VSA and SDS:Two Security Architectures in SDN
Qiu Xiao-fen · Journal of Chinese Computer Systems · 2013
Software Defined Networking is in its fast growth in the past two years. Its software programmable architecture and openness bring many of new security challenges,meanw hile,numerous innovative security protection mechanisms taking advantage of features of SDN are being researched and developed. This paper summarizes and analyzes the new threats and challenges of SDN and proposes tw o evolutionary security architectures to secure SDN netw orks- Virtualized Security Appliance( VSA) and Softw are Defined Security( SDS). The critical features,use cases,advantages and disadvantages are given respectively. The corresponding implementation of firew all in both VSA and SDS architecture is demonstrated. The experiment data show that the proposed security architectures are feasible in SDN-based data centers.