“Common Criteria” and Software-Defined Network (SDN) Security

摘要

“Common criteria” (ISO 15408) is a universally recognized and broadly applicable approach to information security solutions management and evaluation. “Common criteria” leans on developing a shared conceptual basis for key security solution modules including protection profiles and security targets. Conceptual basis development implies defining the following elements: security objectives and assumptions (for the environment and the object), threats and security policies, as well as functional and assurance requirements. The specifics of SDN security solutions is largely driven by fundamental architectural principles of SDN technology itself-primarily by the separation of control and data flows, - and by conditions imposed by Open Flow protocol application. However, proactive (threats and policies), passive (objectives and assumptions) and reactive (requirements) aspects of security management remain highly relevant for this type of security solutions. This paper discusses the Common Criteria application specifics for assessing the of SDN security and practical MTUCI experience in the development of the protection profile. A new class of network attacks on SDN switches and controllers can involve either data or control components. In addition to traditional vulnerabilities, centralization of management functions paves way for new security threats by isolating controller's activity and administrative message exchange. Therefore, identifying and analyzing threats, policies and requirements specific to SDN control module security becomes an emergina priority.