A Security Service on-demand Architecture in SDN

Network security management and information risk control bring challenges to the existing networks. Traditional network architectures are ill-suited to meet the requirements of today's Information and Communication Technology (ICT) service providers and end users. Software Defined Networking (SDN) and Network Functions Virtualization (NFV) are new technologies that can provide unlimited opportunities for next generation network. Both SDN and NFV technologies are not only transforming network infrastructure from complicate physical entities to virtual and programmable nodes, but also bringing significant changes to the development of ICT. SDN and NFV enable software-driven service chain named Service Function Chain (SFC), a technology controlling the traffic flow to the appropriate applications and delivering an abstract sequenced set of service functions according to the various service requirements. In conclusion, a novel architecture as a security service platform with on-demand virtual network functions is proposed. The solution offers a security service function chain that enables ICT service providers to provision a dynamic and flexible secure service on the SDN network. Advantages of the proposed architecture are on-demand, cost effective and flexibility.