{"id":"https://openalex.org/W2887655564","doi":"https://doi.org/10.1109/tnet.2018.2853593","title":"Security Policy Violations in SDN Data Plane","display_name":"Security Policy Violations in SDN Data Plane","publication_year":2018,"publication_date":"2018-08-01","ids":{"openalex":"https://openalex.org/W2887655564","doi":"https://doi.org/10.1109/tnet.2018.2853593","mag":"2887655564"},"language":"en","primary_location":{"id":"doi:10.1109/tnet.2018.2853593","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnet.2018.2853593","pdf_url":null,"source":{"id":"https://openalex.org/S62238642","display_name":"IEEE/ACM Transactions on Networking","issn_l":"1063-6692","issn":["1063-6692","1558-2566"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE/ACM Transactions on Networking","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100350165","display_name":"Qi Li","orcid":"https://orcid.org/0000-0001-8776-8730"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qi Li","raw_affiliation_strings":["Department of Computer Science, Tsinghua University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-8776-8730","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100639362","display_name":"Yanyu Chen","orcid":"https://orcid.org/0000-0002-2275-6912"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yanyu Chen","raw_affiliation_strings":["Department of Computer Science, Tsinghua University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5012129385","display_name":"Patrick P. C. Lee","orcid":"https://orcid.org/0000-0002-4501-4364"},"institutions":[{"id":"https://openalex.org/I177725633","display_name":"Chinese University of Hong Kong","ror":"https://ror.org/00t33hh48","country_code":"HK","type":"education","lineage":["https://openalex.org/I177725633"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Patrick P. C. Lee","raw_affiliation_strings":["Department of Computer Science and Engineering, The Chinese University of Hong Kong, Hong Kong"],"raw_orcid":"https://orcid.org/0000-0002-4501-4364","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, The Chinese University of Hong Kong, Hong Kong","institution_ids":["https://openalex.org/I177725633"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100771111","display_name":"Mingwei Xu","orcid":"https://orcid.org/0000-0002-4847-4585"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mingwei Xu","raw_affiliation_strings":["Department of Computer Science, Tsinghua University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5000596496","display_name":"Kui Ren","orcid":"https://orcid.org/0000-0003-3441-6277"},"institutions":[{"id":"https://openalex.org/I63190737","display_name":"University at Buffalo, State University of New York","ror":"https://ror.org/01y64my43","country_code":"US","type":"education","lineage":["https://openalex.org/I63190737"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kui Ren","raw_affiliation_strings":["Department of Computer Science and Engineering, University at Buffalo, The State University of New York, Buffalo, NY, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, University at Buffalo, The State University of New York, Buffalo, NY, USA","institution_ids":["https://openalex.org/I63190737"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.57,"has_fulltext":false,"cited_by_count":33,"citation_normalized_percentile":{"value":0.90205353,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":93,"max":99},"biblio":{"volume":"26","issue":"4","first_page":"1715","last_page":"1727"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8282301425933838},{"id":"https://openalex.org/keywords/header","display_name":"Header","score":0.7110757827758789},{"id":"https://openalex.org/keywords/forwarding-plane","display_name":"Forwarding plane","score":0.6651909351348877},{"id":"https://openalex.org/keywords/firewall","display_name":"Firewall (physics)","score":0.6602451205253601},{"id":"https://openalex.org/keywords/covert-channel","display_name":"Covert channel","score":0.5564725399017334},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.48680350184440613},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.4621966481208801},{"id":"https://openalex.org/keywords/rule-based-system","display_name":"Rule-based system","score":0.4437628388404846},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.43005573749542236},{"id":"https://openalex.org/keywords/packet-processing","display_name":"Packet