r e e l l i n e sr e e l l i n e s › wp-content › uploads › 2019 › 09 › ... ·...

1
Control-plane Isolation and Recovery for a Secure SDN Architecture Takayuki Sasaki NEC Corporation Email: [email protected] Daniele E. Asoni ETH Z¤ urich Email: [email protected] Adrian Perrig ETH Z¤ urich Email: [email protected] AbstractSoftware Dened Networking (SDN) allows scalable and exible network management without requiring costly hard- ware changes. However, this technology is relatively new, and creates new security risks. More specically, in current SDN designs (1) a compromised component can affect the whole SDN network due to its centralized architecture, and (2) existing designs do not allow recovery of compromised components. To solve these problems, we propose a secure SDN architecture which (1) limits damage due to a compromised controller and switch processes by using strong software isolation mechanisms, and (2) allows recovery of compromised controller and switch processes by regularly and automatically rolling them back to a pristine state. We show detailed designs of these mechanisms. We discuss the main aspects of our system’s design and show preliminary evaluation results of a prototype implementation. I. I NTRODUCTION Software Dened Networking (SDN) is a paradigm that has recently gained tremendous importance. It allows cost- effective and dynamic network management by separating the control plane which manages the network components, from the data plane which handles end-user communication. Using this architecture, SDN can dynamically modify network congurations for handling topology changes, congestion con- trol, and security events. SDN is an infrastructure providing fundamental functions for data centers and ISP networks, thus its robustness is directly linked to security, availability, and performance of data centers and ISPs. SDN is often used today to establish mutually isolated virtual networks to achieve better security (protection against eavesdropping and data exltration, limitation of malware spread through compartmentalization, etc.), thanks to the data plane isolation it provides. However, the architecture of exist- ing SDN itself actually presents certain security deciencies in its design [10]. In particular, we consider the following two challenges which both constitute single points of failure that could be exploited by an attacker. 1) Both on the controller and on the switches, tasks related to different virtual networks or different applications are all handled by the same software component. This means that if such a component is compromised it can potentially harm the entire network. 2) These processes on the controller and switches typically run for a long time without interruption or reset: the consequence is that an adversary has a long time window to perform attacks and privilege escalation, and once the adversary succeeds, the target component will remain compromised for an extended period of time. From these two challenges it follows that an adversary can spread across an entire network and persistently control it. Furthermore, SDN is a logically centralized architecture, so if the controller is compromised the adversary immediately gains full control over the network. Some mechanisms to mitigate these problems have been proposed, but unfortunately they do not fully address the problems. FlowVisor [11] separates ows- pace and allows multiple controllers. However, it is insufcient because switches are not isolated, so a compromised switch can spread the contamination throughout the network. An integrity measurement mechanism of SDN controllers and/or switches [4] helps to identify malicious code. It only ensures boot-time integrity, however, whereas we want to achieve run- time integrity. To solve these problems, we propose a secure SDN archi- tecture that includes two key features. The rst is a mechanism to separate and isolate tasks in the control plane (existing SDN only performs isolation at the data plane), while the second is a recovery mechanism that allows network components to be rolled back to a pristine state at regular intervals. II. PROBLEM DESCRIPTION The goal of this paper is to provide a robust and secure SDN architecture that works correctly even if some network components are compromised. Here we dene a threat model and attack scenarios that must be prevented. A. Threat model We assume a generic SDN architecture comprising an SDN controller, SDN switches, end hosts, and SDN applications. SDN applications communicate with the SDN controller via the northbound API provided by the controller. The SDN controller and the switches communicate with each other over secure channels (offering integrity and condentiality), and the controller manages the switches in a centralized manner. We assume that the adversary can compromise end hosts (this also models the case of malicious tenants and the case of a malicious insider in a company). We also assume that the adversary controls a number of SDN applications running on the SDN controller, reecting the fact that SDN applications are typically provided by third parties. The SDN controller 978-1-4673-9486-4/16/$31.00c 2016 IEEE

Upload: others

Post on 01-Jul-2020

6 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: R E E L L I N E SR E E L L I N E S › wp-content › uploads › 2019 › 09 › ... · 2019-09-07 · Brad Norgaard President 602-670-9582 Don Mickus Vice President 602-920-2350

