In this repo you will find vIFC, a conceptual architecture for Information FlowControl (IFC) policy enforcement in lightweight programmabledata planes (PDP) virtualization solutions. In contrast to existing solutions for preventing Cross-App Poisoning Attacks (CAP) like ProvSDN, our solution can monitor and prevent CAP attackslaunched against lightweight virtual switches emulated by a general-purpose switch program or composed in a single switch program.
[1] Guilherme Bueno, Mateus Saquetti, José Rodrigo Azambuja, WevertonCordeiro. 2020. Defending Lightweight Virtual Switches from Cross-AppPoisoning Attacks with vIFC. InACM Special Interest Group on Data Com-munication (SIGCOMM ’20 Demos and Posters), August 10–14, 2020, VirtualEvent, USA.ACM, New York, NY, USA, 3 pages. https://doi.org/10.1145/3405837.3411380
[2] Benjamin E. Ujcich, Samuel Jero, Anne Edmundson, Qi Wang, Richard Skowyra,James Landry, Adam Bates, William H. Sanders, Cristina Nita-Rotaru, and HamedOkhravi. 2018. Cross-App Poisoning in Software-Defined Networking. InPro-ceedings of the 2018 ACM SIGSAC Conference on Computer and CommunicationsSecurity (CCS ’18). ACM, New York, NY, USA, 648-663.