Towards a Richer Set of Services in Software-Defined Networks

Abstract

Abstract-Software-Defined Networking (SDN) has drawn increasing attention from both industry and academia, owing to its premise to simplify the management and control over large networks. While the SDN technology was initially deployed within datacenters, there are currently early deployments of SDN in Wide-Area Networks; SDN is further envisioned to be deployed in the near future within fixed and mobile networks.In this paper, we show that the envisioned deployment of SDN within operator networks opens the doors to novel network security services that the operators can efficiently offer. More specifically, we propose in this work two exemplary operator services; our first solution enables the construction of secure location proofs for registered network users. Our second solution offers users the possibility to request the setup of network paths that are tailored to their specific security constraints, e.g., that only cross domains regulated by appropriate legislations which match their security policies. We show that this can be securely and efficiently attained by leveraging basic functionality from the OpenFlow protocol. In this respect, we evaluate the feasibility of our proposals by means of implementation within a realistic testbed composed of hardware OpenFlow-enabled switches; our findings suggest that our proposals can be deployed with minimal overhead within existing SDN-enabled networks.

Security Threats in Software Defined Mobile Clouds (SDMC)

“…SDN survey of latest developments, three-layer architecture & some open challenges were suggested by Wenfeng Xia, Yonggang Wen in their work [13].Many researchers concentrated the applications of SDN technology in various network control activities in their specific projects. Roberto Bifulco, Ghassan O. Karame suggested a new SDN path towards richer set of services [14] which makes possible of secure location for registered network users. Network control can also have an impact by packet classification through dynamic routing [15] and genetic algorithm based Deep Packet Inspection (DPI) [16].…”

Security of Software Defined Networks: A survey

“…The goal was to add more information in addition to those typically exist in packet headers that can uniquely identify the sender application, user, machine, etc. [Bifulco and Karame 2014] proposed a location based identification of hosts in addition to the IP address that is associated with the public key encryption of the user or the host.…”

Towards Autonomic DDoS Mitigation using Software Defined Networking

“…The flows arriving at the access switches(edge switches) are tagged by the access switches itself. As proposed in the [5], our tagging function logic is encoded at the access switches(edge switches) to minimize the overhead at the controller.…”