Security Enhanced Framework for Network Access Control in Distributed Software-Defined Networks
Pushpita Chatterjee, Danda B. Rawat · 2024
Software-defined networking (SDN) has emerged as a transformative paradigm by redefining traditional network architectures through its dynamic and programmable nature. However, this evolution brings forth unprecedented security challenges, such as vulnerabilities in the control plane, unauthorized access, and dynamic data flow risks. This paper addresses these challenges by proposing a security framework for developing robust authentication, precise authorization, dynamic access control, and secure communication encryption. The proposed work initiates an in-depth exploration of state-of-the-art authentication methods tailored for SDN entities, which introduces multi-layered authentication that incorporates digital certificates, tokens, and biometrics. In addition, the paper discusses the implementation of role-based access control (RBAC) to precisely define and manage access permissions. The integration of RBAC and fine-grained access controls mitigates the risk of unauthorized operations. Furthermore, the paper introduces access control measures for dynamic data flow, including flow table security, network segmentation, and traffic filtering. The work investigates encryption protocols for secure communication to ensure the confidentiality and integrity of data in both southbound and northbound channels. By mitigating authentication vulnerabilities, refining access controls, and ensuring secure data flow, the proposed framework provides a robust defense mechanism. This minimizes the potential attack surface and contributes a secure foundation to the effective deployment and management of SDN architectures.