Demonstrating a Personalized Secure-By-Default Bring Your Own Device
Solution Based on Software Defined Networking
28th International Teletraffic Congress (ITC 28), Würzburg, Germany, (September 2016)Abstract
Network virtualization is one classical use-case for Software Defined
Networks (SDN). By programmatically instantiating virtual networks, traffic
from one or more devices can be separated or connectivity can be
established as needed. S-BYOD, which is presented in this demonstration,
applies the SDN concept to Bring Your Own Device (BYOD) scenarios and
offers personalized virtual networks that are set up and extended on
demand. This is done once the user authenticates, activates access to
additional applications, or as soon as applications scale out and involve
more servers. The described proof-of-concept implementation explores, to
what degree an agent-less BYOD solution, based only on SDN, can lower the
attack surface by explicit user opt-ins for particular services. Further,
an assessment of the number of required rules within the flow tables of
switches completes this work.
