{"id":"https://openalex.org/W2773651084","doi":"https://doi.org/10.1145/3134600.3134603","title":"A Security-Mode for Carrier-Grade SDN Controllers","display_name":"A Security-Mode for Carrier-Grade SDN Controllers","publication_year":2017,"publication_date":"2017-12-04","ids":{"openalex":"https://openalex.org/W2773651084","doi":"https://doi.org/10.1145/3134600.3134603","mag":"2773651084"},"language":"en","primary_location":{"id":"doi:10.1145/3134600.3134603","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3134600.3134603","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 33rd Annual Computer Security Applications Conference","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5013027829","display_name":"Changhoon Yoon","orcid":"https://orcid.org/0000-0003-1625-1958"},"institutions":[{"id":"https://openalex.org/I4210099236","display_name":"Kootenay Association for Science & Technology","ror":"https://ror.org/011pv9p44","country_code":"CA","type":"nonprofit","lineage":["https://openalex.org/I4210099236"]},{"id":"https://openalex.org/I157485424","display_name":"Korea Advanced Institute of Science and Technology","ror":"https://ror.org/05apxxy63","country_code":"KR","type":"education","lineage":["https://openalex.org/I157485424"]}],"countries":["CA","KR"],"is_corresponding":true,"raw_author_name":"Changhoon Yoon","raw_affiliation_strings":["KAIST"],"affiliations":[{"raw_affiliation_string":"KAIST","institution_ids":["https://openalex.org/I4210099236","https://openalex.org/I157485424"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084473174","display_name":"Seungwon Shin","orcid":"https://orcid.org/0000-0002-1077-5606"},"institutions":[{"id":"https://openalex.org/I4210099236","display_name":"Kootenay Association for Science & Technology","ror":"https://ror.org/011pv9p44","country_code":"CA","type":"nonprofit","lineage":["https://openalex.org/I4210099236"]},{"id":"https://openalex.org/I157485424","display_name":"Korea Advanced Institute of Science and Technology","ror":"https://ror.org/05apxxy63","country_code":"KR","type":"education","lineage":["https://openalex.org/I157485424"]}],"countries":["CA","KR"],"is_corresponding":false,"raw_author_name":"Seungwon Shin","raw_affiliation_strings":["KAIST"],"affiliations":[{"raw_affiliation_string":"KAIST","institution_ids":["https://openalex.org/I4210099236","https://openalex.org/I157485424"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022253423","display_name":"Phillip Porras","orcid":"https://orcid.org/0000-0003-4661-2443"},"institutions":[{"id":"https://openalex.org/I1298353152","display_name":"SRI International","ror":"https://ror.org/05s570m15","country_code":"US","type":"nonprofit","lineage":["https://openalex.org/I1298353152"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Phillip Porras","raw_affiliation_strings":["SRI International"],"affiliations":[{"raw_affiliation_string":"SRI International","institution_ids":["https://openalex.org/I1298353152"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085002486","display_name":"Vinod Yegneswaran","orcid":"https://orcid.org/0000-0003-0718-6605"},"institutions":[{"id":"https://openalex.org/I1298353152","display_name":"SRI International","ror":"https://ror.org/05s570m15","country_code":"US","type":"nonprofit","lineage":["https://openalex.org/I1298353152"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Vinod Yegneswaran","raw_affiliation_strings":["SRI International"],"affiliations":[{"raw_affiliation_string":"SRI International","institution_ids":["https://openalex.org/I1298353152"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078063481","display_name":"Heedo Kang","orcid":"https://orcid.org/0000-0002-7692-2808"},"institutions":[{"id":"https://openalex.org/I157485424","display_name":"Korea Advanced Institute of Science and Technology","ror":"https://ror.org/05apxxy63","country_code":"KR","type":"education","lineage":["https://openalex.org/I157485424"]},{"id":"https://openalex.org/I4210099236","display_name":"Kootenay Association for Science & Technology","ror":"https://ror.org/011pv9p44","country_code":"CA","type":"nonprofit","lineage":["https://openalex.org/I4210099236"]}],"countries":["CA","KR"],"is_corresponding":false,"raw_author_name":"Heedo Kang","raw_affiliation_strings":["KAIST"],"affiliations":[{"raw_affiliation_string":"KAIST","institution_ids":["https://openalex.org/I4210099236","https://openalex.org/I157485424"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5014210622","display_name":"Martin Fong","orcid":null},"institutions":[{"id":"https://openalex.org/I1298353152","display_name":"SRI