ACM SIGCOMM 2018 Workshop on Security in Softwarized Networks: Prospects and Challenges (SecSoN 2018)

Workshop Program

Friday, August 24, 2018, InterContinental

9:30 am - 9:40 am Opening

Location: InterContinental, Panorama Room I

Opening

9:40 am - 10:30 am Keynote: How about Softwarized Networks: Security Chances and Challenges

Speaker: Anja Feldmann (MPI-INF, Germany)

Location: InterContinental, Panorama Room I

10:30 am - 11:00 am Tea/Coffee Break

Location: InterContinental, Pre-Function Area
Tea/Coffee Break

11:00 am - 12:40 pm Session I: Isolation, Verification and Trust

Location: InterContinental, Panorama Room I

Session I: Isolation, Verification and Trust

11:00 am - 11:25 am

Virtual Network Isolation: Are We There Yet?

Kashyap Thimmaraju (TU Berlin, Germany), Stefan Schmid (Univie, Austria), Gábor Rétvári (BME, Hungary)

11:25 am - 11:50 am

Practical Authentication and Access Control for Software-Defined Networking over Optical Networks

Joo Yeon Cho, Thomas Szyrkowiec (ADVA, Germany)

11:50 am - 12:15 pm

Trust Modelling in 5G Mobile Networks

Mike Surridge, Gianluca Correndo, Ken Meacham, Juri Papay, Stephen C. Phillips, Stefanie Wiegand, Toby Wilkinson (IT Innovation, UK)

12:15 pm - 12:40 pm

AEGIS: An Automated Permission Generation and Verification System for SDN

Heedo Kang, Seungwon Shin (KAIST, South Korea), Vinod Yegneswaran, Shalini Ghosh, Phillip Porras (SRI, USA)

12:40 pm - 2:00 pm Lunch Break

Location: InterContinental, Pre-Function Area
Lunch Break

2:00 pm - 3:15 pm Session II: Offloading

Location: InterContinental, Panorama Room I

Session II: Offloading

2:00 pm - 2:25 pm

Offloading Security Services to the Cloud Infrastructure

Paul Chaignon (Orange and Inria, France), Diane Adjavon (EURECOM and Orange, France), Kahina Lazri (Orange, France), Jérôme François (Inria, France), Olivier Festor (UL and Inria, France)

2:25 pm - 2:50 pm

HEX Switch: Hardware-Assisted Security Extensions of OpenFlow

Taejune Park (KAIST, South Korea), Zhaoyan Xu (StackRox, USA), Seungwon Shin (KAIST, South Korea)

2:50 pm - 3:15 pm

Invited Talk: Why Considering the Network Alone is Not Sufficient for Network Security

Claas Lorenz (genua, Germany)

3:15 pm - 3:45 pm Tea/Coffee Break

Location: InterContinental, Pre-Function Area
Tea/Coffee Break

3:45 pm - 4:35 pm Session III: Testing and Prevention

Location: InterContinental, Panorama Room I

Session III: Testing and Prevention

3:45 pm - 4:10 pm

Preventing Malicious SDN Applications From Hiding Adverse Network Manipulations

Christian Röpke, Thorsten Holz (RUB, Germany)

4:10 pm - 4:35 pm

High Coverage Testing of Softwarized Networks

Santhosh Prabhu, Gohar Irfan Chaudhry, Brighten Godfrey, Matthew Caesar (UIUC, USA)

4:35 pm - 4:40 pm Mini-Break

Location: InterContinental, Pre-Function Area
Mini-Break

4:40 pm - 5:40 pm Panel and Open Discussion: Security and Softwarized Networks: One Step Further or One Step Back?

