NeTS: Small: Detecting Races in SDN Control Plane

软件定义网络(SDN)已迅速成为构建未来互联网的一种有前途的解决方案。当前的传统网络设备通常是专有的、封闭的和复杂的平台，因此严重抑制了网络领域的创新。相比之下，SDN旨在将智能控制平面(控制器)从交换结构中分离出来，为快速开放创新和快速创建定制服务带来巨大机遇。在SDN中，控制器扮演核心角色，充当整个网络的大脑。因此，它们的可靠和安全运行至关重要。遗憾的是，网络事件的异步性和SDN控制器复杂的体系结构使其容易出现难以发现但严重的数据竞争漏洞，这会给整个SDN网络带来严重的可靠性和安全问题。在主要调查人员(PI)的初步调查中，他们发现控制平面的数据竞争漏洞会极大地降低SDN的可靠性和安全性，如导致系统崩溃、拒绝关键网络服务、干扰服务链或泄露隐私网络信息。这些对于SDN技术部署是不可接受的。不幸的是，严重缺乏系统地检测SDN控制平面中这些有害的并发错误的技术。这项工作旨在解决这些问题。首先，本项目将对主流的SDN控制器进行系统的研究，并开发一个抽象的因果关系模型来捕捉SDN控制平面的独特的先发制人语义，用于竞争检测。其次，该项目将为SDN控制平面开发首个动态竞速检测工具，并将目标对准Funddlight、Onos和OpenDaylight等主流控制器，以最大限度地影响SDN社区。第三，该项目将设计新的技术来处理SDN控制器动态执行中的缺失事件，以减少错误警报和更完整的竞争检测。最后，PI将扩展技术以检测广泛的并发错误。该项目的目标是为SDN控制平面开发一个可靠性和安全性模型。PIS一直在开发与网络安全、SDN和软件分析相关的课程。私人投资机构将招收和教育少数族裔和代表性不足的学生。这些团队处于有利地位，可以帮助塑造学术界SDN可靠性/安全研究和教育的格局，并影响行业。

Software Defined Networking (SDN) has rapidly emerged as a promising solution to building the future Internet. Current legacy network devices are typically proprietary, closed, and complex platforms, which as a result have severely throttled innovation in networking. SDN in contrast is designed to separate intelligent control plane (controller) from switching fabrics, ushering in enormous opportunities for rapid open innovations and quick creation of customized services. In SDN, the controllers play a central role, acting as the brain of the entire network. Thus, the reliable and secure operation of them is of extreme importance. Unfortunately, the asynchrony of network events and the complex architecture of SDN controllers make them prone to hard-to-find yet serious data race bugs, that can cause serious reliability and security issues to the whole SDN network.In the principal investigators' (PIs) initial investigation, they found that data race bugs in the control plane can greatly reduce the reliability and security of SDN, e.g., causing system crashes, denying critical network services, interfering with service chains, or leaking privacy network information. These are not acceptable for SDN technology deployment. Unfortunately there is a serious lack of techniques to detect systematically these harmful concurrency bugs in the SDN control plane. This work seeks to address these issues. First, this project will conduct a systematic investigation of mainstream SDN controllers and develop an abstracted causality model to capture the unique happens-before semantics of the SDN control plane for race detection. Second, the project will develop the first dynamic race detection tool for the SDN control plane and will target mainstream controllers, such as Floodlight, ONOS and OpenDaylight, to maximize the impact on the SDN community. Third, this project will design new techniques to handle missing events in the dynamic execution of SDN controllers to reduce false alarms and for more complete race detection. Finally, the PIs will extend the techniques to detect a broad range of concurrency bugs.The goal of the project is to develop a reliability and security model for the SDN control plane. The PIs have been developing network security, SDN, and software analysis related courses. The PIs will recruit and educate minorities and underrepresented students. The teams are well positioned to help shape the landscape of SDN reliability/security research and education in the academic communities and to influence the industry.