Software Defined Networking Security

  1. SDN Threat Landscape and Attack Vectors
    1. Attack Surface Analysis
      1. Control Plane Attack Surfaces
        1. Controller Software Vulnerabilities
          1. Controller Network Exposure
            1. Management Interface Weaknesses
              1. Inter-Controller Communication Risks
              2. Data Plane Attack Surfaces
                1. Switch Firmware Vulnerabilities
                  1. Flow Table Manipulation Risks
                    1. Physical Device Access Points
                      1. Switch-Controller Communication Channels
                      2. Application Plane Attack Surfaces
                        1. SDN Application Vulnerabilities
                          1. Application Isolation Failures
                            1. Malicious Application Deployment
                              1. Application Privilege Escalation
                              2. Communication Channel Attack Surfaces
                                1. Unencrypted Protocol Communications
                                  1. Authentication Bypass Vulnerabilities
                                    1. Message Integrity Weaknesses
                                      1. Protocol Implementation Flaws
                                    2. Control Plane Threat Categories
                                      1. Controller Compromise Attacks
                                        1. Remote Code Execution Exploits
                                          1. Privilege Escalation Techniques
                                            1. Memory Corruption Attacks
                                              1. Configuration Manipulation
                                              2. Controller Availability Attacks
                                                1. Denial of Service Attacks
                                                  1. Distributed Denial of Service Attacks
                                                    1. Resource Exhaustion Attacks
                                                      1. Controller Saturation Attacks
                                                      2. Controller State Manipulation
                                                        1. Flow Table Overflow Attacks
                                                          1. Policy Corruption Attacks
                                                            1. Network Topology Poisoning
                                                              1. State Synchronization Attacks
                                                              2. Controller Communication Attacks
                                                                1. Man-in-the-Middle Attacks
                                                                  1. Message Replay Attacks
                                                                    1. Protocol Downgrade Attacks
                                                                      1. Certificate Authority Compromise
                                                                    2. Data Plane Threat Categories
                                                                      1. Switch Compromise Attacks
                                                                        1. Firmware Modification Attacks
                                                                          1. Boot Process Manipulation
                                                                            1. Hardware Tampering
                                                                              1. Physical Access Exploitation
                                                                              2. Flow Rule Manipulation Attacks
                                                                                1. Malicious Flow Rule Injection
                                                                                  1. Flow Rule Deletion Attacks
                                                                                    1. Flow Rule Modification Attacks
                                                                                      1. Flow Table Poisoning
                                                                                      2. Traffic Interception Attacks
                                                                                        1. Packet Sniffing
                                                                                          1. Traffic Redirection
                                                                                            1. Data Exfiltration
                                                                                              1. Communication Eavesdropping
                                                                                              2. Switch-Controller Communication Attacks
                                                                                                1. Control Channel Hijacking
                                                                                                  1. Message Spoofing
                                                                                                    1. Authentication Bypass
                                                                                                      1. Protocol Exploitation
                                                                                                    2. Application Plane Threat Categories
                                                                                                      1. Malicious Application Attacks
                                                                                                        1. Rogue Application Deployment
                                                                                                          1. Application Logic Exploitation
                                                                                                            1. Unauthorized Network Access
                                                                                                              1. Data Theft and Manipulation
                                                                                                              2. Application Vulnerability Exploitation
                                                                                                                1. Input Validation Failures
                                                                                                                  1. Buffer Overflow Attacks
                                                                                                                    1. SQL Injection Attacks
                                                                                                                      1. Cross-Site Scripting Attacks
                                                                                                                      2. Application Isolation Failures
                                                                                                                        1. Multi-Tenancy Violations
                                                                                                                          1. Resource Sharing Attacks
                                                                                                                            1. Privilege Boundary Crossing
                                                                                                                              1. Information Leakage
                                                                                                                              2. Application Management Attacks
                                                                                                                                1. Unauthorized Application Installation
                                                                                                                                  1. Application Configuration Manipulation
                                                                                                                                    1. Application Update Hijacking
                                                                                                                                      1. License and Authentication Bypass
                                                                                                                                    2. Communication Protocol Threats
                                                                                                                                      1. OpenFlow Protocol Vulnerabilities
                                                                                                                                        1. Message Forgery Attacks
                                                                                                                                          1. Flow Mod Message Manipulation
                                                                                                                                            1. Statistics Request Exploitation
                                                                                                                                              1. Barrier Message Abuse
                                                                                                                                              2. Northbound API Vulnerabilities
                                                                                                                                                1. API Authentication Bypass
                                                                                                                                                  1. API Authorization Failures
                                                                                                                                                    1. API Rate Limiting Bypass
                                                                                                                                                      1. API Input Validation Failures
                                                                                                                                                      2. Management Protocol Vulnerabilities
                                                                                                                                                        1. NETCONF Security Weaknesses
                                                                                                                                                          1. SNMP Exploitation
                                                                                                                                                            1. SSH Protocol Attacks
                                                                                                                                                              1. TLS/SSL Vulnerabilities
                                                                                                                                                              2. Inter-Controller Protocol Vulnerabilities
                                                                                                                                                                1. Clustering Protocol Attacks
                                                                                                                                                                  1. State Synchronization Manipulation
                                                                                                                                                                    1. Leader Election Attacks
                                                                                                                                                                      1. Consensus Algorithm Exploitation

                                                                                                                                                                  Previous

                                                                                                                                                                  1. Introduction to Software-Defined Networking and Security Fundamentals

                                                                                                                                                                  Go to top

                                                                                                                                                                  Next

                                                                                                                                                                  3. SDN Infrastructure Security Implementation