A Security Controller-based Software Defined Security Architecture

Software Defined Security (SDS), which provides a flexible and centralized security solution, attracts many researchers to study the details of this conception. In this paper, a security controller-based SDS (SC-SDS) architecture is presented, in which a modularized security controller is placed in the control plane and interacts with other components through APIs. The security controller completes the control function for security services together with the SDN controller. It ensures loose coupling between the security controller and other components of the architecture, which is convenient for the later migration and expansion. With the powerful control capability of the SC-SDS architecture, the orchestration of the security services can be realized, thus various independent security services are orderly combined to improve the efficiency of the security protection. We provide an orchestration scenario to demonstrate the orchestration capability of the proposed SC-SDS architecture.