Title
Software-Defined Networking Security For Private Data Center Networks And Clouds: Vulnerabilities, Attacks, Countermeasures, And Solutions
Abstract
Software-defined networking (SDN) is an agile, modern networking approach that facilitates innovations in the networking paradigm. The abstracted and centralized network operating system facilitates the network management and reduces operational expenditure (OPEX). The open nature and simplicity of the data-forwarding plane dramatically reduces capital expenditure (CAPEX) by leveraging commodity servers and switches. SDN also lends itself very well to address major cloud computing issues and complement cloud services, especially in terms of network virtualization and networking as a service (NaaS). As a new technology, SDN does involve certain security challenges, which include distributed denial of service (DDoS) threats, build and run time injected malware, insider (tenant) attacks, and security holes resulting from controller misconfigurations. These are severe threats that can cripple an entire network. It is crucial to address the SDN vulnerabilities to ensure its successful deployment in private data center networks, on cloud platforms and beyond. Some security solutions leverage the built-in features of SDN, such as its controller software component, while other solutions provide external SDN applications running above the controller. This study reviews the security solutions for the vulnerabilities of state-of-the-art SDN controllers and the available countermeasures. Furthermore, an in-depth analysis of the SDN features that support security is presented, and some unresolved research issues on SDN controllers are identified.
Year
DOI
Venue
2021
10.1002/dac.4706
INTERNATIONAL JOURNAL OF COMMUNICATION SYSTEMS
Keywords
DocType
Volume
cloud, countermeasures, network as a service, security, software&#8208, defined networks, solutions, threats
Journal
34
Issue
ISSN
Citations 
4
1074-5351
0
PageRank 
References 
Authors
0.34
0
7