International","ror":"https://ror.org/05s570m15","country_code":"US","type":"nonprofit","lineage":["https://openalex.org/I1298353152"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Martin Fong","raw_affiliation_strings":["SRI International"],"affiliations":[{"raw_affiliation_string":"SRI International","institution_ids":["https://openalex.org/I1298353152"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016964657","display_name":"Brian O\u2019Connor","orcid":"https://orcid.org/0000-0001-6247-5982"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Brian O'Connor","raw_affiliation_strings":["Open Networking Laboratory"],"affiliations":[{"raw_affiliation_string":"Open Networking Laboratory","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5089761842","display_name":"Thomas Vachuska","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Thomas Vachuska","raw_affiliation_strings":["Open Networking Laboratory"],"affiliations":[{"raw_affiliation_string":"Open Networking Laboratory","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":8,"corresponding_author_ids":["https://openalex.org/A5013027829"],"corresponding_institution_ids":["https://openalex.org/I157485424","https://openalex.org/I4210099236"],"apc_list":null,"apc_paid":null,"fwci":3.5224,"has_fulltext":false,"cited_by_count":31,"citation_normalized_percentile":{"value":0.93841349,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":93,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"461","last_page":"473"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11478","display_name":"Caching and Content Delivery","score":0.996399998664856,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10101","display_name":"Cloud Computing and Resource Management","score":0.9905999898910522,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7701039910316467},{"id":"https://openalex.org/keywords/node","display_name":"Node (physics)","score":0.530833899974823},{"id":"https://openalex.org/keywords/virtualization","display_name":"Virtualization","score":0.5224134922027588},{"id":"https://openalex.org/keywords/modular-design","display_name":"Modular design","score":0.510630190372467},{"id":"https://openalex.org/keywords/controller","display_name":"Controller (irrigation)","score":0.5054242610931396},{"id":"https://openalex.org/keywords/security-policy","display_name":"Security policy","score":0.48069149255752563},{"id":"https://openalex.org/keywords/enforcement","display_name":"Enforcement","score":0.4637399911880493},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.4291384816169739},{"id":"https://openalex.org/keywords/network-management","display_name":"Network management","score":0.4165794551372528},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.3774436414241791},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.27144497632980347},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.267397940158844},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.23912736773490906},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.07974046468734741}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7701039910316467},{"id":"https://openalex.org/C62611344","wikidata":"https://www.wikidata.org/wiki/Q1062658","display_name":"Node (physics)","level":2,"score":0.530833899974823},{"id":"https://openalex.org/C513985346","wikidata":"https://www.wikidata.org/wiki/Q270471","display_name":"Virtualization","level":3,"score":0.5224134922027588},{"id":"https://openalex.org/C101468663","wikidata":"https://www.wikidata.org/wiki/Q1620158","display_name":"Modular design","level":2,"score":0.510630190372467},{"id":"https://openalex.org/C203479927","wikidata":"https://www.wikidata.org/wiki/Q5165939","display_name":"Controller (irrigation)","level":2,"score":0.5054242610931396},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.48069149255752563},{"id":"https://openalex.org/C2779777834","wikidata":"https://www.wikidata.org/wiki/Q4202277","display_name":"Enforcement","level":2,"score":0.4637399911880493},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.4291384816169739},{"id":"https://openalex.org/C129763632","wikidata":"https://www.wikidata.org/wiki/Q1454667","display_name":"Network management","level":2,"score":0.4165794551372528},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3774436414241791},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.27144497632980347},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.267397940158844},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.23912736773490906},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.07974046468734741},{"id":"https://openalex.org/C66938386","wikidata":"https://www.wikidata.org/wiki/Q633538","display_name":"Structural