I DPID It My Way! A Covert Timing Channel in Software-Defined Networks

Fuente: arXiv
Enregistré dans:
Détails bibliographiques
Auteurs principaux: Krösche, Robert, Thimmaraju, Kashyap, Schiff, Liron, Schmid, Stefan
Format: Preprint
Publié: 2024
Sujets:
Accès en ligne:
Tags: Ajouter un tag
Pas de tags, Soyez le premier à ajouter un tag!
_version_ 1866914701030457344
author Krösche, Robert
Thimmaraju, Kashyap
Schiff, Liron
Schmid, Stefan
author_facet Krösche, Robert
Thimmaraju, Kashyap
Schiff, Liron
Schmid, Stefan
contents Software-defined networking is considered a promising new paradigm, enabling more reliable and formally verifiable communication networks. However, this paper shows that the separation of the control plane from the data plane, which lies at the heart of Software-Defined Networks (SDNs), can be exploited for covert channels based on SDN Teleportation, even when the data planes are physically disconnected. This paper describes the theoretical model and design of our covert timing channel based on SDN Teleportation. We implement our covert channel using a popular SDN switch, Open vSwitch, and a popular SDN controller, ONOS. Our evaluation of the prototype shows that even under load at the controller, throughput rates of 20 bits per second are possible, with a communication accuracy of approximately 90\%. We also discuss techniques to increase the throughput further.
format Preprint
id arxiv_https___arxiv_org_abs_2403_01878
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle I DPID It My Way! A Covert Timing Channel in Software-Defined Networks
Krösche, Robert
Thimmaraju, Kashyap
Schiff, Liron
Schmid, Stefan
Cryptography and Security
Networking and Internet Architecture
Software-defined networking is considered a promising new paradigm, enabling more reliable and formally verifiable communication networks. However, this paper shows that the separation of the control plane from the data plane, which lies at the heart of Software-Defined Networks (SDNs), can be exploited for covert channels based on SDN Teleportation, even when the data planes are physically disconnected. This paper describes the theoretical model and design of our covert timing channel based on SDN Teleportation. We implement our covert channel using a popular SDN switch, Open vSwitch, and a popular SDN controller, ONOS. Our evaluation of the prototype shows that even under load at the controller, throughput rates of 20 bits per second are possible, with a communication accuracy of approximately 90\%. We also discuss techniques to increase the throughput further.
title I DPID It My Way! A Covert Timing Channel in Software-Defined Networks
topic Cryptography and Security
Networking and Internet Architecture
url https://arxiv.org/abs/2403.01878