Affiliation:
1. University of Luxembourg, Luxembourg, Luxembourg
2. Lero SFI Centre for Software Research, University of Limerick, Limerick, Ireland and University of Ottawa, Ottawa, Canada
Abstract
Software-defined networks (SDN) enable flexible and effective communication systems that are managed by centralized software controllers. However, such a controller can undermine the underlying communication network of an SDN-based system and thus must be carefully tested. When an SDN-based system fails, in order to address such a failure, engineers need to precisely understand the conditions under which it occurs. In this article, we introduce a machine learning-guided fuzzing method, named FuzzSDN, aiming at both (1) generating effective test data leading to failures in SDN-based systems and (2) learning accurate failure-inducing models that characterize conditions under which such system fails. To our knowledge, no existing work simultaneously addresses these two objectives for SDNs. We evaluate FuzzSDN by applying it to systems controlled by two open-source SDN controllers. Furthermore, we compare FuzzSDN with two state-of-the-art methods for fuzzing SDNs and two baselines for learning failure-inducing models. Our results show that (1) compared to the state-of-the-art methods, FuzzSDN generates at least 12 times more failures, within the same time budget, with a controller that is fairly robust to fuzzing and (2) our failure-inducing models have, on average, a precision of 98% and a recall of 86%, significantly outperforming the baselines.
Funder
SES
Luxembourg National Research Fund under the Industrial Partnership Block Grant
Science Foundation Ireland
NSERC of Canada under the Discovery and CRC programs
Publisher
Association for Computing Machinery (ACM)
Reference65 articles.
1. SwitchV
2. Abdullah M. Alshanqiti, Safi Faizullah, Sarwan Ali, Maria Khalid Alvi, Muhammad Asad Khan, and Imdadullah Khan. 2019. Detecting DDoS attack on SDN due to vulnerabilities in OpenFlow. In Proceedings of the 2019 International Conference on Advances in the Emerging Computing Technologies. 1–6.
3. Distributed SDN Control: Survey, Taxonomy, and Challenges
4. ONOS
5. Dynamic attack detection and mitigation in IoT using SDN