital Security Group Institute for Computing and Information Sciences

1.1k views • 107 slides
What is network security? Friends and enemies: Alice, Bob, Trudy What is network security?

What is network security? Friends and enemies: Alice, Bob, Trudy What is network security?

Network security Network security Foundations: what is security? cryptography Network Security Network Security authentication message integrity key distribution and certification Security in practice: Srinidhi Varadarajan

332 views • 6 slides
Network Security Network Security Srinidhi Varadarajan Network security Network security

Network Security Network Security Srinidhi Varadarajan Network security Network security

Network Security Network Security Srinidhi Varadarajan Network security Network security Foundations: what is security? cryptography authentication message integrity key distribution and certification Security in practice:

634 views • 36 slides
Foundations of Network Diagrams: Dynamical Systems, Bayesian Networks and Quantum Processes

Foundations of Network Diagrams: Dynamical Systems, Bayesian Networks and Quantum Processes

Foundations of Network Diagrams: Dynamical Systems, Bayesian Networks and Quantum Processes Filippo Bonchi University of Pisa Quantum Teleportation Quantum Teleportation 1932: von Neumanns original formulation of quantum theory based on

942 views • 29 slides
Towards Parallel Quantum Need for Teleportation Problem Computing: Standard Communication Is a

Towards Parallel Quantum Need for Teleportation Problem Computing: Standard Communication Is a

Need for Fast Data . . . Need to Take . . . Computer Scientists . . . Towards Parallel Quantum Need for Teleportation Problem Computing: Standard Communication Is a . . . Analysis of the Problem Quantum Teleportation Conclusion Algorithm

597 views • 37 slides
Hierarchically clustering time-directed graphs and the effects of teleportation and memory Jevin

Hierarchically clustering time-directed graphs and the effects of teleportation and memory Jevin

Hierarchically clustering time-directed graphs and the effects of teleportation and memory Jevin West, Information School, University of Washington Network Clustering Graph Partitioning Community Detection Block Models Module Detection

789 views • 52 slides
Economics of network security Harald Vranken 1 Economics of network security Note that

Economics of network security Harald Vranken 1 Economics of network security Note that

Advanced Network Security (2019-2020) Economics of network security Harald Vranken 1 Economics of network security Note that network in this lecture means Physical communication network (eg. Internet, telephony, fax, telegraph)

769 views • 49 slides
Intro, history, hacking Network Security Lecture 1 Welcome to Network Security Should be able

Intro, history, hacking Network Security Lecture 1 Welcome to Network Security Should be able

Intro, history, hacking Network Security Lecture 1 Welcome to Network Security Should be able to Skills identify design and Ability to analyze the implementation security of networked vulnerabilities in network systems protocols

564 views • 33 slides
Outsmarting Stress, Enhancing Resilience, and Optimizing Health in Todays World Margaret

Outsmarting Stress, Enhancing Resilience, and Optimizing Health in Todays World Margaret

Outsmarting Stress, Enhancing Resilience, and Optimizing Health in Todays World Margaret A. Chesney, PhD Professor of Medicine, UCSF Cancer Support Community East TN June 1, 2019 Facing Cancer Together - a program of Cancer Support

861 views • 55 slides
Foundations of Network and Foundations of Network and Computer Security Computer Security J ohn

Foundations of Network and Foundations of Network and Computer Security Computer Security J ohn

Foundations of Network and Foundations of Network and Computer Security Computer Security J ohn Black J CSCI 6268/TLEN 5831, Fall 2004 Introduction UC Davis PhD in 2000 Cryptography Interested in broader security as well

492 views • 12 slides
Network Security Where we are in the Course Security crosses all layers Application

Network Security Where we are in the Course Security crosses all layers Application

Network Security Where we are in the Course Security crosses all layers Application Transport Network Link Physical CSE 461 University of Washington 2 Security Threats Security is like performance Means many things

932 views • 55 slides
Network Security Where we are in the Course Security crosses all layers Application

Network Security Where we are in the Course Security crosses all layers Application

Network Security Where we are in the Course Security crosses all layers Application Transport Network Link Physical CSE 461 University of Washington 2 Security Threats Security is like performance Means many things

374 views • 13 slides
Network Security Where we are in the Course Security crosses all layers Applicatjon

Network Security Where we are in the Course Security crosses all layers Applicatjon

Network Security Where we are in the Course Security crosses all layers Applicatjon Transport Network Link Physical CSE 461 University of Washington 2 Security Threats Security is like performance Means many things

1.12k views • 92 slides
Network Security Fundamentals Security Training Course Dr. Charles J. Antonelli The University

Network Security Fundamentals Security Training Course Dr. Charles J. Antonelli The University

Network Security Fundamentals Security Training Course Dr. Charles J. Antonelli The University of Michigan 2013 Network Security Fundamentals Module 3 Network Protocol Attacks Roadmap Network security The basic objectives: CIA

1.68k views • 39 slides
Hands-On Network Security: Practical Tools & Methods Security Training Course Dr. Charles J.

