A Framework for Security Services Based on Software-Defined Networking
Jaehoon Jeong, Jihyeok Seo, Geumhwan Cho, Hyoungshick Kim, Jungsoo Park · 2015
This paper proposes a framework for security services using Software-Defined Networking (SDN) and specifies requirements for such a framework. It describes two representative security services, such as (i) centralized firewall system and (ii) centralized DDoS-attack mitigation system. For each service, this paper discusses the limitations of legacy systems and presents a possible SDN-based system to protect network resources by controlling suspicious and dangerous network traffic that can be regarded as security attacks.