Top

Published in:

2021 | OriginalPaper | Chapter

Security Issues and Challenges in SDN

Authors : Ali Haider Shamsan, Arman Rasool Faridi

Published in: Advances in Cyber Security

Publisher: Springer Singapore

Activate our intelligent search to find suitable subject content or patents.

search-config

AI-assisted search

Off

Abstract

Software Defined Network SDN is a programmable network with the new architecture of separating control functions from the switching devices. The new paradigm of SDN still not secured enough due to the differences in compared to the legacy network. SDN security is considered as key concern and challenge while it’s unproven in regard to the single point of controlling and management – centralized controller - which it may become a target for attackers. This paper surveys the overview of SDN, and its characteristics, as well as, APIs interface in order to understand the background of SDN. The security issues and threats are surveyed with proposed solutions to those issues.

Dont have a licence yet? Then find out more about our products and how to get one now:

Springer Professional "Wirtschaft+Technik"

Online-Abonnement

Mit Springer Professional "Wirtschaft+Technik" erhalten Sie Zugriff auf:

über 102.000 Bücher
über 537 Zeitschriften

aus folgenden Fachgebieten:

Automobil + Motoren
Bauwesen + Immobilien
Business IT + Informatik
Elektrotechnik + Elektronik
Energie + Nachhaltigkeit
Finance + Banking
Management + Führung
Marketing + Vertrieb
Maschinenbau + Werkstoffe
Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

inform now

Springer Professional "Technik"

Online-Abonnement

Mit Springer Professional "Technik" erhalten Sie Zugriff auf:

über 67.000 Bücher
über 390 Zeitschriften

aus folgenden Fachgebieten:

Automobil + Motoren
Bauwesen + Immobilien
Business IT + Informatik
Elektrotechnik + Elektronik
Energie + Nachhaltigkeit
Maschinenbau + Werkstoffe

Jetzt Wissensvorsprung sichern!

inform now

Springer Professional "Wirtschaft"

Online-Abonnement

Mit Springer Professional "Wirtschaft" erhalten Sie Zugriff auf:

über 67.000 Bücher
über 340 Zeitschriften

aus folgenden Fachgebieten:

Bauwesen + Immobilien
Business IT + Informatik
Finance + Banking
Management + Führung
Marketing + Vertrieb
Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

inform now

previous chapter Review of Data Integrity Attacks and Mitigation Methods in Edge Computing

next chapter CLH: Approach for Detecting Deep Fake Videos

Imran, A.: SDN controllers security issues, ayesha. Master thesis, University of Jyväskylä (2017)

Nunes, B.A.A., Mendonca, M., Nguyen, X.N., Obraczka, K., Turletti, T.: A survey of software-defined networking: past, present, and future of programmable networks. IEEE Commun. Surv. Tutor. 16, 1617–1634 (2014). https://doi.org/10.1109/SURV.2014.012214.00180CrossRef

Wan, J., et al.: Software-defined industrial internet of things in the context of industry 4.0. IEEE Sens. J. 16, 7373–7380 (2016)CrossRef

Shu, Z., Wan, J., Li, D., Lin, J., Vasilakos, A.V., Imran, M.: Security in software-defined networking: threats and countermeasures. Mob. Netw. Appl. 21(5), 764–776 (2016). https://doi.org/10.1007/s11036-016-0676-xCrossRef

Tripathy, B.K., Das, D.P., Jena, S.K., Bera, P.: Risk based security enforcement in software defined network. Comput. Secur. 78, 321–335 (2018). https://doi.org/10.1016/j.cose.2018.07.010CrossRef

Ageyev, D., Bondarenko, O., Alfroukh, W., Radivilova, T.: Provision security in SDN/NFV. In: 2018 14th International Conference on Advanced Trends in Radioelecrtronics, Telecommunications and Computer Engineering (TCSET), pp. 506–509. IEEE (2018)

Sezer, S., Scott-Hayward, S., Kaur, P.: Are we ready for SDN? Implementation challenges for software-defined networks. IEEE Commun. Mag. 51, 36–43 (2013). https://doi.org/10.1109/MCOM.2013.6553676CrossRef

Kaur, R., Singh, A., Singh, S., Sharma, S.: Security of software defined networks: taxonomic modeling, key components and open research area. IEEE IInternational Conference Electrical, Electronics, and Optimization Techniques, pp. 2832–2839 (2016)

Hussein, A., Elhajj, I.H., Chehab, A., Kayssi, A.: SDN security plane: an architecture for resilient security services. In: Proceedings - 2016 IEEE International Conference on Cloud Engineering Workshop, IC2EW 2016, pp. 54–59 (2016). https://doi.org/10.1109/IC2EW.2016.15

10.

Dacier, M.C., König, H., Cwalinsk, R., Kargl, F., Dietrich, S.: Security challenges and opportunities of software-defined networking. IEEE Secur. Priv. 15, 96–100 (2017). https://doi.org/10.1109/MSP.2017.46CrossRef

11.

Scott-Hayward, S.: Design and deployment of secure, robust, and resilient SDN controllers. In: Proceedings of 2015 1st IEEE Conference on Network Softwarization, pp. 1–5 (2015). https://doi.org/10.1109/NETSOFT.2015.7258233

12.

