Security Threat Analysis of SDN Switch Flow Table
Ying Qian, Prabir Bhattacharya, Wanqing You, Kai Guo Qian · 2018
Software-defined networks (SDN) proposed a new conception of network architecture, which facilitates the innovation of network rapidly. The main components are OpenFlow-capable switches and controller, with those components, control plane is decoupled from data plane and network administrators have programmable central control of network traffic via a controller. Although this new concept of networks infrastructure leads to the progress in networking, it encounters security challenges existing in traditional network and it also introduces new security issues specific to SDN. This paper explores major possible security threats and attacks in SDN switch and proposes new approach to dynamically detect and monitor malicious behaviors on flow message passing and defend such attacks to militate the security threats to switch flow table the channel between switch and controller.