Data-plane security applications in adversarial settings

High-speed programmable switches have emerged as a promising building block for developing performant data-plane applications. In this paper, we argue that the resource constraints and programming model of hardware led to developers adopting problematic design patterns, whose security implications are not widely understood. We bridge gap by identifying major challenges common pitfalls in switch-based applications adversarial settings. Examining five recently-proposed applications, find adversaries can exploit these completely bypass protection were designed provide, or disrupt system operations introducing collateral damage.