An analytical review of security issues in centralized and distributed SDN environments
Tinku Adhikari, Ajoy Kumar Khan, Malay Kule · Information Security Journal A Global Perspective · 2025
Software Defined Networking (SDN) has altered network architectures drastically over the past decade by dividing the control and data planes, enabling centralized control through SDN controllers like OpenFlow. This paradigm shift has introduced significant advancements in network management and security, leveraging technologies such as FlowVisor and Open vSwitch. Despite these innovations, SDN introduces new security challenges in both centralized and distributed architectures. This paper systematically surveys attacks and defenses across both centralized and distributed SDN architectures as well as in recent SDN deployments. We categorize SDN controller platforms based on physical and logical classifications, analyzing their strengths, weaknesses, and implications for distributed control. Key security challenges are examined, essential for safeguarding communications between control and data planes. Our review underscores the need for enhanced security measures in SDN controllers and infrastructure layers. While existing research has proposed defenses against SDN vulnerabilities, there remains a critical gap in comprehensive security standards and practices. As SDN continues to evolve, particularly with advancements like programmable data planes (e.g. P4), future research must prioritize addressing security issues at every layer of the architecture. By synthesizing current knowledge and identifying emerging threats, this paper provides a foundation for advancing SDN security research and guiding future developments in secure network management paradigms.