Validating User Flows to Protect Software Defined Network Environments

Software Defined Network is a promising network paradigm which has led to several security threats in SDN applications that involve user flows, switches, and controllers in the network. Threats as spoofing, tampering, information disclosure, Denial of Service, flow table overloading, and so on have been addressed by many researchers. In this paper, we present novel SDN design to solve three security threats: flow table overloading is solved by constructing a star topology-based architecture, unsupervised hashing method mitigates link spoofing attack, and fuzzy classifier combined with L1-ELM running on a neural network for isolating anomaly packets from normal packets. For effective flow migration Discrete-Time Finite-State Markov Chain model is applied. Extensive simulations using OMNeT++ demonstrate the performance of our proposed approach, which is better at preserving holding time than are other state-of-the-art works from the literature.

Application-Aware Firewall Mechanism for Software Defined Networks

Applied Sciences, Free Full-Text

Apstra Intent-Based Networking

Cisco Software-Defined Access - Cisco Software-Defined Access

Application-Aware Firewall Mechanism for Software Defined Networks

Chapter 6: Maintaining a Secure Environment, Weaving a Secure Web

PDF) Validating User Flows to Protect Software Defined Network

Security & Privacy in Software Defined Networks, Issues

Flow-based intrusion detection on software-defined networks: a

Validating User Flows to Protect Software Defined Network Environments

Cisco Group-Based Policies for Zero-Trust Security White Paper - Cisco