Using advanced detection and prevention technique to mitigate threats in SDN architecture

Sebbar, Anass; Zkik, Karim; Baadi, Youssef; Boulmalf, Mohammed; Kettani, Mohamed Dâfir Ech-Cherif El

doi:10.1109/iwcmc.2019.8766552

Cited by 11 publications

(2 citation statements)

References 12 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…For mitigating the threats in SDN architectures, the authors in [231] developed an algorithm to thwart the DoS and malware attacks, and it was tested and evaluated on multiple adversarial settings. In [39], the authors surveyed the SDN-based intrusion detection and prevention mechanisms from the context of security in IoT services, which was incorporated based on the manufacturer usage description.…”

Section: Threat Detection and Prevention Techniquesmentioning

confidence: 99%

SDN Security Review: Threat Taxonomy, Implications, and Open Challenges

et al. 2022

View full text Add to dashboard Cite

Software-Defined networking (SDN) is a networking paradigm to enable dynamic, flexible, and programmatically efficient configuration of networks to revolutionize network control and management via separation of the control plane and data plane. The SDN technology has evolved in response to the demands from large data centers toward all types of networks, from IoT, enterprise, to ISP networks. On the one hand, SDN has provided solutions for high-demand resources, managing unpredictable data traffic patterns, and rapid network reconfiguration. It is further used to enhance network virtualization and security. On the other hand, SDN is still subject to many traditional network security threats. It also introduces new security vulnerabilities, primarily due to its logically centralized control plane infrastructure and functions. In this paper, we conduct a comprehensive survey on the core functionality of SDN from the perspective of secure communication infrastructure at different scales. A specific focus is put forward to address the challenges in securing SDN-based communications, with efforts taken up to address them. We further categorize the appropriate solutions for specific threats at each layer of SDN infrastructures. Lastly, security implications and future research trends are highlighted to provide insights for future research.INDEX TERMS Software defined networks, OpenFlow, security, threat, attack, vulnerability, network security.• Discussion of the future research directions and open challenges hindering resiliency and security in SDNenabled systems. Different from existing papers, this paper provides an up-to-date discussion about security issues in SDN environments. The presented taxonomy covers security threats ranging from topology discovery, network and app manipulation, flow diversion, teleportation & rootkits, controller placement, access control and authorization, to conventional networking threats. Further, in addition to reviewing existing security solutions and related implications, this paper provides key use cases of SDN technology implementation in smart communication systems. This layout is aimed to enable researchers to focus on the challenges that breach security in SDN communications. Ultimately, this work will provide further insights for future research in the SDN security domain.

show abstract

Section: Threat Detection and Prevention Techniquesmentioning

confidence: 99%

SDN Security Review: Threat Taxonomy, Implications, and Open Challenges

et al. 2022

View full text Add to dashboard Cite

show abstract

“…KPG-MT [132], is an algorithm for the mitigation of a variety of security threats such as MITM, DoS and malware. KPG-MT has been implemented at different levels of the SDN architecture.…”

Section: Threat Prevention and Mitigationmentioning

confidence: 99%

Hybrid SDN evolution: A comprehensive survey of the state-of-the-art

et al. 2021

View full text Add to dashboard Cite

Software-Defined Networking (SDN) is an evolutionary networking paradigm which has been adopted by large network and cloud providers, among which are Tech Giants. However, embracing a new and futuristic paradigm as an alternative to well-established and mature legacy networking paradigm requires a lot of time along with considerable financial resources and technical expertise. Consequently, many enterprises can not afford it. A compromise solution then is a hybrid networking environment (a.k.a. Hybrid SDN (hSDN)) in which SDN functionalities are leveraged while existing traditional network infrastructures are acknowledged.Recently, hSDN has been seen as a viable networking solution for a diverse range of businesses and organizations. Accordingly, the body of literature on hSDN research has improved remarkably. On this account, we present this paper as a comprehensive state-of-the-art survey which expands upon hSDN from many different perspectives.

show abstract