DoS Attack on SDN: a study on control plane strategies in-band and out-of-band
Rafael H. Neves, Anderson Silva, Vagner Gava, Marcelo Teixeira de Azevedo, Jonathan F. R. Sandoval, Fabio S. Oliveira, Adilson Eduardo Guelfi, Sérgio Takeo Kofuji · Research Square · 2022
Abstract A Software Defined Network (SDN) assumes a centralized control plane independent of the data planes of the network elements. This central-ization in itself represents a relevant aspect concerning SDN security, which, added to its operation of reactive nature, can represent an opportunity to carry out denial of service attacks. In turn, the SDN control plane can be implemented in two ways: (1) in-band and (2) out-of-band. An out-of-band control plane adopts a separate exclusive network for control communication, consequently increasing implementation costs. On the other hand, an in-band control plane has a lower implementation cost, but it demands sharing the physical medium between data communication and control communication. This work’s purpose is to study the impact of a denial of service attack directed at an SDN from the optic of implementing the control plane: (1) in-band and (2) out-of-band. Subsequently, the form of implementation 1 Springer Nature 2021 L A T E X template DoS Attack on SDN: a study on control plane strategies in-band and out-of-band of the SDN control plane is reviewed to determine if it influences the behavior of the network, given the scenarios established for this work.