Security and Privacy Issues in Software-Defined Networking (SDN): A Systematic Literature Review

Abstract

Software-defined network (SDNs) have fundamentally changed network infrastructure by decoupling the data plane and the control plane. This architectural shift rejuvenates the network layer by granting the re-programmability and centralized management of networks which brings about exciting challenges. Although an SDN seems to be a secured network when compared to conventional networks, it is still vulnerable and faces rigorous deployment challenges. Moreover, the bifurcation of data and control planes also opens up new security problems. This systematic literature review (SLR) has formalized the problem by identifying the potential attack scenarios and highlighting the possible vulnerabilities. Eighty-six articles have been selected carefully to formulize the SLR. In this SLR, we have identified major security attacks on SDN planes, including the application plane, control plane, and data plane. Moreover, this research also identifies the approaches used by industry experts and researchers to develop security solutions for SDN planes. In this research, we have introduced an attack taxonomy and proposed a collaborative security model after comprehensively identifying security attacks on SDN planes. Lastly, research gaps, challenges, and future directions are discussed for the deployment of secure SDNs.

The Analysis the Performance of SDN Controller and AI System for Future Network

“…The speed of the network with malware data depends on the fast detection of malware data, which results in DR and FPR detection with high-rate and low-rate DDoS attacks in the SDN controller, as explained by the author in this paper [6]. In this paper, the authors present a systematic review of SDN security, privacy, and taxonomic issues of cyber-attacks.…”

Detection and mitigation of DDoS attacks in SDN based intrusion detection system

“…By swiftly identifying potential threats, such as unusual traffic patterns or unexpected activities, IDS ensures the safeguarding of the SDN infrastructure. This integration bolsters network security by facilitating real-time monitoring and detection capabilities, augmenting the ability to identify and counter potential threats, including DDoS attacks [15].…”