Security Enhancement through Flow-based Centralized control in SDN
Pradeep Kumar Sharma, Brijesh Kumar, S. S. Tyagi · 2023
Software Defined Networking is a new technology that redefines the architecture of computer networks and overcomes the several limitations of Traditional Networks by decoupling the control and data plane. SDN has drawn a lot of attention in recent years but still, there are many challenges regarding its security that’s why some researchers suggest a hybrid approach in their research work. For developing a secure SDN framework packet analysis and validation need to be done by the controller before routing packets to the data plane switches. As a result, efficiency of security solution depends on its overhead at the controller performance. In this paper, to address the security issues of SDN a proposed security architecture with two algorithms has been presented based on open-flow statistics. The proposed method has been compared with an existing periodic threat detection method and results show that CPU utilization of the proposed method is less than the existing method. For the implementation of security algorithms, a Ryu controller with mininet network emulator is utilized. The results of this work can be very helpful for researchers and network managers who want to implement SDN-based security in their networks.