DELTA – SDN security evaluation framework

What is DELTA?

DELTA is a penetration testing framework that regenerates known attack scenarios for diverse test cases. This framework also provides the capability of discovering unknown security problems in SDN by employing a fuzzing technique.

• Agent-Manager is the control tower. It takes full control over all the agents deployed to the target SDN network.
• Application-Agent is a legitimate SDN application that conducts attack procedures and is controller-dependent. The known malicious functions are implemented as application-agent functions.
• Channel-Agent is deployed between the controller and the OpenFlow-enabled switch. The agent sniffs and modifies the unencrypted control messages. It is controller-independent.
• Host-Agent behaves as if it was a legitimate host participating in the target SDN network. The agent demonstrates an attack in which a host attempts to compromise the control plane.

Prerequisites

In order to build and run DELTA, the following are required:

• An agent manager based on Ubuntu 16.04 LTS 64 bit
  • Ant build system
  • Maven v3.3.9
  • LXC 2.0
  • JDK 1.8
• Target Controller (for application agent)
  • Floodlight: ~1.2
  • ONOS: 1.1, 1.6, 1.9, 1.13.1 (being tested)
  • OpenDaylight: ~Oxygen
  • Ryu: 4.16

Author

Magdalena Jarzębska

• BlogMay 2, 2022Lupo - Malware IOC Extractor and Debugging module for Malware Analysis Automation
• BlogMay 2, 2022DDexec - a technique to run binaries filelessly and stealthily on Linux using dd to replace the shell with another process
• BlogApril 28, 2022ADReaper - A fast enumeration tool for Windows Active Directory Pentesting written in Go
• BlogApril 27, 2022Shhhloader - SysWhispers Shellcode Loader