Software Defined Networks (SDNs) are an appealing platform for network security applications. However, existing approaches to building security applications on SDNs are not practical because of performance and deployment challenges. Network security applications often need to analyze and process traffic in more advanced ways than SDN data plane implementations, such as OpenFlow, allow. Much of ...

Ideally, by enabling multi-tenancy, network virtualization allows to improve resource utilization, while providing performance isolation: although the underlying resources are shared, the virtual network appears as a dedicated network to the tenant. However, providing such an illusion is challenging in practice, and over the last years, many expedient approaches have been proposed to provide pe...

and security, which calls for deep innovations on network protocols and infrastructures. However, the distributed controlling mechanism, especially the bundle of control plane and the data plane within network devices, sharply restricts such evolutions. In response, the software-defined networking (SDN), an emerging networking paradigm, proposes to decouple the control and data planes, producin...

Anreise mit öffentlichen Verkehrsmitteln Vom Lübecker Hauptbahnhof aus fährt ein Regionalzug zum Haltepunkt Lübeck-St. Jürgen (Fahrzeit 6 min.), von dem aus man nach 10-15 Minuten Fußweg das Audimax-Gebäude erreicht. Dieser führt in südlicher Richtung den Mönkhofer Weg‘ hinunter (in dieser Richtung sind Einfamilienhäuser an der Straße). Alternativ kann man vom Hbf. auch den Bus nehmen, der dire...

Software Defined Networking (SDN) breaks the barrier of Internet innovation and has attracted tremendous attentions from both industrial and academic communities. Although OpenFlow is the de factor SDN protocol nowadays, which defines the interface between the data plane switches and the control plane controllers, there are emerging SDN proposals. Even for OpenFlow itself, it keeps evolving. As...

We present a software-defined fragmentation-aware elastic optical network, in which an extended OpenFlow-based control plane intelligently routes connection requests to avoid spectrum fragmentation. The overall feasibility and efficiency of the proposed scenario is validated by using both numerical simulation and experimental demonstration. Introduction Optical networks are evolving from a fixe...

This article thoroughly details large-scale real world experiments using Software-Defined Networking in the testbed setup. More precisely, it provides a description of the foundation technology behind these experiments, which in turn is focused around OpenFlow and on the OFELIA testbed. In this testbed preliminary experiments were performed in order to tune up settings and procedures, analysing...

End-to-end network measurement tools are gaining increasing importance in many Internet services. These tools were designed, however, without prior security consideration which renders their extracted network estimates questionable, given the current adversarial Internet. In this paper, we highlight the major security vulnerabilities of existing end-to-end measurement tools and we sketch possib...