Vulnerabilities of network OS and mitigation with state‐based permission system

• DOI: 10.1002/sec.1369
• Publication Date: 2015-10-26T07:51:30Z
• Authors: Jiseong Noh; Seunghyeon Lee; Jaehyun Park; Seungwon Shin; Brent Byunghoon Kang
• Keywords: Permission; Forwarding plane; Robustness

Abstract The advancement of software defined networking (SDN) is redefining traditional computer architecture. role the control plane SDN such importance that SDNs are referred to as network operating systems (OSs). However, robustness and security OS has been overlooked. In this paper, we report three main issues pertaining OSs. First, identified vulnerabilities could be exploited by malicious or buggy applications running on We also four major attack vectors undermine operations: denial service, global data manipulation, poisoning, system shell execution. Further, it was demonstrated real‐world attacks can launched commonly used OSs without significant effort. Second, present a method address analyzing identify their behavioral features, which enabled extraction permission set for each application. Based work, permission‐based application detector introduced, examines prevents from executing permission. Our shows almost no performance overhead. Copyright © 2015 John Wiley & Sons, Ltd.