Brad Norgaard President

602-670-9582

Don Mickus Vice President 602-920-2350

Alan Davis Secretary

925-785-5583

Barney Rouse Treasurer

602-482-8239

R E E L L I N E SR E E L L I N E S Established 1962 www.azflycasters.org We support catch and release. September 2019

President’s Lines

Fall is supposed to be in the air sometime around mid-September. Personally, I love fall. Cooler evening temperatures mean we’ll be able to open the windows and air out the house for the first time in months. Up north, the leaves begin changing colors. Time to get out the marshmallows, chocolate bars, and graham crackers. Fishing also begins picking up as the fish start to fatten up for the lean winter months. Our Rim Country and White Mountains are so beautiful this time of year with all the fall colors. You may even hear elk bugling. Our club’s education activities also begin gearing back up in the fall. Fly tying classes already are in full swing. Casting meet-ups restart on Wednesday mornings in September, and casting classes resume in October. Take advantage of all the club offers. Keep your eye on the club calendar and watch for email updates. Start planning now for our Annual Banquet, which will be held on March 7. It is not too soon to begin sorting through your gear and setting out items you aren’t using. Our Annual Banquet depends heavily on our members’ donations, so please help out the club by supporting this important fundraiser. We have a few positions coming available on our board. If you have questions or are interested, please contact me or any board member. We would love to have your help. Our October 10 general meeting will be Member Appreciation Night. Make plans now to attend. We’re going to celebrate you, our members. We’ll give everybody in attendance an AFC hat, host a no-charge special items raffle, and offer free food and drinks. Additional information will be forthcoming. I can tell you right now, you won't want to miss this meeting. Tight lines and stretched nets, Your President, Brad Norgaard 602-670-9582

MISSION STATEMENT

The Arizona Flycasters Club is a non-profit, tax-exempt organization dedicated to encouraging, supporting, and educating its members and the community in the sport of fly fishing, the techniques of fly fishing, and the ethics of “catch and release,” which promotes the conservation of fish and their habitats. The organization’s activities also promote friendship, enjoyment, sportsmanship, and safety.

AFC is affiliated with Fly Fishers International, an organization dedicated to the betterment of the sport of fly fishing through conservation, restoration, and education.

Page 2: R E E L L I N E SR E E L L I N E S › wp-content › uploads › 2019 › 09 › ... · 2019-09-07 · Brad Norgaard President 602-670-9582 Don Mickus Vice President 602-920-2350

2

SCHEDULE

September 4, 11, 18, 25 9:00 AM Wednesday Casting Meet-Ups (Roadrunner Park) 4, 9, 11, 16, 7:00 PM Basic Fly Tying Classes (SSCC) 18, 23, 25, 30 12 7:00 PM General Meeting (Neil Warner-Kamchatka, Russia)(SSCC) 17 7:00 PM General Education Class (Fly Tying Tips and Tricks)(SSCC) 19 7:00 PM Board Meeting (SSCC)

October 2, 9, 16, 23, 30 9:00 AM Wednesday Casting Meet-Ups (Roadrunner Park) 10 7:00 PM General Meeting (Member Appreciation Night)(SSCC) 12 9:00 AM Casting Class (Roadrunner Park) 17 7:00 PM Board Meeting (SSCC) 19-23 San Juan River Outing (Fisheads San Juan River Lodge) 28 7:00 PM General Education Class (SSCC)

November

6, 13, 20, 27 9:00 AM Wednesday Casting Meet-Ups (Roadrunner Park) 9 8:00 AM Salt River Saturday (Blue Point Bridge) 14 7:00 PM General Meeting (SSCC) 16 9:00 AM Casting Class (Roadrunner Park) 19 7:00 PM General Education Class (SSCC) 21 7:00 PM Board Meeting (SSCC)

December 4, 11, 18 9:00 AM Wednesday Casting Meet-Ups (Roadrunner Park) 7 8:00 AM Salt River Saturday (Blue Point Bridge) 12 7:00 PM General Meeting (SSCC) 14 9:00 AM Casting Class (Roadrunner Park) 17 7:00 PM General Education Class (SSCC) 19 7:00 PM Board Meeting (SSCC)

New Member Orientation Classes Sunnyslope Community Center

David Mayl, Membership Chair Attention new members: David Mayl has put together an orientation class, with packet, that is held before every general meeting. These are very informal and fun gatherings designed to help explain things our club offers and perhaps identify what you might be able to do to make our club even more successful. We give everyone the opportunity to ask questions. Though the classes are designed specifically for new members, all members are welcome to attend and participate. We meet just before the general meeting at 6:00 PM in the classroom we use for fly tying at the Sunnyslope Community Center. Hope to see you there. If you have questions, call David Mayl at 480-236-6757.

