Explore a critical class of SDN control plane integrity attacks called cross-app poisoning (CAP) in this 24-minute conference talk. Delve into how unprivileged apps can manipulate shared control plane states to deceive privileged apps into performing unauthorized actions. Examine the limitations of Role-Based Access Control (RBAC) in SDN environments, analyze the threat model, and understand CAP's implementation in ONOS. Learn about CAP gadgets, PROVSDN, and review both attack and performance evaluations. Gain valuable insights into SDN security challenges and potential mitigation strategies.
Cross-App Poisoning in Software-Defined Networking