Field-based Security Testing of SDN configuration Updates
Jahanzaib Malik, Fabrizio Pastore

TL;DR
This paper introduces FISTS, a novel security testing approach for SDN configuration updates in satellite networks, using network probing and machine learning to detect security issues effectively.
Contribution
The paper presents FISTS, a new method combining network probing and unsupervised machine learning to verify security during SDN configuration changes, especially in satellite communication.
Findings
FISTS achieves up to 0.95 precision and 1.00 recall in detecting security issues.
The approach is scalable and effective on real and simulated SDN data.
FISTS improves security verification for SDN reconfigurations in satellite networks.
Abstract
Software-defined systems revolutionized the management of hardware devices but introduced quality assurance challenges that remain to be tackled. For example, software defined networks (SDNs) became a key technology for the prompt reconfigurations of network services in many sectors including telecommunications, data centers, financial services, cloud providers, and manufacturing industry. Unfortunately, reconfigurations may lead to mistakes that compromise the dependability of the provided services. In this paper, we focus on the reconfigurations of network services in the satellite communication sector, and target security requirements, which are often hard to verify; for example, although connectivity may function properly, confidentiality may be broken by packets forwarded to a wrong destination. We propose an approach for FIeld-based Security Testing of SDN Configurations Updates…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsSoftware-Defined Networks and 5G · Network Security and Intrusion Detection · Advanced Malware Detection Techniques
