Dynamic Security with SDN: Opportunities, Challenges, and Lessons Learned
Cristina Nita-Rotaru · 2022
SDN paradigm to create and enforce dynamic security mechanisms. In the first part of the talk, I will present NetViews [1], a framework to enforce least-privilege network access control policies where each host has a different, limited view of the other hosts and services within a network. Our evaluation shows that NetViews has network latency and throughput comparable to baseline reactive forwarding. Furthermore, an optimization for multi-connection flows significantly reduces both redundant access control checks and forwarding state storage in switches, making NetViews a practical primitive for removing the reliance on security perimeters within enterprise networks.