A Survey of Securing Networks Using Software Defined Networking

Ali, Syed Taha; Sivaraman, Vijay; Radford, Adam; Jha, Sanjay

doi:10.1109/tr.2015.2421391

Cited by 155 publications

(66 citation statements)

References 49 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…The survey found that SDN security is still at its nascent stage. Similar studies have been performed by Wenjuang et al [13], Ali et al [20], Scott-Hayward et al [19] and Chen et al [24]. Moreover, Kreutz et al [14] strongly advocated for the importance of integrating security and dependability into SDN design and outline various threats categories which SDN can be attacked with such as, forged traffic flows, attacks on vulnerabilities in controllers and switches, attacks on control plane communication, lack of trust between controller and management applications and so on.…”

Section: Related Worksupporting

confidence: 86%

“…This is because, threats emanating from cyber activities are growing exponentially and more sophisticated where the potential impact of a successful attack on network like the SDN may be catastrophic [20]. Thus, it is critically essential that various SDN security threats should be attended to at the early stage in order to reap the benefits it offers.…”

Section: B Sdn Security and Trustmentioning

confidence: 99%

See 1 more Smart Citation

Trust Establishment in SDN: Controller and Applications

Isong¹,

Kgogo²,

Lugayizi³

2017

IJCNIS

View full text Add to dashboard Cite

Abstract-Software Defined Networks (SDNs) is a network technology developed to deal with several limitations faced by the current traditional networks. However, SDN itself is confronted with security challenges which emanates specifically from its platform, given the explosive growth in network attacks and threats. Though many solutions have been developed and proposed, the continual lack of trust between the SDN controller and the applications running atop the control plane poses a great security challenge. SDN controller can easily be attacked by malicious/compromised applications which can result in network failure as the controller represents a single point of failure. Though trust mechanisms to certify network devices exist, mechanisms to certify management applications are still not well developed. Therefore, this paper proposes a novel direct trust establishment framework between an OpenFlow-based SDN controller and applications. The objective is to ensure that SDN controller is protected and diverse applications that consumes network resources are always trusted throughout their lifetime. Additionally, the paper introduce the concept of trust access matrix and application identity to ensure efficient control of network resources. We believe that, if the proposed trust model is adopted in the OpenFlow architecture, it could go a long way to improve the security of the SDN.

show abstract

Section: Related Worksupporting

confidence: 86%

Section: B Sdn Security and Trustmentioning

confidence: 99%

Trust Establishment in SDN: Controller and Applications

Isong¹,

Kgogo²,

Lugayizi³

2017

IJCNIS

View full text Add to dashboard Cite

show abstract

“…The implementation of the firewall rules in Mininet with POX Controller proves the ability to generate policies by mining the logs. This work can be extended to derive the firewall policy with respect to attack detection using ensemble algorithm and mine the associated firewall rules whereas switch itself will act as an Intrusion Detection System [12].…”

Section: Resultsmentioning

confidence: 99%

FlowAgent: Software Defined Firewall Rule Generator for Network Intrusion Detection System

Muthukumaran¹,

Jayakumar²

2017

IJIES

View full text Add to dashboard Cite

Networking suffers from various security vulnerabilities in the present paradigm due to the technical difficulties like static architectural design, provider-dependent and it is economically costly. To overcome these challenges a novel paradigm concept is introduced based on dynamic control in the network as Software Defined Firewall. Software Defined Network is an emerging reprogrammable technology which helps the administrator to control the overall network, on the other hand Firewall act as a single point perimeter to protect the network from network attacks. Combination of different paradigms led to reshaping of future. Software Defined Firewall is a new network platform to manage the networks by segregating the control plane from the data plane. This separation provides a programmatic control over the network traffic by writing rules, which act as a network attack defence. Hereby the firewall policy rules are written by analysing the traffic and packet log are mined using Association rule mining techniques. Analysis of these policy rules costs for generation of efficient rule set and multiple minimum support with probability will minimize the number of rule set which will result in effective network policy management. Software Defined Firewall provides a better solution to reduce ratio of attack traffic.

show abstract

“…This poses unique challenges for management framework designer of IoT. Research on security management can be found in [15].…”

Section: Security Managementmentioning

confidence: 99%

Software Defined Security Service Provisioning Framework for Internet of Things

Khan¹,

Hameed²

2016

ijacsa

View full text Add to dashboard Cite

Abstract-Programmable management framework have paved the way for managing devices in the network. Lately, emerging paradigm of Software Defined Networking (SDN) have revolutionized programmable networks. Designers of networking applications i.e. Internet of things (IoT) have started investigating potentials of SDN paradigm in improving network management. IoT envision interconnecting various embedded devices surrounding our environment with IP to enable internet connectivity. Unlike traditional network architectures, IoT are characterized by constraint in resources and heterogeneous inter connectivity of wireless and wired medium. Therefore, unique challenges for managing IoT are raised which are discussed in this paper. Ubiquity of IoT have raised unique security challenges in IoT which is one of the aspect of management framework for IoT. In this paper, security threats and requirements are summarized in IoT extracted from the state of the art efforts in investigating security challenges of IoT. Also, SDN based security service provisioning framework for IoT is proposed.

show abstract

A Survey of Securing Networks Using Software Defined Networking

Cited by 155 publications

References 49 publications

Trust Establishment in SDN: Controller and Applications

Trust Establishment in SDN: Controller and Applications

FlowAgent: Software Defined Firewall Rule Generator for Network Intrusion Detection System

Software Defined Security Service Provisioning Framework for Internet of Things

Contact Info

Product

Resources

About