engineering","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C6557445","wikidata":"https://www.wikidata.org/wiki/Q173113","display_name":"Agronomy","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3134600.3134603","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3134600.3134603","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 33rd Annual Computer Security Applications Conference","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G5801026062","display_name":null,"funder_award_id":"1446426","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":22,"referenced_works":["https://openalex.org/W80075259","https://openalex.org/W1500460345","https://openalex.org/W1882012874","https://openalex.org/W2019419295","https://openalex.org/W2022758041","https://openalex.org/W2036114538","https://openalex.org/W2040234252","https://openalex.org/W2074616737","https://openalex.org/W2084939632","https://openalex.org/W2089939717","https://openalex.org/W2091846236","https://openalex.org/W2122109510","https://openalex.org/W2122695394","https://openalex.org/W2137845741","https://openalex.org/W2147118406","https://openalex.org/W2156580773","https://openalex.org/W2166195138","https://openalex.org/W2528154188","https://openalex.org/W2604258491","https://openalex.org/W2798915702","https://openalex.org/W2912606234","https://openalex.org/W3099172018"],"related_works":["https://openalex.org/W2378076731","https://openalex.org/W4286888643","https://openalex.org/W3169265188","https://openalex.org/W2267484144","https://openalex.org/W3210795196","https://openalex.org/W4226026301","https://openalex.org/W2088988140","https://openalex.org/W1907653724","https://openalex.org/W3171015545","https://openalex.org/W2473372874"],"abstract_inverted_index":{"Management":[0],"approaches":[1],"to":[2,173,192],"modern":[3],"networks":[4,10,56],"are":[5,70,101],"increasingly":[6],"influenced":[7],"by":[8,72],"software-defined":[9],"(SDNs),":[11],"and":[12,28,39,65,83,96,140,164],"this":[13],"increased":[14],"influence":[15],"is":[16],"reflected":[17],"in":[18,125],"the":[19,59,118,132,157,183],"growth":[20],"of":[21,37,93,109,134,160,171],"commercially":[22],"available":[23],"innovative":[24],"SDN-based":[25],"switches,":[26],"controllers":[27],"applications.":[29,114],"To":[30],"date,":[31],"there":[32],"have":[33],"been":[34],"a":[35,106,135],"number":[36],"commercial":[38],"open-source":[40],"SDN":[41],"operating":[42],"systems":[43],"(NOS)":[44],"introduced":[45],"for":[46,105,122,146,167,194],"various":[47],"purposes,":[48],"including":[49],"distributed":[50,111,127,148],"controller":[51,77,128],"frameworks":[52,69],"targeting":[53],"large,":[54],"carrier-grade":[55],"such":[57,126],"as":[58],"Open":[60],"Network":[61],"Operating":[62],"System":[63],"(ONOS)":[64],"OpenDayLight":[66],"(ODL).":[67],"These":[68],"distinguished":[71],"their":[73,88,165],"(i)":[74],"elastic":[75],"cluster":[76],"architecture,":[78],"(ii)":[79],"network":[80,112,136],"virtualization":[81],"support,":[82,99],"(iii)":[84],"modular":[85],"design.":[86],"Given":[87],"flexible":[89],"design,":[90],"growing":[91],"list":[92],"supported":[94],"features,":[95],"collaborative":[97],"community":[98],"these":[100],"attractive":[102],"hosting":[103],"platforms":[104],"wide":[107],"range":[108],"third-party":[110],"management":[113],"This":[115],"paper":[116],"identifies":[117],"common":[119],"security":[120,143,162],"requirements":[121],"policy":[123],"enforcement":[124],"environments.":[129],"We":[130,155],"present":[131],"design":[133],"application":[137],"permission-enforcement":[138],"model":[139],"an":[141,152],"integrated":[142],"subsystem":[144],"(SM-ONOS)":[145],"managing":[147],"applications":[149],"running":[150],"on":[151],"ONOS":[153],"controller.":[154],"discuss":[156],"underlying":[158],"motivations":[159],"its":[161],"extensions":[163],"implications":[166],"improving":[168],"our":[169],"understanding":[170],"how":[172],"securely":[174],"manage":[175],"large-scale":[176],"SDNs.":[177],"Our":[178],"performance":[179],"assessments":[180],"demonstrate":[181],"that":[182],"security-mode":[184],"extension":[185],"imposed":[186],"reasonable":[187],"overheads":[188],"(ranging":[189],"from":[190],"5":[191],"20%":[193],"1-7":[195],"node":[196],"clusters).":[197]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":4},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":5},{"year":2019,"cited_by_count":7},{"year":2018,"cited_by_count":5}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}