论文标题
蜘蛛：在ONOS软件定义的网络控制器中解决状态性能问题
SPIDER: Fuzzing for Stateful Performance Issues in the ONOS Software-Defined Network Controller
论文作者
论文摘要
软件定义网络（SDN）控制器中的性能问题可能会对网络的性能和可用性产生严重影响。在本文中，我们考虑了一个特殊的SDN脆弱性类别，称为状态性能问题（SPI），其中一系列初始输入消息将控制器驱动到一个状态，以使其性能在处理后续消息时的病理性降解。在大型复杂软件（例如广泛使用的ONOS SDN控制器）中发现SPI，因为输入序列的状态空间很大，并且相互依赖的网络服务的复杂软件体系结构。我们提出蜘蛛，这是一个实用的模糊框架，用于在这种情况下识别SPI。我们工作的关键贡献是利用SDN控制器的事件驱动的模块化软件体系结构来分别针对SPI的每个网络服务，并且（b）使用静态分析来识别所有事件处理程序可以直接或间接影响目标服务状态的服务。蜘蛛为157个网络服务提供了这种新颖的依赖感知模块化性能方法，并成功地确定了10个新的绩效问题。我们提出了针对先前工作的蜘蛛的评估，对设计决策的敏感性分析以及两个未发现的SPI的案例研究。
Performance issues in software-defined network (SDN) controllers can have serious impacts on the performance and availability of networks. In this paper, we consider a special class of SDN vulnerabilities called stateful performance issues (SPIs), where a sequence of initial input messages drives the controller into a state such that its performance degrades pathologically when processing subsequent messages. Uncovering SPIs in large complex software such as the widely used ONOS SDN controller is challenging because of the large state space of input sequences and the complex software architecture of inter-dependent network services. We present SPIDER, a practical fuzzing framework for identifying SPIs in this setting. The key contribution in our work is to leverage the event-driven modular software architecture of the SDN controller to (a) separately target each network service for SPIs and (b) use static analysis to identify all services whose event handlers can affect the state of the target service directly or indirectly. SPIDER implements this novel dependency-aware modular performance fuzzing approach for 157 network services in ONOS and successfully identifies 10 new performance issues. We present an evaluation of SPIDER against prior work, a sensitivity analysis of design decisions, and case studies of two uncovered SPIs.