Page 3: R E E L L I N E SR E E L L I N E S › wp-content › uploads › 2019 › 09 › ... · 2019-09-07 · Brad Norgaard President 602-670-9582 Don Mickus Vice President 602-920-2350

3

Neil Warner—Fishing in Kamchatka, Russia Thursday, September 12, 7:00 PM, Sunnyslope Community Center

John Doss, Programs Chair

Neil Warner has been fly fishing for 16 years. He loves to fish remote locations, such as high-country creeks in Wyoming, the upper Nushagak River in Alaska, and, to really get away, Kamchatka, Russia. Neil will be here to tell us about his trip to Kamchatka, including the gear he packed, how he got there, the fish he caught, and so on. Neil recently moved to Phoenix from Mayer, Arizona. He is passionate about cold water conservation. He is a past president of the Grand Canyon Chapter of TU, holding meetings in Flagstaff, Prescott, and Cottonwood. He is currently the vice chairman of the Arizona TU Council and the Arizona representative to the TU National Leadership Council.

General Education Class—Fly Tying Tips And Tricks

Tuesday, September 17, 7:00 PM, Sunnyslope Community Center Bob Sickles, Education Chair

September’s general education class will be “Fly Tying Tips And Tricks.” We will have a panel of experienced fly tiers discussing tips and tricks on how to tie faster, easier, and better. Everyone who attends is invited to share their tips and tricks with the group. No equipment is necessary (unless you plan on demonstrating something that requires it). We will have handouts, but bring a pen and notebook, as you may want to take notes on ideas not in the handouts. It will be a night of fun and valuable information for all levels of fly tiers. If you have questions, call Bob Sickles at 602-953-3761.

Basic Fly Tying Classes Are Back In Session!

Bob Sickles, Education Chair Our basic fly tying classes resumed August 28 and continue throughout September. Each class is “stand alone” - you can start at any time and attend as many classes as you wish. Our crew of experienced instructors will be there if you need help. These are always fun classes and free to all club members. We supply the materials and equipment at no cost. See this newsletter or the website for the complete schedule. All classes will be held at the Sunnyslope Community Center from 7:00 to 8:45 PM. If you have questions, call Bob Sickles at 602-953-3761.

San Juan River Fall Outing

October 19-23 Jim Rondoni, Outings Chair

Mark your calendar: the fall San Juan River trip will take place October 19 through 23 at Fisheads San Juan River Lodge. We will hold a pre-trip meeting on a date and time TBD. Watch your emails for updates. If you have questions, call Jim Rondoni at 623-363-3368.

Page 4: R E E L L I N E SR E E L L I N E S › wp-content › uploads › 2019 › 09 › ... · 2019-09-07 · Brad Norgaard President 602-670-9582 Don Mickus Vice President 602-920-2350

4

Salt River Saturdays Return November 9 Jim Rondoni, Outings Chair

We’ll be at Blue Point Bridge on the Salt River on November 9 and December 7 from 8:00 AM to noon to talk about fishing moving water and do some fishing together. The river is liberally stocked with rainbow trout in the winter months. One of our seasoned members will be there to lead the discussion. Beginning and experienced fly anglers are encouraged to attend, and experienced anglers are encouraged to assist the beginners. Watch your emails for updates. If you have questions, call Jim Rondoni at 623-363-3368. NOTE: You are required to have a Tonto National Forest Pass or a National Park Pass to visit the Salt River. Here is a link to vendors: https://www.fs.usda.gov/Internet/FSE_DOCUMENTS/stelprdb5331614.pdf.

