Software defined networks: A survey

Masoudi, Rahim; Ghaffari, Ali

doi:10.1016/j.jnca.2016.03.016

Cited by 203 publications

(72 citation statements)

References 157 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The solution offered by the SDN is the mix of intelligence and flexibility of routing techniques with a higher capacity of integrated application. This concept supports the programmable control interface which decouples and abstracts the control plane from the data plane [29]. With the introduction of SDN, control of the resources gets centralized which exponentially decrease the cost of the hardware infrastructure and cost of management of the network.…”

Section: B Redefined Cloud Network With Openflowmentioning

confidence: 99%

“…Dynamic access control framework implemented in Resonance [29], where controller implements policies with programmable switches. In this research controller provide central authentication and compromised host is segregated.…”

Section: B Enforcing Network Wide Security Policiesmentioning

confidence: 99%

“…In this research controller provide central authentication and compromised host is segregated. A four state architecture that resembles framework elaborated in [29] was presented with high level policy language in [30]. Access control list and polices for NOX controller as core component of flow based policy enforcement discussed in [31].…”

Section: B Enforcing Network Wide Security Policiesmentioning

confidence: 99%

“…They have more impact on security with automatic user authentication [16], virtual IP allocated to host [17], monitoring with varied granularity [18], avoidance of conflicts in rules [33], and with detection and tracking capabilities [37]. The security of both infrastructure layer and control layer are considered in [13], [29], [36] with DDoS detection, access control and unwanted traffic control respectively. Authors in [39] elaborate security mechanism for control and application layer with threat detection and mitigation.…”

Section: Security Control In Multiple Layersmentioning

confidence: 99%

“…Therefore, to achieve high level of connectivity and communication, cloud computing deployment architectures are propelled by Software Defined Networks (SDN). SDN is introduced as a flexible way to control network in a more sophisticated and planned manner, with OpenFlow as the most commonly used SDN protocols [29]. SDN with centralized control on the network devices, make network open and programmable.…”

Section: Introductionmentioning

confidence: 99%

See 4 more Smart Citations

Security in OpenFlow Enabled Cloud Environment

Alameen¹,

Rubab²,

Dhupia³

et al. 2017

ijacsa

View full text Add to dashboard Cite

Abstract-Inception of flow tables as data plane abstraction, and forwarding rules that are managed by centralized controllers in emerging Software Defined Networks (SDN) has stemmed significant progress in OpenFlow based architectures. SDN is particularly fueled by data center networking and cloud computing. OpenFlow coupled with cloud solutions provide dynamic networking capabilities. With the benefits obtained from network services, security enforcement become more important and need powerful techniques for its implementation. Extensive researches in cloud security bring forward numerous methods of leveraging the SDN architecture with efficient security enforcement. The future of SDN and mobile networks is also enlightened if security models are satisfactory to cover dynamic and flexible requirements of evolving networks. This paper presents a survey of the state of the art research on security techniques in OpenFlow based cloud environments. Security is one of the main aspect of any network. A fair study and evaluation of these methods are carried out in the paper along with the security considerations in SDN and its enforcement. The security issues and recommendations for 5g network are covered briefly. This work provides an understanding of the problem, its current solution space, and anticipated future research directions.

show abstract

Section: B Redefined Cloud Network With Openflowmentioning

confidence: 99%

Section: B Enforcing Network Wide Security Policiesmentioning

confidence: 99%

Section: B Enforcing Network Wide Security Policiesmentioning

confidence: 99%

Section: Security Control In Multiple Layersmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 3 more Smart Citations

Security in OpenFlow Enabled Cloud Environment

Alameen¹,

Rubab²,

Dhupia³

et al. 2017

ijacsa

View full text Add to dashboard Cite

show abstract

QoS‐based routing scheme in software‐defined networks using fuzzy analytic hierarchy process

Rezaei

Ghaffari

2023

Concurrency and Computation

Self Cite

View full text Add to dashboard Cite

Summary Recently, with the rapid development of the Internet of Things (IoT) and its real‐time applications, the network is required to guarantee the differential quality of service (QoS) requirements of the various data flows (telemedicine, video, and live streaming) of various IoT services. Software‐defined network (SDN) as emerging network technology separates the control logic from data planes of networks and is a promising technique to guarantee the QoS requirements of different services. In SDN, the controller has global visibility of the whole network devices such as switches and routers. Hence, controllers can dynamically optimize QoS requirements and resources of the network. On the other hand, providing a QoS‐aware routing scheme is an important challenge. Hence, in this paper by capitalizing on the fuzzy analytic hierarchy process (AHP), a new QoS‐aware routing method is proposed in SDNs. The proposed scheme considers the combination of different QoS criteria such as bandwidth, route length, reliability, and bit error rate for selecting an appropriate route between sender and receiver nodes. The simulation results indicated that the proposed method improves throughput and end‐to‐end delay. Comparison with other routing algorithms shows that the proposed method performs better load balancing under different network topologies.

show abstract

Security anomaly detection in software‐defined networking based on a prediction technique

Jafarian

Màsdàrí

Ghaffari

et al. 2020

Int J Communication

View full text Add to dashboard Cite

SummaryNowadays, software‐defined networking (SDN) is regarded as the best solution for the centralized handling and monitoring of large networks. However, it should be noted that SDN architecture suffers from the same security issues, which are the case with common networks. As a case in point, one of the shortcomings of SDNs is related to its high vulnerability to distributed denial of service (DDoS) attacks and other similar ones. Indeed, anomaly detection systems have been considered to deal with these attacks. The challenges are related to designing these systems including gathering data, extracting effective features, and selecting the best model for anomaly detection. In this paper, a novel combined approach is proposed; this method uses NetFlow protocol for gathering information and generating dataset, information gain ratio (IGR), in order to select the effective and relevant features and ensemble learning scheme (Stacking) for developing a structure with desirable performance and efficiency for detecting anomaly in SDN environment. The results obtained from the experiments revealed that the proposed method performs better than other methods in terms of enhancing accuracy (AC) and detection rate (DR) and reducing classification error (CE) and false alarm rate (FAR). The AC, DR, CE, and FAR of the proposed model were measured as 99.92%, 99.83%, 0.08%, and 0.03%, respectively. Furthermore, the proposed method prevents the occurrence of excessive overload on the controller and OpenFlow.

show abstract

Software defined networks: A survey

Cited by 203 publications

References 157 publications

Security in OpenFlow Enabled Cloud Environment

Security in OpenFlow Enabled Cloud Environment

QoS‐based routing scheme in software‐defined networks using fuzzy analytic hierarchy process

Security anomaly detection in software‐defined networking based on a prediction technique

Contact Info

Product

Resources

About