SDN for network security

The proposition of increased innovation in network applications and reduced cost for network operators has won over the networking world to the vision of Software-Defined Networking (SDN). With the excitement of holistic visibility across the network and the ability to program network devices, developers have rushed to present a range of new SDN-compliant hardware, software and services. However, amidst this frenzy of activity, one key element has only recently entered the debate: Network Security. In this article, security in SDN is surveyed presenting both the research community and industry advances in this area. The challenges to securing the network from the persistent attacker are discussed and the holistic approach to the security architecture that is required for SDN is described. Future research directions that will be key to providing network security in SDN are identified.

show abstract

“…However, the more recent analyses [24], [30]- [34] also identify security enhancements introduced by SDN.…”

Section: A Analyses Of Sdn Securitymentioning

confidence: 99%

“…The extent to which network security management is improved in SDN-based networks is discussed in [30]. The discussion is split by infrastructure, software stack, and network protocols with the majority of the discussion focussed on protocol security, which the authors define as confidentiality and authentication.…”

Section: A Analyses Of Sdn Securitymentioning

confidence: 99%

A Survey of Security in Software Defined Networks

Scott-Hayward

Natarajan²,

Sezer

2016

IEEE Commun. Surv. Tutorials

407

213

View full text Add to dashboard Cite

show abstract

“…Another example of IDS with these responsibilities is presented by Kumar et al [82]. Solutions based on packet classification using SDN are presented by Smeliansky et al [78] and the detection of malware is discussed in the work of Abaid et al [80]. Further, the PROTOGENI framework is presented by Li et al [83] and serves as a tool for creating and evaluating different types of network attacks.…”

Section: Securitymentioning

confidence: 99%

Resilience support in software-defined networking: A survey

et al. 2015

View full text Add to dashboard Cite

Software-Defined Networking (SDN) is an architecture for computer networking that provides a clear separation between network control functions and forwarding operations. The abstractions supported by this architecture are intended to simplify the implementation of several tasks that are critical to network operation, such as routing and network management. Computer networks have an increasingly important societal role, requiring them to be resilient to a range of challenges. Previously, research into network resilience has focused on the mitigation of several types of challenges, such as natural disasters and attacks. Capitalising on its benefits, including increased programmability and a clearer separation of concerns, significant attention has recently focused on the development of resilience mechanisms that use software-defined networking approaches. In this article, we present a survey that provides a structured overview of the resilience support that currently exists in this important area. We categorize the most recent research on this topic with respect to a number of resilience disciplines. Additionally, we discuss the lessons learned from this investigation, highlight the main challenges faced by SDNs moving forward, and outline the research trends in terms of solutions to mitigate these challenges . 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 This article presents a survey on the support for network resilience in SoftwareDefined Networking (SDN). This has been the subject of intense investigation by the academic and industrial community in the past few years, as evidenced by the number of papers included in our survey (159 references in total). Capitalizing on the benefits of SDN, including increased programmability and a clearer separation of concerns, significant attention has recently focused on the development of resilience mechanisms that use software-defined networking approaches. Thus, a wide range of solutions to classical network problems have been revisited using this architecture, but many problems continue to be challenging.Our survey investigates the resilience support that currently exists in this important area, and categorizes the most recent research on this topic with respect to a number of resilience disciplines. Additionally, we discuss the lessons learned from this investigation, highlight the main challenges faced by SDNs moving forward, and outline the research trends in terms of solutions to mitigate these challenges. The aim of the survey is to offer to the reader a structured view of network resilience in the SDN spectrum, and how resilience aspects are supported in these architectures.We believe that this subject material is closely aligned with the objectives of the journal. Please be assured that:1. This paper has not been published or accepted for publication w...

show abstract

“…At present, SDN security research focuses on network traffic detection controller kernel security mechanism third-party application security authentication mechanism [1]. The research on network traffic detection mainly uses the statistical field of the flow table to analyze the traffic, and the abnormal flow detection is carried out after the normal flow data statistics is established.…”

Section: Introductionmentioning

confidence: 99%

Research on SDN Security Technology of Satellite Ground Application System

Zhang¹,

Lin²,

Zhao³

et al. 2017

dtcse

View full text Add to dashboard Cite

Abstract. Software development in the network has made it has been more widely used in the meteorological satellite ground application system; SDN architecture is also facing more security issues. How to achieve SDN network security has become an urgent need to solve a problem. This paper proposed a SDN security method based on the correlation coefficient method. Firstly, SDN security is vectorized, and then the correlation between the security vector and the normal security vector is compared, and the security of the network is determined according to the correlation. The simulation results show that the method proposed in this paper can detect the non -security attack behavior accurately and has a high degree of discrimination.

show abstract

SDN for network security

Cited by 19 publications

References 5 publications

A Survey of Security in Software Defined Networks

A Survey of Security in Software Defined Networks

Resilience support in software-defined networking: A survey

Research on SDN Security Technology of Satellite Ground Application System

Contact Info

Product

Resources

About