SDN An opportunity for security by design?

Transcription

1 SDN An opportunity for security by design? IEEE NetSoft Sec-VirtNet 2016 Sandra Scott-Hayward 10 June

2 Presenter Bio Dr Sandra Scott-Hayward, CEng CISSP CEH OCSA Senior Research Engineer Network Security, Queen s University Belfast ONF Research Associate Vice-Chair, ONF Security WG Project Leader, OSSDN Project Delta Research Interests: Network Security Security Protocols and Architectures Software-Defined Networking Optimization Techniques Wireless Communication Introduction Network Security - SDN Security Secure Network Vision

3 Centre for Secure Information Technologies Est.2009, Based in The ECIT Institute Initial funding over 30M (CSIT 2-38M) GLOBAL INNOVATION HUB FOR CYBER SECURITY 90 People Researchers Engineers Business Development Largest UK University lab for cyber security technology research GCHQ Academic Centre of Excellence Industry Informed Open Innovation Model Strong international links ETRI, CyLab, GTRI, SRI International Cyber Security Technology Summit Introduction Network Security - SDN Security Secure Network Vision

4 Outline of the Talk Network Security Today Network Security Tomorrow (or soon!) SDN Security Challenges and Opportunities SDN Secure Network Vision Introduction Network Security - SDN Security Secure Network Vision

5 Network Security - Today Cloud IoT 5G Industry 4.0 ICS Smart Grid Introduction Network Security - SDN Security Secure Network Vision

6 Introduction Network Security - SDN Security Secure Network Vision Network Security - Today

7 Introduction Network Security - SDN Security Secure Network Vision Network Security Tomorrow

8 Introduction Network Security - SDN Security Secure Network Vision No Interruptions

9 SDN Security

10 SDN Characteristics SDN characteristics can counter the lack of visibility and manageability; Virtualized services supported by SDN control; S. Scott-Hayward, S. Natarajan, S. Sezer, A Survey of Security in Software Defined Networks, IEEE Communications Surveys & Tutorials, Introduction Network Security - SDN Security Secure Network Vision

11 Introduction Network Security - SDN Security Secure Network Vision SDN Potential Attacks and Vulnerabilities

12 Introduction Network Security - SDN Security Secure Network Vision SDN Security Opportunities

13 Introduction Network Security - SDN Security Secure Network Vision SDN Security Solutions

14 SDN Security Evolution Dec. 2009: OpenFlow published (Stanford) Aug. 2012: FortNox (SRI) Jun. 2013: ITU-T SDN Security Questions Aug. 2014: 1 st ODL CVE (Raised by Gregory Pickett) Mar. 2015: Formalization of ODL Security Response Team Sept. 2015: Security-Mode ONOS Released (Drake) Apr. 2012: HSA (Stanford) Apr. 2013: OF Security Analysis (R. Kloti) ONF SecDG launched Nov. 2014: ONF SecDG becomes Working Group Aug. 2015: ODL Controller Shield Project launched May 2014: ODL Security Analysis Introduction Network Security - SDN Security Secure Network Vision

15 Secure Network Vision Exploiting the characteristics of SDN for the secure network vision Visibility and programmability can support - Flexible network configuration - Dynamic network reconfiguration Near-term: - Automate existing security model - Accelerate techniques in monitoring, analysis, detection and protection - Moving target defense dispersion, fractionalization and longer-term? Introduction Network Security - SDN Security Secure Network Vision

16 Call for Chapters Guide to Security in SDN and NFV Challenges, Opportunities, and Applications Chapter proposal due: 15 August 2016 Full chapters due: 20 November 2016 Submission Details: Contact: Introduction Network Security - SDN Security Secure Network Vision

17 Thank you! Questions?