Strengthening SDN Security: Protocol Dialecting and Downgrade Attacks

Sjoholmsierchio, Michael; Hale, Britta; Lukaszewski, Daniel; Xie, Geoffrey G.

doi:10.1109/netsoft51509.2021.9492614

Cited by 17 publications

(8 citation statements)

References 14 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Finally, this article raises questions and challenges regarding existing methods. Of course, there are also research areas that have not been covered in this article, such as the SDN communication protocol against DDoS attacks [119] and application-level defense methods against DDoS attacks [120]. Absolute network security does not exist, and security attacks on networks will never end.…”

Section: Discussionmentioning

confidence: 99%

A Comprehensive Survey of Distributed Denial of Service Detection and Mitigation Technologies in Software-Defined Network

Su,

Xiong,

Qian

et al. 2024

Electronics

View full text Add to dashboard Cite

The widespread adoption of software-defined networking (SDN) technology has brought revolutionary changes to network control and management. Compared to traditional networks, SDN enhances security by separating the control plane from the data plane and replacing the traditional network architecture with a more flexible one. However, due to its inherent architectural flaws, SDN still faces new security threats. This paper expounds on the architecture and security of SDN, analyzes the vulnerabilities of SDN architecture, and introduces common distributed denial of service (DDoS) attacks within the SDN architecture. This article also provides a review of the relevant literature on DDoS attack detection and mitigation in the current SDN environment based on the technologies used, including statistical analysis, machine learning, policy-based, and moving target defense techniques. The advantages and disadvantages of these technologies, in terms of deployment difficulty, accuracy, and other factors, are analyzed. Finally, this study summarizes the SDN experimental environment and DDoS attack traffic generators and datasets of the reviewed literature and the limitations of current defense methods and suggests potential future research directions.

show abstract

Section: Discussionmentioning

confidence: 99%

A Comprehensive Survey of Distributed Denial of Service Detection and Mitigation Technologies in Software-Defined Network

Su,

Xiong,

Qian

et al. 2024

Electronics

View full text Add to dashboard Cite

show abstract

“…In [ 132 ], security assurance is guaranteed through protocol dialects extension. The protocol dialect carries the objectives to provide robustness against downgrade attacks and specializes the network protocol in the context of network security.…”

Section: Network Security and Managementmentioning

confidence: 99%

Software-Defined Networking: Categories, Analysis, and Future Directions

Hussain

Shah

Amin³

et al. 2022

Sensors

View full text Add to dashboard Cite

Software-defined networking (SDN) is an innovative network architecture that splits the control and management planes from the data plane. It helps in simplifying network manageability and programmability, along with several other benefits. Due to the programmability features, SDN is gaining popularity in both academia and industry. However, this emerging paradigm has been facing diverse kinds of challenges during the SDN implementation process and with respect to adoption of existing technologies. This paper evaluates several existing approaches in SDN and compares and analyzes the findings. The paper is organized into seven categories, namely network testing and verification, flow rule installation mechanisms, network security and management issues related to SDN implementation, memory management studies, SDN simulators and emulators, SDN programming languages, and SDN controller platforms. Each category has significance in the implementation of SDN networks. During the implementation process, network testing and verification is very important to avoid packet violations and network inefficiencies. Similarly, consistent flow rule installation, especially in the case of policy change at the controller, needs to be carefully implemented. Effective network security and memory management, at both the network control and data planes, play a vital role in SDN. Furthermore, SDN simulation tools, controller platforms, and programming languages help academia and industry to implement and test their developed network applications. We also compare the existing SDN studies in detail in terms of classification and discuss their benefits and limitations. Finally, future research guidelines are provided, and the paper is concluded.

show abstract

“…It may be possible to change the network configuration of each network node, use the built-in operating system, standard utilities, and get access to the terminal. Additionally, it may be possible to add various rules and route traffic upon the network [5].…”

Section: Mininetmentioning

confidence: 99%

Implementation and Evaluation of Nodal Distribution and Movement in a 5G Mobile Network

et al. 2021

View full text Add to dashboard Cite

The determining factor in the accelerated pace of informatization is the increase in the speed and reliability of data transmission networks. In this regard, new and existing standards are developed and modernized. A lot of organizations are constantly working on the development and implementation of new generation communication networks. This article provides an overview of available software solutions that allow us to investigate and evaluate the behavior of data networks. In particular, tools suitable for mobile communication systems were determined, having sufficient built-in functionality and allowing us to add our own implementations. NS3 has been chosen as a suitable network simulator. Apart from the review, a solution for this tool was developed. It allows estimating the reliability of data transmission from the start movement of a network node at all times during its removal from a base station.

show abstract

Strengthening SDN Security: Protocol Dialecting and Downgrade Attacks

Cited by 17 publications

References 14 publications

A Comprehensive Survey of Distributed Denial of Service Detection and Mitigation Technologies in Software-Defined Network

A Comprehensive Survey of Distributed Denial of Service Detection and Mitigation Technologies in Software-Defined Network

Software-Defined Networking: Categories, Analysis, and Future Directions

Implementation and Evaluation of Nodal Distribution and Movement in a 5G Mobile Network

Contact Info

Product

Resources

About