Research Area:  Software Defined Networks

Abstract:

In order to build an efficient security architecture, previous studies have attempted to understand complex system architectures and message flows to detect various attack packets. However, the existing hardware-based single security architecture cannot efficiently handle a complex system structure. To solve this problem, we propose a software-defined networking (SDN) policy-based scheme for an efficient security architecture. The proposed scheme considers four policy functions: separating, chaining, merging, and reordering. If SDN network functions virtualization (NFV) system managers use these policy functions to deploy a security architecture, they only submit some of the requirement documents to the SDN policy-based architecture. After that, the entire security network can be easily built. This paper presents information about the design of a new policy functions model, and it discusses the performance of this model using theoretical analysis.

Keywords:  

Author(s) Name:  Woosik Lee and Namgi Kim

Publisher name:  MDPI

DOI:  10.3390/info8020065

Volume Information:  Volume 8, Issue 2

Paper Link:   https://www.mdpi.com/2078-2489/8/2/65