Sam Chapman Wins The Ron Robinson Commemorative Rod & Reel Combo Veterans Group Receives $1,000

Craig Mernitz, Fundraising Chair Thanks to everybody who participated in the raffle for the rod and reel combo donated by Ron Robinson and Jim Rondoni. Sam Chapman was the winner and will be enjoying the 10' 6", 7-weight custom fly rod and Abel big game 7-8 weight reel with extra spool. Due to Ron’s and Jim’s generous donation of the combo, and Ron’s generous contribution of the raffle proceeds, a veterans group supported by AFC received $1,000.

Page 5: R E E L L I N E SR E E L L I N E S › wp-content › uploads › 2019 › 09 › ... · 2019-09-07 · Brad Norgaard President 602-670-9582 Don Mickus Vice President 602-920-2350

5

Win A Tenkara Fly Rod Kit! Craig Mernitz, Fundraising Chair

We are raffling a Tenkara “Sato” fly rod kit known as the Triple Zoom. The rod is adjustable to three lengths: 10’6”, 11’10”, and 12’9”. The kit includes everything you need to get on the water and start fishing: Rod Indicator line Tippet Line holder Tenkara flies Nippers Forceps Plus, the winner will receive a complete guide to techniques, gear, history, and philosophy of Tenkara, the Japanese method of fly fishing. This kit is valued at $275. The increasing popularity of Tenkara fishing and John Sachen’s excellent presentation at our June general meeting generated a tremendous response. Don’t miss your chance to win. Each square costs only $5 and buys one chance to win. The raffle is open to members and non-members. Come to the September 12 general meeting and win. If you cannot make it to the meeting and would like to purchase squares, or if you have questions, contact Craig Mernitz.

Page 6: R E E L L I N E SR E E L L I N E S › wp-content › uploads › 2019 › 09 › ... · 2019-09-07 · Brad Norgaard President 602-670-9582 Don Mickus Vice President 602-920-2350

6

European Nymphing Fly Fishing Outfit Raffle

Craig Mernitz, Fundraising Chair This fall is prime time to enjoy fly fishing using the European nymphing technique. Get ready for the AFC fall trip to the San Juan River or your own trip and take along an Orvis Recon 10-foot, 3-weight rod, Hydros III reel with tactical nymph fly line, an assortment of 14 essential flies, and other Orvis accessories. The raffle board will be ready for your $10 chances at the September 12 meeting. If you cannot make it to the meeting and would like to purchase squares, or if you have questions, contact Craig Mernitz.

Alpine Buckboard Cabin Raffle Craig Mernitz, Fundraising Chair

We are raffling a two-night stay at Alpine Buckboard Cabins. This is your chance to win two nights of your choice in Alpine, Arizona and fish the White Mountains or just relax for a couple days in the cool pines. This is a great opportunity to escape the heat with a loved one or family. Each square costs $5. We will hold the drawing when all 100 squares are sold or by announcement of a drawing date. The raffle is open to members and non-members. If you cannot make it to the September 12 meeting and would like to purchase squares, or if you have questions, contact Craig Mernitz. You can check out Alpine Buckboard Cabins at https://alpinebuckboardcabins.com/.

Page 7: R E E L L I N E SR E E L L I N E S › wp-content › uploads › 2019 › 09 › ... · 2019-09-07 · Brad Norgaard President 602-670-9582 Don Mickus Vice President 602-920-2350

7

SAVE THE DATE AND MARK YOUR CALENDARS AFC ANNUAL BANQUET AND RAFFLE SATURDAY, MARCH 7, 2020 4:00PM ARIZONA AMERICAN ITALIAN CLUB

7509 NORTH 12TH STREET PHOENIX, ARIZONA

It is only September, but our planning has already begun. The banquet committee is already in full swing and putting together another successful banquet to celebrate AFC and its membership. We will start collecting items for the banquet raffle at our general meetings starting with our September 12 meeting. It is time to clean out your fishing closets and donate your new or slightly-used items. Don’t forget about handcrafted items as well as gift cards. The success of our banquet depends heavily on your donations to our raffle. We cannot operate without your support. Funds raised from the raffle support our ongoing educational programs, administrative expenses, and commitment to the community. Tickets will go on sale later this year. If you have questions, please call: David Mayl 480-236-6757 or Don Mickus 602-920-2350

