@inproceedings{4cd37d8005e249b880d610ae3eaf6143,
title = "FlowChecker: Configuration analysis and verification of federated OpenFlow infrastructures",
abstract = "It is difficult to build a real network to test novel experiments. OpenFlow makes it easier for researchers to run their own experiments by providing a virtual slice and configuration on real networks. Multiple users can share the same network by assigning a different slice for each one. Users are given the responsibility to maintain and use their own slice by writing rules in a FlowTable. Misconfiguration problems can arise when a user writes conflicting rules for single FlowTable or even within a path of multiple OpenFlow switches that need multiple FlowTables to be maintained at the same time. In this work, we describe a tool, FlowChecker, to identify any intra-switch misconfiguration within a single FlowTable. We also describe the inter-switch or inter-federated inconsistencies in a path of OpenFlow switches across the same or different OpenFlow infrastructures. FlowChecker encodes FlowTables configuration using Binary Decision Diagrams and then uses the model checker technique to model the inter-connected network of OpenFlow switches.",
keywords = "access control, automated analysis, binary decision diagrams, configuration verification, openflow",
author = "Ehab Al-Shaer and Saeed Al-Haj",
year = "2010",
doi = "10.1145/1866898.1866905",
language = "English",
isbn = "9781450300933",
series = "Proceedings of the ACM Conference on Computer and Communications Security",
pages = "37--44",
booktitle = "Proceedings of the 3rd ACM Workshop on Assurable and Usable Security Configuration, SafeConfig '10, Co-located with CCS'10",
note = "3rd ACM Workshop on Assurable and Usable Security Configuration, SafeConfig '10, Co-located with CCS'10 ; Conference date: 04-10-2010 Through 08-10-2010",
}