This repository consists of P4 programs that detect layer-2 spoofing attacks in the SDN data plane.
An IP source guard, DHCP snooping detection and ARP inspection for software switches are implemented in the src/ directory.
The detection of IP spoofing attacks in hardware (NetFPGA) is implemented in the netfpga/ directory.
Follow the instructions outlined in Getting Started with P4 to have a working setup to test the P4 programs. You might alternatively also want to read about P4 and try out the tutorials for a better understanding.
Motivation and more detailed information can be found in our paper.
This work was supported by a DST-FIST grant (SR/FST/ETI-423/2016) from Government of India (2017-2022) and by a Mid-Career Institute Research and Development Award (IRDA) from IIT Madras (2017--2020). The authors (Niranjhana Narayanan, Ganesh C. Sankaran, Krishna M. Sivalingam) are also pleased to acknowledge the efforts of Phanindra Palagummi, Harsh Gondaliya and the CoreEL team for their help with the NetFPGA systems.