2018/04/01 by Arash Shaghaghi, Shaghaghi, Arash, Mohamed Ali Kâafar +5
Computer Science · #Software-Defined Networks and 5G #Advanced Malware Detection Techniques #Network Security and Intrusion Detection
paper · pdf · doi:10.48550/arxiv.1804.00262
Software-Defined Network (SDN) radically changes the network architecture by\ndecoupling the network logic from the underlying forwarding devices. This\narchitectural change rejuvenates the network-layer granting centralized\nmanagement and re-programmability of the networks. From a security perspective,\nSDN separates security concerns into control and data plane, and this\narchitectural recomposition brings up exciting opportunities and challenges.\nThe overall perception is that SDN capabilities will ultimately result in\nimproved security. However, in its raw form, SDN could potentially make\nnetworks more vulnerable to attacks and harder to protect. In this paper, we\nfocus on identifying challenges faced in securing the data plane of SDN - one\nof the least explored but most critical components of this technology. We\nformalize this problem space, identify potential attack scenarios while\nhighlighting possible vulnerabilities and establish a set of requirements and\nchallenges to protect the data plane of SDNs. Moreover, we undertake a survey\nof existing solutions with respect to the identified threats, identifying their\nlimitations and offer future research directions.\n