processing","score":0.415421724319458},{"id":"https://openalex.org/keywords/control-channel","display_name":"Control channel","score":0.4115352928638458},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.373581200838089},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.14981207251548767},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.09381136298179626}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8282301425933838},{"id":"https://openalex.org/C48105269","wikidata":"https://www.wikidata.org/wiki/Q1141160","display_name":"Header","level":2,"score":0.7110757827758789},{"id":"https://openalex.org/C10597312","wikidata":"https://www.wikidata.org/wiki/Q5473302","display_name":"Forwarding plane","level":3,"score":0.6651909351348877},{"id":"https://openalex.org/C77714075","wikidata":"https://www.wikidata.org/wiki/Q5452017","display_name":"Firewall (physics)","level":5,"score":0.6602451205253601},{"id":"https://openalex.org/C29024540","wikidata":"https://www.wikidata.org/wiki/Q1476964","display_name":"Covert channel","level":5,"score":0.5564725399017334},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.48680350184440613},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4621966481208801},{"id":"https://openalex.org/C149271511","wikidata":"https://www.wikidata.org/wiki/Q1417149","display_name":"Rule-based system","level":2,"score":0.4437628388404846},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.43005573749542236},{"id":"https://openalex.org/C2779581428","wikidata":"https://www.wikidata.org/wiki/Q7122997","display_name":"Packet processing","level":3,"score":0.415421724319458},{"id":"https://openalex.org/C157607044","wikidata":"https://www.wikidata.org/wiki/Q5165851","display_name":"Control channel","level":3,"score":0.4115352928638458},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.373581200838089},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.14981207251548767},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.09381136298179626},{"id":"https://openalex.org/C115304011","wikidata":"https://www.wikidata.org/wiki/Q72755","display_name":"Schwarzschild radius","level":3,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C74650414","wikidata":"https://www.wikidata.org/wiki/Q11397","display_name":"Classical mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.0},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.0},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.0},{"id":"https://openalex.org/C124017977","wikidata":"https://www.wikidata.org/wiki/Q11412","display_name":"Gravitation","level":2,"score":0.0},{"id":"https://openalex.org/C138660444","wikidata":"https://www.wikidata.org/wiki/Q5607897","display_name":"Telecommunications link","level":2,"score":0.0},{"id":"https://openalex.org/C183915046","wikidata":"https://www.wikidata.org/wiki/Q1316152","display_name":"Charged black hole","level":4,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tnet.2018.2853593","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnet.2018.2853593","pdf_url":null,"source":{"id":"https://openalex.org/S62238642","display_name":"IEEE/ACM Transactions on Networking","issn_l":"1063-6692","issn":["1063-6692","1558-2566"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE/ACM Transactions on Networking","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.699999988079071}],"awards":[{"id":"https://openalex.org/G1191843724","display_name":null,"funder_award_id":"U1736209","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3540233580","display_name":null,"funder_award_id":"61625203","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4062712781","display_name":"\u57fa\u4e8e\u4f17\u5305\u7684\u7fa4\u4f53\u611f\u77e5\u9690\u79c1\u4fdd\u62a4\u7814\u7a76","funder_award_id":"61772236","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6827592809","display_name":"\u8f6f\u4ef6\u5b9a\u4e49\u7684\u7f51\u7edc\u9632\u5fa1\u7406\u8bba\u548c\u6280\u672f\u7814\u7a76","funder_award_id":"61572278","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":36,"referenced_works":["https://openalex.org/W133970975","https://openalex.org/W158224344","https://openalex.org/W570611244","https://openalex.org/W1462190747","https://openalex.org/W1551453263","https://openalex.org/W1590488181","https://openalex.org/W1675033504","https://openalex.org/W1882012874","https://openalex.org/W1917945289","https://openalex.org/W2019419295