SDN Switches Not Hard To Compromise, Researcher Says

Posted by timothy on Wednesday August 5, 2015 @11:36AM from the onie-contrary-as-they-say-in-bawlamer dept.

alphadogg writes: Software-defined switches hold a lot of promise for network operators, but new research due to be presented at Black Hat will show that security measures haven't quite caught up yet. Gregory Pickett, founder of the Chicago-based security firm Hellfire Security, has developed several attacks against network switches that use Onie, the Linux-based Open Network Install Environment that competes with OpenDaylight. Being able to exploit the vulnerability to put malware on SDN switches would have full visibility into all of the traffic running through the switch, enabling large-scale spying.

2 of 105 comments (clear)

Min score:

Reason:

Sort:

Re:Not Supprising by Mikkeles · 2015-08-05 12:24 · Score: 4, Insightful

So long as "features" count for more than security, this will continue.

--
Great minds think alike; fools seldom differ.
This is what happens when you move the control... by Zondar · 2015-08-05 12:42 · Score: 4, Insightful

... plane outside the confines of the device and make it communicate over a common (not hardened and not separate) channel/network.