An Effective Table-Overflow Attack and Defense in Software-Defined Networking
Jianfeng Xu, Liming Wang, Song Chen, Zhen Xu · 2019
With the increasing prominence of Software-Defined Networking (SDN), new attacks have been demonstrated which can exhaust the SDN switch's flow tables. These table-overflow attacks degrade or disable the switch and ultimately disrupt the availability of network services. In response, solutions have been developed to detect and mitigate such attacks. In this paper, we outline the existing solutions, analyze their deficiencies, and present a new attack, crossfire table-overflow, that can successfully bypass them. We then develop and implement FireGuard to make SDN resilient to such an attack.