A survey on OpenFlow-based Software Defined Networks: Security challenges and countermeasures

被引:113
|
作者
Li, Wenjuan [1 ]
Meng, Weizhi [1 ,2 ]
Kwok, Lam For [1 ]
机构
[1] City Univ Hong Kong, Dept Comp Sci, Hong Kong, Hong Kong, Peoples R China
[2] Inst Infocomm Res, Infocomm Secur Dept, Singapore, Singapore
关键词
Software-Defined Networking; OpenFlow; Control and data planes; Security challenges and countermeasures; Review and survey;
D O I
10.1016/j.jnca.2016.04.011
中图分类号
TP3 [计算技术、计算机技术];
学科分类号
0812 ;
摘要
Software-Defined Networking (SDN) has been proposed as an emerging network architecture, which consists of decoupling the control planes and data planes of a network. Due to its openness and standardization, SDN enables researchers to design and implement new innovative network functions and protocols in a much easier and flexible way. In particular, OpenFlow is currently the most deployed SDN concept, which provides communication between the controller and the switches. However, the dynamism of programmable networks also brings potential new security challenges relating to various attacks such as scanning, spoofing attacks, denial-of-service (DoS) attacks and so on. In this survey, we aim to give particular attention to OpenFlow-based SDN and present an up-to-date view to existing security challenges and countermeasures in the literature. This effort attempts to simulate more research attention to these issues in future OpenFlow and& SDN development. (C) 2016 Elsevier Ltd. All rights reserved.
引用
收藏
页码:126 / 139
页数:14
相关论文
共 50 条
  • [41] Experimental demonstration of time-aware software defined networking for OpenFlow-based intra-datacenter optical interconnection networks
    Yang, Hui
    Zhang, Jie
    Zhao, Yongli
    Ji, Yuefeng
    Han, Jianrui
    Lin, Yi
    Qiu, Shaofeng
    Lee, Young
    [J]. OPTICAL FIBER TECHNOLOGY, 2014, 20 (03) : 169 - 176
  • [42] NOC based Banyan OpenFlow Switch for Software Defined Networks
    Ozcevik, Yusuf
    Erel, Muge
    Canberk, Berk
    [J]. 2015 23RD SIGNAL PROCESSING AND COMMUNICATIONS APPLICATIONS CONFERENCE (SIU), 2015, : 1433 - 1436
  • [43] Software Defined Wireless Sensor Networks Security Challenges
    Kgogo, Tebogo
    Isong, Bassey
    Abu-Mahfouz, Adnan M.
    [J]. 2017 IEEE AFRICON, 2017, : 1508 - 1513
  • [44] A Novel OpenFlow-Based DDoS Flooding Attack Detection and Response Mechanism in Software-Defined Networking
    Wang, Rui
    Zhang, Zhiyong
    Ju, Lei
    Jia, Zhiping
    [J]. INTERNATIONAL JOURNAL OF INFORMATION SECURITY AND PRIVACY, 2015, 9 (03) : 21 - 40
  • [45] Reducing energy consumption in wired OpenFlow-based networks
    Bista, Bhed Bahadur
    Fukushi, Arata
    Takata, Toyoo
    Rawat, Danda B.
    [J]. International Journal of Control and Automation, 2014, 7 (06): : 401 - 412
  • [46] OpenFlow-based Mechanisms for QoS in LTE Backhaul Networks
    Chaves, Luciano Jerez
    Garcia, Islene Calciolari
    Mauro Madeira, Edmundo Roberto
    [J]. 2016 IEEE SYMPOSIUM ON COMPUTERS AND COMMUNICATION (ISCC), 2016, : 1233 - 1238
  • [47] Implications and Detection of DoS Attacks in OpenFlow-based Networks
    Hommes, Stefan
    State, Radu
    Engel, Thomas
    [J]. 2014 IEEE GLOBAL COMMUNICATIONS CONFERENCE (GLOBECOM 2014), 2014, : 537 - 543
  • [48] Generalizing virtual network topologies in OpenFlow-based networks
    Salvadori, Elio
    Corin, Roberto Doriguzzi
    Broglio, Attilio
    Gerola, Matteo
    [J]. 2011 IEEE GLOBAL TELECOMMUNICATIONS CONFERENCE (GLOBECOM 2011), 2011,
  • [49] Enabling Software-Defined Optical Networks Based on OpenFlow Extension
    Chen, Mingming
    Shou, Guochu
    Hu, Yihong
    Guo, Zhigang
    Zhang, Guoying
    Ding, Hui
    [J]. 2015 OPTO-ELECTRONICS AND COMMUNICATIONS CONFERENCE (OECC), 2015,
  • [50] SDM2Cast An OpenFlow-Based, Software-Defined Scalable Multimedia Multicast Streaming Framework
    Yang, Jian
    Yang, Enzhong
    Ran, Yongyi
    Chen, Shuangwu
    [J]. IEEE INTERNET COMPUTING, 2015, 19 (04) : 36 - 44