SDN Security Review: Threat Taxonomy, Implications, and Open Challenges

Abstract

Software-Defined networking (SDN) is a networking paradigm to enable dynamic, flexible, and programmatically efficient configuration of networks to revolutionize network control and management via separation of the control plane and data plane. The SDN technology has evolved in response to the demands from large data centers toward all types of networks, from IoT, enterprise, to ISP networks. On the one hand, SDN has provided solutions for high-demand resources, managing unpredictable data traffic patterns, and rapid network reconfiguration. It is further used to enhance network virtualization and security. On the other hand, SDN is still subject to many traditional network security threats. It also introduces new security vulnerabilities, primarily due to its logically centralized control plane infrastructure and functions. In this paper, we conduct a comprehensive survey on the core functionality of SDN from the perspective of secure communication infrastructure at different scales. A specific focus is put forward to address the challenges in securing SDN-based communications, with efforts taken up to address them. We further categorize the appropriate solutions for specific threats at each layer of SDN infrastructures. Lastly, security implications and future research trends are highlighted to provide insights for future research.INDEX TERMS Software defined networks, OpenFlow, security, threat, attack, vulnerability, network security.• Discussion of the future research directions and open challenges hindering resiliency and security in SDNenabled systems. Different from existing papers, this paper provides an up-to-date discussion about security issues in SDN environments. The presented taxonomy covers security threats ranging from topology discovery, network and app manipulation, flow diversion, teleportation & rootkits, controller placement, access control and authorization, to conventional networking threats. Further, in addition to reviewing existing security solutions and related implications, this paper provides key use cases of SDN technology implementation in smart communication systems. This layout is aimed to enable researchers to focus on the challenges that breach security in SDN communications. Ultimately, this work will provide further insights for future research in the SDN security domain.

Applying Transfer Learning Approaches for Intrusion Detection in Software-Defined Networking

“…SDN controllers or northbound APIs guide the network traffic design and communicate with the underlying hardware infrastructure on the southbound interface via the OpenFlow protocol, eliminating the need for dedicated hardware devices such as controllers, routers, and switches that are required in traditional networks. This results in improved network construction, flexible configuration, and lower deployment costs [9].…”

“…However, the centralized architecture of an SDN may be vulnerable to security threats from traditional networks and new information security vulnerabilities. Several studies [9][10][11] have analyzed the security threats posed to the SDN architecture. The control layer of SDN is the core component responsible for converting the priority conditions of the application program, providing precise instructions for each system component, and providing relevant information to the SDN application program.…”

Data security in smart devices: Advancement, constraints and future recommendations

“…Availability is also a type of security service that ensures that only authorised individuals have access to systems and devices. To protect, data, cryptography and encryption techniques are widely used in network security protocols [6][7][8]; the data was encrypted, and it can only be decrypted with a compatible key.…”

Controller placement problem during SDN deployment in the ISP/Telco networks: A survey

“…Application security, API security, controller security, DDoS, infrastructure security, and so forth are all supported by secure SDN architecture. 134 It's important to take into account dynamic variations in application demand as well. 135 The IoT, autonomous vehicles, telemedicine, and smart cities are a few examples of emerging technologies that have always attracted attackers.…”

“…Application security, API security, controller security, DDoS, infrastructure security, and so forth are all supported by secure SDN architecture 134 . It's important to take into account dynamic variations in application demand as well 135 …”