Security in Software-Defined Networking: Threats and Countermeasures

Shu, Z; Wan, J; Li, D; Lin, J; Vasilakos, AV; Imran, M

Security in Software-Defined Networking: Threats and Countermeasures

Shu, Z Wan, J Li, D Lin, J Vasilakos, AV Imran, M

Permalink

Publisher:: SPRINGER
Publication Type:: Journal Article
Citation:: Mobile Networks and Applications, 2016, 21, (5), pp. 764-776
Issue Date:: 2016-10-01

Closed Access

	Filename	Description	Size
	s11036-016-0676-x.pdf	Published version	775.27 kB	Adobe PDF	View/Open

Copyright Clearance Process

Recently Added
In Progress
Closed Access

This item is closed access and not available.

Full metadata record

Field	Value	Language
dc.contributor.author	Shu, Z
dc.contributor.author	Wan, J
dc.contributor.author	Li, D
dc.contributor.author	Lin, J
dc.contributor.author	Vasilakos, AV
dc.contributor.author	Imran, M
dc.date.accessioned	2022-08-12T04:29:55Z
dc.date.available	2022-08-12T04:29:55Z
dc.date.issued	2016-10-01
dc.identifier.citation	Mobile Networks and Applications, 2016, 21, (5), pp. 764-776
dc.identifier.issn	1383-469X
dc.identifier.issn	1572-8153
dc.identifier.uri	http://hdl.handle.net/10453/160017
dc.description.abstract	In recent years, Software-Defined Networking (SDN) has been a focus of research. As a promising network architecture, SDN will possibly replace traditional networking, as it brings promising opportunities for network management in terms of simplicity, programmability, and elasticity. While many efforts are currently being made to standardize this emerging paradigm, careful attention needs to be also paid to security at this early design stage. This paper focuses on the security aspects of SDN. We begin by discussing characteristics and standards of SDN. On the basis of these, we discuss the security features as a whole and then analyze the security threats and countermeasures in detail from three aspects, based on which part of the SDN paradigm they target, i.e., the data forwarding layer, the control layer and the application layer. Countermeasure techniques that could be used to prevent, mitigate, or recover from some of such attacks are also described, while the threats encountered when developing these defensive mechanisms are highlighted.
dc.language	English
dc.publisher	SPRINGER
dc.relation.ispartof	Mobile Networks and Applications
dc.relation.isbasedon	10.1007/s11036-016-0676-x
dc.rights	info:eu-repo/semantics/closedAccess
dc.subject	0805 Distributed Computing, 0999 Other Engineering
dc.subject.classification	Networking & Telecommunications
dc.title	Security in Software-Defined Networking: Threats and Countermeasures
dc.type	Journal Article
utslib.citation.volume	21
utslib.for	0805 Distributed Computing
utslib.for	0999 Other Engineering
pubs.organisational-group	/University of Technology Sydney
pubs.organisational-group	/University of Technology Sydney/Faculty of Engineering and Information Technology
pubs.organisational-group	/University of Technology Sydney/Faculty of Engineering and Information Technology/School of Electrical and Data Engineering
utslib.copyright.status	closed_access	*
dc.date.updated	2022-08-12T04:29:54Z
pubs.issue	5
pubs.publication-status	Published
pubs.volume	21
utslib.citation.issue	5

Abstract:

In recent years, Software-Defined Networking (SDN) has been a focus of research. As a promising network architecture, SDN will possibly replace traditional networking, as it brings promising opportunities for network management in terms of simplicity, programmability, and elasticity. While many efforts are currently being made to standardize this emerging paradigm, careful attention needs to be also paid to security at this early design stage. This paper focuses on the security aspects of SDN. We begin by discussing characteristics and standards of SDN. On the basis of these, we discuss the security features as a whole and then analyze the security threats and countermeasures in detail from three aspects, based on which part of the SDN paradigm they target, i.e., the data forwarding layer, the control layer and the application layer. Countermeasure techniques that could be used to prevent, mitigate, or recover from some of such attacks are also described, while the threats encountered when developing these defensive mechanisms are highlighted.

Please use this identifier to cite or link to this item:

http://hdl.handle.net/10453/160017