Modern programmable network switches let developers write complex packet processing pipelines that can run at speeds of 6.5Tbps, and the programming language P4 provides high-level constructs that make programming such switches fairly simple. The increase in speed and programmability has started a new era of network programming where many complex functionalities, e.g., key-value stores and load balancers, are being moved to these fast switches. We show that this increased programmability enables a new family of security bugs, that is, information leaks that can lead to broken confidentiality, integrity, and isolation in the network. We then present a new information-flow control type system for dataplane programming in P4 that can detect this family of security bugs. Our type system contains rules that are completely specific to the P4 language and can therefore handle complex constructs such as P4 tables. We implement our type system in a tool, P4bid, which extends the type checker in the p4c compiler, the reference compiler for P4_16, the latest version of P4. We present a number of case studies and show that P4bid can successfully detect information flow violations in all of them, while correctly type-checking corrected versions of these programs where the information leaks are removed.
Wed 15 JunDisplayed time zone: Pacific Time (US & Canada) change
10:40 - 12:00 | |||
10:40 20mTalk | P4BID: Information Flow Control in P4 PLDI DOI | ||
11:00 20mTalk | ANOSY: Approximated Knowledge Synthesis with Refinement Types for Declassification PLDI Sankha Narayan Guria University of Maryland, College Park, Niki Vazou IMDEA Software Institute, Marco Guarnieri IMDEA Software Institute, James Parker Galois, Inc. DOI Pre-print | ||
11:20 20mTalk | Hardening Attack Surfaces with Formally Proven Binary Format Parsers PLDI Nikhil Swamy Microsoft Research, Tahina Ramananandro Microsoft Research, Aseem Rastogi Microsoft Research, Irina Spiridonova Microsoft Research, Haobin Ni Cornell University, Dmitry Malloy Microsoft, Juan Vazquez Microsoft, Michael Tang Microsoft, Omar Cardona Microsoft, Arti Gupta Microsoft DOI | ||
11:40 20mTalk | Modular Information Flow Through Ownership PLDI Will Crichton Stanford University, Marco Patrignani University of Trento, Maneesh Agrawala Stanford University, Pat Hanrahan Stanford University, USA DOI Pre-print |
22:40 - 00:00 | |||
22:40 20mTalk | P4BID: Information Flow Control in P4 PLDI DOI | ||
23:00 20mTalk | ANOSY: Approximated Knowledge Synthesis with Refinement Types for Declassification PLDI Sankha Narayan Guria University of Maryland, College Park, Niki Vazou IMDEA Software Institute, Marco Guarnieri IMDEA Software Institute, James Parker Galois, Inc. DOI Pre-print | ||
23:20 20mTalk | Hardening Attack Surfaces with Formally Proven Binary Format Parsers PLDI Nikhil Swamy Microsoft Research, Tahina Ramananandro Microsoft Research, Aseem Rastogi Microsoft Research, Irina Spiridonova Microsoft Research, Haobin Ni Cornell University, Dmitry Malloy Microsoft, Juan Vazquez Microsoft, Michael Tang Microsoft, Omar Cardona Microsoft, Arti Gupta Microsoft DOI | ||
23:40 20mTalk | Modular Information Flow Through Ownership PLDI Will Crichton Stanford University, Marco Patrignani University of Trento, Maneesh Agrawala Stanford University, Pat Hanrahan Stanford University, USA DOI Pre-print |