Research Area: Software Defined Networks
Software-Defined Networking (SDN) has been a hot topic for future network development, which implements the different layers of control plane and data plane respectively. Despite providing high openness and programmability, the "three-layer two-interface" architecture of SDN changes the traditional network and increases the network attack nodes, which results in new security issues. In this paper, we firstly introduced the background, architecture and working process of SDN. Secondly, we summarized and analyzed the typical security issues from north to south: application layer, northbound interface, control layer, southbound interface and data layer. Another contribution is to review and analyze the existing solutions and latest research progress of each layer, mainly including: authorized authentication module, application isolation, DoS/DDoS defense, multi-controller deployment and flow rule consistency detection. Finally, a conclusion about the future works of SDN security and an idealized global security architecture is proposed.
Keywords:
software-defined networking
network security
global security
security threat
Author(s) Name: Yifan Liu; Bo Zhao; Pengyuan Zhao; Peiru Fan; Hui Liu
Journal name: China Communications
Conferrence name:
Publisher name: IEEE
DOI: 10.23919/JCC.2019.07.002
Volume Information: Volume: 16, Issue: 7, July 2019, Page(s): 13 - 31
