Model Checking Invariant Security Properties in OpenFlow Conference Paper uri icon


  • The OpenFlow (OF) switching specification represents an innovative and open standard for enabling the dynamic programming of flow control policies in production networks. Unfortunately, thus far researchers have paid little attention to the development of methods for verifying that dynamic flow policies inserted within an OpenFlow network do not violate the network's underlying security policy. We introduce Flover, a model checking system which verifies that the aggregate of flow policies instantiated within an OpenFlow network does not violate the network's security policy. We have implemented Flover using the Yices SMT solver, which we then integrated into NOX, a popular OpenFlow network controller. Flover provides NOX a formal validation of the OpenFlow network's security posture. 2013 IEEE.

name of conference

  • 2013 IEEE International Conference on Communications (ICC)

published proceedings


altmetric score

  • 3

author list (cited authors)

  • Son, S., Shin, S., Yegneswaran, V., Porras, P., & Gu, G.

citation count

  • 123

complete list of authors

  • Son, Sooel||Shin, Seungwon||Yegneswaran, Vinod||Porras, Phillip||Gu, Guofei

publication date

  • January 2013