Page 8: R E E L L I N E SR E E L L I N E S › wp-content › uploads › 2019 › 09 › ... · 2019-09-07 · Brad Norgaard President 602-670-9582 Don Mickus Vice President 602-920-2350

8

Board Members Brad Norgaard President 602-670-9582 [email protected] Don Mickus Vice President/FFFI 602-920-2350 [email protected] Alan Davis Secretary 925-785-5583 [email protected] Barney Rouse Treasurer 602-482-8239 [email protected] John Doss Programs Chair and 623-229-8335 [email protected] Communications/Social Media Chair Barb and Brian Fayle Hospitality Co-Chairs 602-923-7870 [email protected] Chuck Howey Technology Chair 602-818-7635 [email protected] Norm Johnson Veterans Support Initiatives 602-993-6524 [email protected] David Mayl Membership Chair 480-236-6757 [email protected] Craig Mernitz Fundraising Chair 602-739-2385 [email protected] Jim Rondoni Outings Chair 623-363-3368 [email protected] Bob Sickles Education and Raffle Chair 602-953-3761 [email protected] Steve Nemecek Newsletter Editor 602-540-3846 [email protected]

Sparrow

Hook: 2xl or 3xl nymph sizes 8 - 12 Thread: Color to match body Tail: Pheasant rump feather fibers Body: Antron or rabbit dubbing Hackle: Pheasant rump feather Front Hackle: Aftershaft feather Head: Thread 1. Place a debarbed hook in the vise and begin the thread at about the midpoint of the hook, wrapping back to the bend. 2. Strip a small bunch of the “webby” fibers from the feather shaft and tie them in for the tail, which should only be the length of the body. 3. Dub a body about 2/3 the length of the hook, making it carrot-shaped. 4. Take the rest of the feather and strip off the “webby” part on both sides. Tie this feather in by the stem in front of the body you just dubbed. Make one or two wraps of the feather around the shank of the hook in front of the body. Tie it off and clip the remainder. 5. The aftershaft feather is located at the base of the feather used for the rest of the fly. Take this feather and tie it in front of the hackle you just finished. Make several wraps around the hook shank to form a collar. Tie this off and trim the excess. 6. Finally, wrap a smooth, neat head with the thread. Whip finish and cut the thread. Jack Gartside’s Sparrow has many variations. You can experiment with different colors. You can add copper wire. Or add bead chain eyes for extra sink (perhaps for saltwater). Per Jack’s website: He tied the first Sparrow over 25 years ago while camping at Baker's Hole on the Madison just outside West Yellowstone, Montana. Jack wanted a fly that could be fished as a nymph or as a streamer or even as a passable hopper imitation (greased to float, sunken as a drowned grasshopper). He wanted a fly that would combine some of the common features of both insects and baitfish, “a fly that could look (depending on how it was fished and its overall size) like lots of things in general and nothing in particular.” The fish could “make up its own mind as to what it was.”

Page 9: R E E L L I N E SR E E L L I N E S › wp-content › uploads › 2019 › 09 › ... · 2019-09-07 · Brad Norgaard President 602-670-9582 Don Mickus Vice President 602-920-2350

9

Page 10: R E E L L I N E SR E E L L I N E S › wp-content › uploads › 2019 › 09 › ... · 2019-09-07 · Brad Norgaard President 602-670-9582 Don Mickus Vice President 602-920-2350

10

Arizona Flycasters Club general meetings are held at 7:00 PM on the second Thursday of every month at the Sunnyslope Community Center. The Annual Banquet and Raffle is held in February or March. Watch for further details. The Arizona Flycasters Club newsletter is published by the Arizona Flycasters Club and is distributed to its members and advertisers. Opinions expressed in the newsletter are not necessarily those of the club. Advertisements are placed as a means of conveying the message of the advertisers. The Arizona Flycasters Club does not necessarily endorse the advertiser’s products or services.

Arizona Flycasters Club P.O. Box 47357 Phoenix, AZ 85068-7357 http://www.azflycasters.org

This space reserved for your name and address.

Next General Meeting:

Neil Warner

Fishing in Kamchatka, Russia

Thursday, September 12, 2019

7:00 PM

Arizona Flycasters Club

P.O. Box 47357

Phoenix, AZ 85068-7357