scholarly journals Securing the Software Defined Network Control Layer

Author(s):  
Phillip Porras ◽  
Steven Cheung ◽  
Martin Fong ◽  
Keith Skinner ◽  
Vinod Yegneswaran
2006 ◽  
Vol 48 (5) ◽  
Author(s):  
Andreas Schieder ◽  
Markus Kampmann ◽  
Frank Hartung ◽  
Marc Vorwerk ◽  
René Rembarz

This paper presents the vision of Ambient Networking, which is proposed to constitute the control layer of future B3G networks. The main characteristics of the Ambient Network Control Space are introduced and the Ambient Network Media Delivery function is explained in more detail to provide an example for a typical control space component. The description of a Media Delivery prototype complements this article.


2014 ◽  
Vol 971-973 ◽  
pp. 1735-1738 ◽  
Author(s):  
Peng Wu ◽  
Gang Zhang ◽  
Jun Min Wu ◽  
Chuan Liu ◽  
Hui Huang ◽  
...  

Software defined network (SDN) is a new architecture of network. The design concept of SDN is the separation of network control plane and forwarding plane and the realization of programmable control. Standford University put forward the concept of openflow in 2007, it provides standard interfaces and separates the data forwarding and routing control function of the traditional network communication equipment by the flow control method. The article makes a deep research on SDN from the aspects of technical connotation, equipment model and etc. It also makes a research on the actual demand and the existing problems of electric power data communication network of which the application of SDN in electric power data communication network is discussed.


In traditional network the coupling of data plane and control plane makes the data forwarding, processing and managing of the network hard and complex. Here each switch takes its own decision, makes the network logically decentralized. To overcome the limitations in traditional network the Engineers developed a new model network known as Software Defined Network (SDN). This network the control plane is decoupled from the data plane making it less complex. It moreover has a logically centralized approach unlike the existing network. This separation enables the network control to be directly programmable and the architecture to be abstracted for applications and network services. SDN platform provides advantages like programmability, task virtualization and easy management of the network. However, it faces new challenges towards scalability and performances. It is a must to understand and analyze the performances of SDN for implementation and deployment in live network environments. SDN working with POX is studied. This paper analyses the working of POX controller and evaluates the performance metrics of POX controller for SDN environment. The emulation is done using the Emulation software


Repositor ◽  
2020 ◽  
Vol 2 (7) ◽  
pp. 915
Author(s):  
Muhammad Misbahul Azis ◽  
Yufiz Azhar ◽  
Syaifuddin Syaifuddin

AbstrakAbstrak - Kebutuhan pada jaringan mengutamakan performa untuk mendukung sebuah efisiensi jaringan merupakan hal penting untuk saat ini. Penentuan konfigurasi yang semakin banyak dan kompleks serta kontrol jaringan yang semakin rumit, membuat jaringan semakin tidak fleksibel dan susah untuk diterapkan pada sebuah topologi jaringan yang besar. Software Defined Network (SDN) muncul dengan mekanisme yang dapat menyelesaikan masalah tersebut. Pada dasarnya konsep dari Software Defined Network (SDN) adalah memisahkan kontroller dan data/forwarding plane, sehingga mampu untuk me-menejemen jaringan yang begitu banyak dalam sebuah kontroller. Namun pada kontroller belum memiliki keamanan yang cukup untuk melindungi dari serangan jaringan seperti DDoS, SYN Flooding Attack sehingga kontroller akan menjadi target dari attacker. Sehingga penelitian ini mengusulkan penambahan aplikasi machine learning pada kontroller untuk menangani serangan seperti DDoS dan SYN Flooding Attack. Dalam penelitian ini kontroller yang digunakan adalah ryu controller yang menggunakan bahasa pemrograman python. Dalam penelitian ini menggunakan topologi linear pada mininet dan membuat paket dalam format .pcap untuk pengujian serangan yang dilakukan. Sehingga dapat mengetahui rata-rata jumlah paket yang masuk dan keluar dan keberhasilan dalam melakukan mitigasi terhadap paket yang dianggap DDoS.Abstract The need for the network to prioritize performance to support a network efficiency is important for now. Determination of configurations that are more and more complex and increasingly complicated network control, makes the network more inflexible and difficult to apply to a large network topology. Software Defined Network (SDN) appears with a mechanism that can solve the problem. Basically the concept of Software Defined Network (SDN) is to separate the controller and the data / forwarding plane, so that it is able to manage so many networks in a controller. But the controller does not have enough security to protect against network attacks such as DDoS, SYN Flooding Attack so the controller will be the target of the attacker. So this study proposes adding machine learning applications to controllers to handle attacks such as DDoS and SYN Flooding Attack. In this study the controller used is the Ryu controller that uses the Python programming language. In this study using a linear topology on Mininet and create a package in. Pcap format for testing attacks carried out. So as to know the average number of incoming and outgoing packages and success in mitigating packages that are considered DDoS.


2021 ◽  
Author(s):  
Lucas Nóvoa ◽  
Virgínia Tavares ◽  
Cleverson Nahum ◽  
Silvia Lins ◽  
Aldebaro Klautau

With the advent of 5G, more stringent application requirements were imposed to the cellular networks. The adoption of Software Defined Network (SDN) technology in the transport network enables more dynamic network control, suitable for several real-time operations and use cases present in 5G deployments. Implementing testbed for various transport network scenarios is not trivial due to the high costs involved, especially with respect to hardware in more complex network topologies. This work provides a low-cost alternative that facilitates complex transport network topologies implementation in real testbeds. It adopts Mininet software for transport network emulation and implements a middleware that facilitates the control of flows and routes as well as the automatic recognition of any topology. In networking research domain, the implemented middleware contributes to the simplification of switches management in software defined networks scenarios.


Sign in / Sign up

Export Citation Format

Share Document