","https://openalex.org/W2020729428","https://openalex.org/W2023665096","https://openalex.org/W2045234005","https://openalex.org/W2087853663","https://openalex.org/W2103170502","https://openalex.org/W2127659081","https://openalex.org/W2144338762","https://openalex.org/W2148656332","https://openalex.org/W2151185692","https://openalex.org/W2157428729","https://openalex.org/W2170180420","https://openalex.org/W2186961980","https://openalex.org/W2295926982","https://openalex.org/W2308522195","https://openalex.org/W2324910104","https://openalex.org/W2412588955","https://openalex.org/W2575352857","https://openalex.org/W2789780249","https://openalex.org/W2790712558","https://openalex.org/W6606536520","https://openalex.org/W6635205284","https://openalex.org/W6637274776","https://openalex.org/W6639592347","https://openalex.org/W6646343585","https://openalex.org/W6686885839","https://openalex.org/W6697979233"],"related_works":["https://openalex.org/W3192984318","https://openalex.org/W2752279300","https://openalex.org/W2890137466","https://openalex.org/W52714575","https://openalex.org/W2294558967","https://openalex.org/W2773868590","https://openalex.org/W4301300682","https://openalex.org/W2514783202","https://openalex.org/W2296278067","https://openalex.org/W2795148745"],"abstract_inverted_index":{"Software-defined":[0],"networking":[1],"(SDN)":[2],"utilizes":[3],"a":[4],"centralized":[5],"controller":[6,236],"to":[7,12,39,48,84,90,102,114,132,167,274],"distribute":[8],"packet":[9,215,276],"processing":[10],"rules":[11,16,65,92,107,112,124,142,211],"network":[13],"switches.":[14],"However,":[15,79],"are":[17,125,143],"often":[18],"generated":[19],"by":[20,24,185],"the":[21,73,141,154,171,175,204,208,234,242,258,275],"applications":[22,201],"developed":[23],"different":[25],"organizations,":[26],"so":[27],"they":[28],"may":[29,262],"conflict":[30,55,156,223],"with":[31,41,110,233,241],"each":[32],"other":[33],"in":[34,51,72,76,120,137,145,158,224,257],"data":[35,74,147,259],"plane":[36,75,260],"and":[37,69,119,160,187,197,218,237,253,270],"lead":[38],"violations":[40],"security":[42,111],"rules.":[43],"The":[44],"problem":[45,157],"is":[46,98,129],"similar":[47],"firewall":[49,116],"conflicts":[50,136,256],"IP":[52],"networks.":[53],"Rule":[54],"resolution":[56],"should":[57],"incur":[58],"negligible":[59],"process":[60],"delay,":[61],"such":[62,134],"that":[63,180,248,261],"all":[64,194],"can":[66,250],"be":[67],"correctly":[68],"safely":[70],"enforced":[71],"real":[77,138,225],"time.":[78],"since":[80],"SDN":[81,106,146,159],"allows":[82],"users":[83],"use":[85],"more":[86,100],"than":[87,113],"35":[88],"fields":[89,217],"specify":[91],"(including":[93],"field":[94,122],"transition":[95,123],"rules),":[96],"it":[97,128],"much":[99],"complicated":[101],"prevent":[103,254],"enforcement":[104],"of":[105,268],"from":[108,200],"violating":[109],"resolve":[115,133],"rule":[117,135,155,168,189,195,222,228,255],"violation,":[118],"particular,":[121],"enforced.":[126],"Therefore,":[127],"extremely":[130],"difficult":[131],"time":[139,226],"before":[140,227],"installed":[144],"plane.":[148],"In":[149],"this":[150],"paper,":[151],"we":[152,173],"investigate":[153],"identify":[161],"new":[162],"covert":[163,176,182,264],"channel":[164,177,183],"attacks":[165,184],"due":[166],"conflicts.":[169,190],"To":[170],"end,":[172],"propose":[174],"defender":[178],"(CCD)":[179],"prevents":[181],"verifying":[186],"resolving":[188],"Specifically,":[191],"CCD":[192,232,249],"tracks":[193],"insertion":[196],"modification":[198],"messages":[199],"running":[202],"on":[203,213],"controller.":[205],"It":[206],"analyzes":[207],"correlation":[209],"among":[210],"based":[212],"multiple":[214],"header":[216],"resolves":[219],"any":[220],"identified":[221],"installation.":[229],"We":[230,246],"implement":[231],"Floodlight":[235],"evaluate":[238],"its":[239],"performance":[240],"real-world":[243],"Stanford":[244],"topology.":[245],"show":[247],"efficiently":[251],"detect":[252],"raise":[263],"channels":[265],"within":[266],"hundreds":[267],"microseconds":[269],"brings":[271],"small":[272],"overhead":[273],"delivery.":[277]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":6},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":6},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":9},{"year":2019,"cited_by_count":4}],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2025-10-10T00:00:00"}