Location: InterContinental, Panorama Room I

Panelists:

Georg Carle (TU Munich), Claas Lorenz (genua Ltd), and Paul Chaignon (Orange Labs)

Bios:

Georg Carle is professor at the Department of Informatics at Technical University of Munich, Germany, holding the chair of Network Architectures and Services. He studied electrical engineering at University of Stuttgart. Studies abroad included a Master of Science in Digital Systems at Brunel University, London, and a project at Ecole Nationale Superieure des Telecommunications, Paris. From 1992 to 1996, he did his PhD at the department of Computer Science at University of Karlsruhe. Subsequently, he worked as postdoctoral researcher at Institut Eurecom, Sophia Antipolis, France, supported by a scholarship from the European Commission. From there, he moved to Berlin, working for five years at the Fraunhofer Institute for Open Communication Systems, and teaching at Technical University of Berlin. In 2003, he joined University of Tübingen, founding the newly established chair on computer networks and internet. After five at University of Tübingen, in 2008 he moved to Technical University of Munich. His work covers design and implementation of Internet components, with special emphasis on measurements, network security, and architectures for trustworthy networked systems.

Claas Lorenz is a technology analyst and research fellow with the genua Ltd. which is a German vendor of high security networking solutions. His research is centered around understanding and evaluating technology trends in the domains of networking and security. Currently, he is investigating on SDN security including secure SDN operations and leveraging of SDN capabilities for security tasks.

Paul Chaignon is a research engineer in the network security team at Orange Labs in France. He received his MSc degree in Computer Science from the National Institute for Applied Sciences of Rennes, a Grande École of engineering. He is currently pursuing a doctoral degree on security monitoring in programmable networks with the Inria institute and the University of Lorraine under the advisory of Professor Olivier Festor.

5:40 pm - 5:45 pm Closing

Location: InterContinental, Panorama Room I

Closing

Call for Papers

The First Workshop on Security in Softwarized Networks: Prospects and Challenges (SecSoN) will be held in conjunction with ACM SIGCOMM 2018 in Budapest, Hungary, on August 20-24, 2018.

Operators and enterprises in general are increasingly moving towards a softwarization of their networks. Former dedicated network elements are virtualized and placed on commercial-off-the-shelf hardware. Technologies for softwarization are Software Defined Networking (SDN) and Network Function Virtualization (NFV). They allow for a more efficient management of the network. Whereas NFV replaces the tightly integrated middlebox appliances by flexible Virtualized Network Functions (VNFs) running as software instances on standard servers, SDN enables a fine-granular and programmable selection and redirection of flows in the network. On one hand, this softwarization reduces the costs for network equipment. On the other hand, it broadens the attack surface as novel networking devices and protocols are deployed, which needs to be considered during the risk assessment. Especially due to their critical role within the softwarized management of the network, these devices and protocols are high ranked targets for potential attackers and thus, require extensive testing and hardening. In addition, the adaptation of these technologies in enterprise networks remains limited. This is due to the fact, that the integration of new technologies into an existing network infrastructure is a highly complex task, as the compatibility with systems such as network management and cloud management must be assured for production environments.

SecSoN 2018 will focus on the prospects and challenges of softwarized networking with particular attention to the following topics.

List of Topics

Securing softwarized network architectures and virtualized environments
Security for 5G, particularly secure network slicing and isolation
Integration of hardware security components in a softwarized world
Cognitive and automated network security management
Integration of programmable data planes and stateful data path solutions of security functions, e.g., firewalls, intrusion detection systems
SDN/NFV interface hardening
Pentesting and test automation in softwarized networks
Security considerations for placement and orchestration
Security monitoring of and with softwarized networks and threat analysis
Trust relationships between softwarized entities
Forensics, attack analysis and risk evaluation methods tailored to softwarized networks
Security events processing and configuration verification and validation

Submission Instructions

Submissions must be original, unpublished work, and not under consideration at another conference or journal. Submitted papers must be at most six (6) pages long, including all figures, tables, references, and appendices in two-column 10pt ACM format. Papers must include authors names and affiliations for single-blind peer reviewing by the PC. Authors of accepted papers are expected to present their papers at the workshop.

Please submit your paper via https://sigcomm18secson.hotcrp.com/.

Authors Take Note

The official publication date is the date the proceedings are made available in the ACM Digital Library. This date may be up to TWO WEEKS prior to the first day of the conference. The official publication date affects the deadline for any patent filings related to published work.

Registration

Attendance of the workshop is by open registration and subject to the same registration fees and rules as all the other SIGCOMM 2018 workshops. The registrants of the workshop may freely attend any workshop on the same day.