Demo Data from VLDB 2026 / reviewers in the wild / expert
Wenjie Dai
dblp:342/4306
· DBLP profile ↗
1ranked-venue papers
0as first author
1since 2021 · last 2024
0009-0007-6108-2547ORCID · reported
Domains — the database's venue-derived domains; a paper can count in several
Security and privacy · 1 · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Computer networks
1 paper |
Network management and operations · 67% Software-defined and programmable networks · 33% |
Topics — the 3 heaviest of 3, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Network management and operations
network verification |
0.8 | 1 | 2024 | Vulnerabilities in SDN Topology Discovery Mechanism: Novel Attacks and Countermeasures · IEEE Trans. Dependable Secur. Comput. 2024 |
Software-defined and programmable networks
SDN security |
0.8 | 1 | 2024 | Vulnerabilities in SDN Topology Discovery Mechanism: Novel Attacks and Countermeasures · IEEE Trans. Dependable Secur. Comput. 2024 |
Network management and operations › network verification
topology verification |
0.8 | 1 | 2024 | Vulnerabilities in SDN Topology Discovery Mechanism: Novel Attacks and Countermeasures · IEEE Trans. Dependable Secur. Comput. 2024 |
Methods — techniques the papers use, named apart from their topics
two-stage verification algorithm · 0.8LLDP protocol analysis · 0.8
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2024 | Vulnerabilities in SDN Topology Discovery Mechanism: Novel Attacks and CountermeasuresabstractSoftware-defined networking (SDN) has significantly enriched network functions by separating the control plane from the data plane. Meanwhile, the unique architecture of SDN brings new security challenges. Recent studies show that attackers can fabricate inter-switch links to hijack the traffic or interfere with network services. In this paper, we uncover two new vulnerabilities that can tamper with the topology view of the SDN controller. Then, we present two novel attacks named Cluster Splitting and Cluster Amnesia according to such flaws. We split or forget partial network topology by establishing a broadcast domain port or external link. As a result, it affects the module responsible for computing topology instances and disrupts the routing calculations. To defend against such attacks, we design a two-stage algorithm to verify the switch port and link in real-time. With the principle of saving the limited control channel resources and not extending the LLDP protocol, we propose LldpChecker. As a lightweight extension for SDN controllers, it can filter malicious broadcast domain ports and external links. We conduct a series of experiments to evaluate the effectiveness and efficiency of LldpChecker. The results show that LldpChecker can effectively mitigate these two novel attacks with negligible overhead. Shuhua Deng, Wenjie Dai, Xian Qing, Xieping Gao 0001 |
IEEE Trans. Dependable Secur. Comput. | 2 |