Dynamic Isolation of Network Devices Using OpenFlow for Keeping LAN Secure from Intra-LAN Attack

With the emergence of inexpensive network components and high-speed network services, a variety of network-capable electronic devices have become available. Typical examples of such devices include printers, network access storage (NAS), and video recorders. Because software on these devices is not always kept up-to-date, the devices are susceptible to intra-local- area-network (LAN) attacks. In this paper, a novel network system architecture is proposed to protect network devices from intra-LAN attacks by dynamically isolating infected devices with OpenFlow. Preliminary evaluation results demonstrate that the architecture is effective in actual LAN environments.