Hands-On Network Security: Practical Tools & Methods Security Training Course Dr. Charles J.

Hands-On Network Security: Practical Tools & Methods Security Training Course Dr. Charles J. Antonelli The University of Michigan 2012 Hands-On Network Security Module 3 Network Protocol Attacks Roadmap Network security The

502 views • 39 slides
Foundations of Network and Foundations of Network and Computer Security Computer Security J ohn

Foundations of Network and Foundations of Network and Computer Security Computer Security J ohn

Foundations of Network and Foundations of Network and Computer Security Computer Security J ohn Black J Lecture #2 Aug 25 th 2005 CSCI 6268/TLEN 5831, Fall 2005 Economist Survey Please read it Main points Security is a MUCH

600 views • 27 slides
TCP/IP: ICMP, UDP Network Security Lecture 5 Recap and overview Looking at security of

TCP/IP: ICMP, UDP Network Security Lecture 5 Recap and overview Looking at security of

TCP/IP: ICMP, UDP Network Security Lecture 5 Recap and overview Looking at security of TCP/IP IP, Ethernet, ARP Sniffing the network and forging packets tcpdump, wireshark Today: ICMP and UDP Eike Ritter Network Security -

881 views • 38 slides
13 - Computer Security Network Security 1 Context

13 - Computer Security Network Security 1 Context

13 - Computer Security Network Security 1 Context Computers connected in a network - but also: smartphones, fridges, IoT devices, Each device has an IP address Packets are routed via

771 views • 51 slides
Re Re-thinking Ne Network Security in the Presence of Unknown Ne Network Elements Soo-Jin Moon

Re Re-thinking Ne Network Security in the Presence of Unknown Ne Network Elements Soo-Jin Moon

Re Re-thinking Ne Network Security in the Presence of Unknown Ne Network Elements Soo-Jin Moon 4 th year Ph.D. Student Carnegie Mellon University Advisor: Vyas Sekar Research Area: Network Security A Vulnerable Network! Networks: explosion

583 views • 7 slides
CS 5410 - Computer and Network Security: Cellular Network Security Professor Kevin Butler Fall

CS 5410 - Computer and Network Security: Cellular Network Security Professor Kevin Butler Fall

CS 5410 - Computer and Network Security: Cellular Network Security Professor Kevin Butler Fall 2015 Southeastern Security for Enterprise and Infrastructure (SENSEI) Center Reminders Poster showcase next Monday For final project: turn

533 views • 34 slides
Foundations of Network and Foundations of Network and Computer Security Computer Security J ohn

Foundations of Network and Foundations of Network and Computer Security Computer Security J ohn

Foundations of Network and Foundations of Network and Computer Security Computer Security J ohn Black J Lecture #13 Oct 11 th 2005 CSCI 6268/TLEN 5831, Fall 2005 Announcements Quiz #2 later today Allocate last 30 mins No Class

488 views • 30 slides
Foundations of Network and Foundations of Network and Computer Security Computer Security J ohn

Foundations of Network and Foundations of Network and Computer Security Computer Security J ohn

Foundations of Network and Foundations of Network and Computer Security Computer Security J ohn Black J Lecture #25 Dec 1 st 2005 CSCI 6268/TLEN 5831, Fall 2005 Announcements Remainder of the semester: Quiz #3 is Today 40 mins

414 views • 20 slides
Foundations of Network and Foundations of Network and Computer Security Computer Security J ohn

Foundations of Network and Foundations of Network and Computer Security Computer Security J ohn

Foundations of Network and Foundations of Network and Computer Security Computer Security J ohn Black J Lecture #3 Aug 30 st 2005 CSCI 6268/TLEN 5831, Fall 2005 Assignment #0 Please add yourself to the class mailing list Send mail

379 views • 35 slides
Foundations of Network and Foundations of Network and Computer Security Computer Security J ohn

Foundations of Network and Foundations of Network and Computer Security Computer Security J ohn

Foundations of Network and Foundations of Network and Computer Security Computer Security J ohn Black J Lecture #22 Nov 11 th 2004 CSCI 6268/TLEN 5831, Fall 2004 Announcements Proj #2 Due week from today Following Thurs is

485 views • 25 slides

More recommend