Scott-Hayward, S., O’Callaghan, G., Sezer, S.: SDN security: a survey. In: SDN4FNS 2013 - 2013 Working on Software Defined Networks Future Networks and Services (2013). https://doi.org/10.1109/SDN4FNS.2013.6702553

13.

Dhawan, M., Poddar, R., Mahajan, K., Mann, V.: S PHINX: detecting security attacks in software-defined networks. In: NDSS 2015, pp. 8–11 (2015). http://dx.doi.org/10.14722/ndss.2015.23064

14.

Patil, V., Patil, C., Awale, R.N.: Security challenges in software defined network and their solutions. In: 2017 8th International Conference on Computing, Communication and Networking Technologies, pp. 1–5 (2017). https://doi.org/10.1109/ICCCNT.2017.8203978

15.

Akhunzada, A., Ahmed, E., Gani, A., Khan, M.K., Imran, M., Guizani, S.: Securing software defined networks: taxonomy, requirements, and open issues. IEEE Commun. Mag. 53, 36–44 (2015). https://doi.org/10.1109/MCOM.2015.7081073CrossRef

16.

Scott-Hayward, S., Natarajan, S., Sezer, S.: A survey of security in software defined networks. IEEE Commun. Surv. Tutor. 18(1), 623–654 (2016). https://doi.org/10.1107/S0567739470000293CrossRef

17.

Kreutz, D., Ramos, F.M.V., Veríssimo, P.E., Rothenberg, C.E., Azodolmolky, S., Uhlig, S.: Software-defined networking : a comprehensive survey. 103 (2015). https://doi.org/10.1109/JPROC.2014.2371999

18.

Kreutz, D., Ramos, F.M.V., Verissimo, P.: Towards secure and dependable software-defined networks, vol. 42, pp. 55–60. ACM (2013)

19.

Bera, S., Misra, S., Vasilakos, A.V.: Software-defined networking for internet of things: a survey (2017)

20.

Li, J., Li, D., Yu, Y., Huang, Y., Zhu, J., Geng, J.: Towards full virtualization of SDN infrastructure. Comput. Netw. 143, 1–14 (2018). https://doi.org/10.1016/j.comnet.2018.06.014CrossRef

21.

Li, W., Meng, W., Kwok, L.F.: A survey on OpenFlow-based software defined networks: security challenges and countermeasures. J. Netw. Comput. Appl. 68, 126–139 (2016). https://doi.org/10.1016/j.jnca.2016.04.011CrossRef

22.

Xie, J., et al.: A survey of machine learning techniques applied to software defined networking (SDN): research issues and challenges. IEEE Commun. Surv. Tutor. 1 (2018). https://doi.org/10.1109/COMST.2018.2866942

23.

Akhunzada, A., Khan, M.K.: Toward secure software defined vehicular networks: taxonomy, requirements, and open issues. IEEE Commun. Mag. 55, 110–118 (2017). https://doi.org/10.1109/MCOM.2017.1601158CrossRef

24.

Open Networking Foundation: Software-Defined Networking : The New Norm for Networks. ONF White Paper, vol. 2, pp. 2–6 (2012)

25.

Farhady, H., Lee, H., Nakao, A.: Software-defined networking: a survey. Comput. Netw. 81, 79–95 (2015). https://doi.org/10.1016/J.COMNET.2015.02.014CrossRef

26.

Göransson, P., Black, C., Culve, T.: Software Defined Networks A Comprehensive Approach. Morgan Kaufmann (2017)

27.

Garg, G., Garg, R.: Review on architecture & security issues of. Int. J. Innov. Res. Comput. Commun. Eng. 2, 6519–6524 (2014)

28.

Fan, X., Lu, Z., Ju, L., Mu, D.: The research on security SDN south interface based on OTR protocol. In: 2016 16th International Symposium on Communications and Information Technologies, ISC 2016, pp. 629–633 (2016). https://doi.org/10.1109/ISCIT.2016.7751709

29.

Spooner, J.: A review of solutions for SDN-exclusive security issues. Int. J. Adv. Comput. Sci. Appl. 7, 113–122 (2016)

30.

Sharif, W.: A practical framework for finding software vulnerabilities in SDN controllers (2017)

31.

Raghav, P., Dua, A.: Enhancing flow security in Ryu controller through set operations. 2017 3rd IEEE International Conference on Computer and Communications, ICCC 2017, vol. 2018-Janua, pp. 1265–1269 (2018). https://doi.org/10.1109/CompComm.2017.8322746

32.

Spooner, J.: A review of solutions for SDN-exclusive security issues, vol. 7, pp. 113–122 (2016)

33.

Othman, O.M., Okamura, K.: Securing distributed control of software defined networks. Int. J. Comput. Sci. Netw. 13, 5–14 (2013)

34.

Li, H., Li, P., Guo, S., Nayak, A.: Byzantine-resilient secure software-defined networks with multiple controllers in cloud. IEEE Trans. Cloud Comput. 2, 436–447 (2014). https://doi.org/10.1109/TCC.2014.2355227CrossRef

35.

