Synaptic: A formal checker for SDN-based security policies

Nicolas Schnepf (1, 2, 3) , Rémi Badonnel (1, 3) , Abdelkader Lahmadi (1, 3) , Stephan Merz (2, 4)

1 MADYNES - Management of dynamic networks and services
2 VERIDIS - Modeling and Verification of Distributed Algorithms and Systems
3 RESIST - Resilience and Elasticity for Security and ScalabiliTy of dynamic networked systems
4 MOSEL - Proof-oriented development of computer-based systems

Software-defined networking offers new opportunities for protecting end users by designing dynamic security policies. In particular, security chains can be built by combining security functions, such as firewalls, intrusion detection systems and services for preventing data leakage. The configuration of these security functions and their associated policies is based on behavioural models of end-user applications when accessing the network. In this demo, we present our tool Synaptic, a SDN-based framework intended for the formal verification of security policies as well as for automatically generating such policies based on automata learning methods applied on NetFlow records of end-user applications collected at the device level.

Domaines: Réseaux et télécommunications [cs.NI]

Nicolas Schnepf, Rémi Badonnel, Abdelkader Lahmadi, Stephan Merz. Synaptic: A formal checker for SDN-based security policies. NOMS 2018 - IEEE/IFIP Network Operations and Management Symposium, Apr 2018, Taipei, Taiwan. ⟨10.1109/NOMS.2018.8406122⟩. ⟨hal-01892397⟩