@inproceedings{d018d04656b24791bd4906e5164ecb00,
title = "Preserving confidentiality during the migration of virtual SDN topologies: A formal approach",
abstract = "Network virtualization provides a flexible solution to reduce costs, share network resources and improve recovery time upon failure. An important part of virtual network management consists in migrating them in order to optimize resource allocation and react to link failures. However, the migration process might entail the loss of security properties in the virtual network, such as confidentiality. In this paper, we present the first approach combining formal models and virtualization to prove confidentiality preservation during the migration process. We describe the network environment, the migration process and the confidentiality with a set of logical predicates that will be used by SNARK to obtain the formal proof of the preservation. We validate our theoretical approach by exhibiting confidentiality violation detection on an illustrative use case.",
keywords = "Formal verification, Intrusion detection, Network security, Software defined networking",
author = "Fabien Charmet and Richard Waldinger and Gregory Blanc and Christophe Kiennert and Khalifa Toumi",
note = "Publisher Copyright: {\textcopyright} 2017 IEEE.; 16th IEEE International Symposium on Network Computing and Applications, NCA 2017 ; Conference date: 30-10-2017 Through 01-11-2017",
year = "2017",
month = dec,
day = "8",
doi = "10.1109/NCA.2017.8171392",
language = "English",
series = "2017 IEEE 16th International Symposium on Network Computing and Applications, NCA 2017",
publisher = "Institute of Electrical and Electronics Engineers Inc.",
pages = "1--5",
editor = "Avresky, \{Dimiter R.\} and Aris Gkoulalas-Divanis and Avresky, \{Dimiter R.\} and Correia, \{Miguel P.\}",
booktitle = "2017 IEEE 16th International Symposium on Network Computing and Applications, NCA 2017",
}