Yu, D.: Authentication for resilience: the case of SDN (transcript of discussion). In: Christianson, B., Malcolm, J., Stajano, F., Anderson, J., Bonneau, J. (eds.) Security Protocols 2013. LNCS (LNAI and LNB), vol. 8263, pp. 45–53. Springer, Heidelberg (2013). https://doi.org/10.1007/978-3-642-41717-7_7CrossRef

36.

Wen, X., Chen, Y., Hu, C., Shi, C., Wang, Y.: Towards a secure controller platform for openflow applications, p. 171 (2013). https://doi.org/10.1145/2491185.2491212

37.

Scott-Hayward, S., Kane, C., Sezer, S.: OperationCheckpoint: SDN application control. In: Proceedings - International Conference on Network Protocols, ICNP, pp. 618–623 (2014). https://doi.org/10.1109/ICNP.2014.98

38.

Porras, P., Cheung, S., Fong, M., Skinner, K., Yegneswaran, V.: Securing the software defined network control layer. In: Proceedings of 2015 Network and Distributed System Security Symposium, pp. 8–11 (2015). https://doi.org/10.14722/ndss.2015.23222

39.

Pemasaran, D., Niaga, D.A.N.: AuthFlow: authentication and access control mechanism for software defined networking diogo (2014)

40.

Shin, S., Yegneswaran, V., Porras, P., Gu, G.: AVANT-GUARD: scalable and vigilant switch flow management in software-defined networks. ACM. (2013). http://dx.doi.org/10.1145/2508859.2516684

41.

Fonseca, P., Bennesby, R., Mota, E., Passito, A.: A replication component for resilient OpenFlow-based networking. In: Proceedings of 2012 IEEE Network Operations and Management Symposium, NOMS 2012, pp. 933–939 (2012). https://doi.org/10.1109/NOMS.2012.6212011

42.

Yao, G., Bi, J., Xiao, P.: Source address validation solution with OpenFlow/NOX architecture. In: Proceedings - International Conference on Network Protocol, ICNP, pp. 7–12 (2011). https://doi.org/10.1109/ICNP.2011.6089085

43.

Naous, J., Stutsman, R., Mazieres, D., McKeown, N., Zeldovich, N.: Delegating network security with more information, p. 19 (2009). https://doi.org/10.1145/1592681.1592685

44.

Wei, L., Fung, C.: FlowRanger: a request prioritizing algorithm for controller DoS attacks in software defined networks. In: IEEE International Conference on Communication, vol. 2015-Septe, pp. 5254–5259 (2015). https://doi.org/10.1109/ICC.2015.7249158

45.

Mousavi, S.M., St-Hilaire, M.: Early detection of DDoS attacks against SDN controllers. In: 2015 International Conference on Computer Networking and Communications, ICNC 2015, pp. 77–81 (2015). https://doi.org/10.1109/ICCNC.2015.7069319

46.

Wang, M., Liu, J., Chen, J., Mao, J.: PERM-GUARD : authenticating the validity of flow rules in software defined networking (2015). https://doi.org/10.1109/CSCloud.2015.89

47.

Shin, S., et al.: Rosemary: A robust , secure , and high-performance network operating system categories and subject descriptors. In: Proceedings of 2014 ACM SIGSAC Conference on Computer and communications security - CCS 2014, pp. 78–89 (2014)

48.

Chandrasekaran, B., Tschaen, B., Benson, T.: Isolating and tolerating SDN application failures with LegoSDN, pp. 1–12 (2016). https://doi.org/10.1145/2890955.2890965

49.

Zanna, P., O’Neill, B., Radcliffe, P., Hosseini, S., Ul Hoque, M.S.: Adaptive threat management through the integration of IDS into software defined networks. 2014 International Conference on Network of the Future NOF 2014 – Working on Smart Cloud Networks Systems, SCNS 2014. (2014). https://doi.org/10.1109/NOF.2014.7119792

50.

Duan, Q., Al-Shaer, E., Jafarian, H.: Efficient random route mutation considering flow and network constraints. In: 2013 IEEE Communications and Network Security, CNS 2013, pp. 260–268 (2013). https://doi.org/10.1109/CNS.2013.6682715

51.

Jiang, F.: Combat-sniff: a comprehensive countermeasure to resist data plane eavesdropping in software-defined networks. Am. J. Netw. Commun. 5, 27 (2016). https://doi.org/10.11648/j.ajnc.20160502.13

Title: Security Issues and Challenges in SDN
Authors: Ali Haider Shamsan
Arman Rasool Faridi
Publisher: Springer Singapore
Book: Advances in Cyber Security
Print ISBN: 978-981-16-8058-8

Electronic ISBN: 978-981-16-8059-5

Copyright Year: 2021
DOI: https://doi.org/10.1007/978-981-16-8059-5_32

Springer Professional

Abstract

Please log in to get access to your license.

Dont have a licence yet? Then find out more about our products and how to get one now:

Springer Professional "Wirtschaft+Technik"

Springer Professional "Technik"

Springer Professional "Wirtschaft"