Abstract:Software-defined networking (SDN) has significantly transformed the field of network management through the consolidation of control and provision of enhanced adaptability. However, this paradigm shift has concurrently presented novel security concerns. The preservation of service path integrity holds significant importance within SDN environments due to the potential for malevolent entities to exploit network flows, resulting in a range of security breaches. This research paper introduces a model called "EnsureS", which aims to enhance the security of SDN by proposing an efficient and secure service path validation approach. The proposed approach utilizes a Lightweight Service Path Validation using Batch Hashing and Tag Verification, focusing on improving service path validation's efficiency and security in SDN environments. The proposed EnsureS system utilizes two primary techniques in order to validate service pathways efficiently. Firstly, the method utilizes batch hashing in order to minimize computational overhead. The proposed EnsureS algorithm enhances performance by aggregating packets through batches rather than independently; the hashing process takes place on each one in the service pathway. Additionally, the implementation of tag verification enables network devices to efficiently verify the authenticity of packets by leveraging pre-established trust relationships. EnsureS provides a streamlined and effective approach for validating service paths in SDN environments by integrating these methodologies. In order to assess the efficacy of the Proposed EnsureS, a comprehensive series of investigations were conducted within a simulated SDN circumstance. The efficacy of Proposed EnsureS was then compared to that of established methods. The findings of our study indicate that the proposed EnsureS solution effectively minimizes computational overhead without compromising on the established security standards. The implementation successfully reduces the impact of different types of attacks, such as route alteration and packet spoofing, increasing SDN networks' general integrity.

Field-based Security Testing of SDN configuration Updates

Research on Security Threat Monitoring and Testing Framework in Software - Defined Network Based on Depth Learning

Guarding the Perimeter of Cloud-Based Enterprise Networks: an Intelligent SDN Firewall

Safe Reconfiguring Data Plane Via Supervision over Resource and Flow States

Consistent SDNs through Network State Fuzzing

Learning-Guided Fuzzing for Testing Stateful SDN Controllers

Learning Failure-Inducing Models for Testing Software-Defined Networks

Securing industrial communication with software-defined networking

Formal Modeling and Systematic Black-Box Testing of SDN Data Plane

Developing an SDN security model (EnsureS) based on lightweight service path validation with batch hashing and tag verification

New Continual Federated Learning System for Intrusion Detection in SDN‐Based Edge Computing

Network-Wide Forwarding Anomaly Detection and Localization in Software Defined Networks

Towards a Unified Cybersecurity Testing Lab for Satellite, Aerospace, Avionics, Maritime, Drone (SAAMD) technologies and communications

FSDM: Fast Recovery Saturation Attack Detection and Mitigation Framework in SDN

A Testbed for Intelligent Software Defined Security Framework

SPIDER: A Practical Fuzzing Framework to Uncover Stateful Performance Issues in SDN Controllers

FAS: Using FPGA to Accelerate and Secure SDN Software Switches

Security Policy Violations in SDN Data Plane

Intelligent SDN to enhance security in IoT networks

SDN Oriented Software-Defined Security Architecture

Ambusher: Exploring the Security of Distributed SDN Controllers Through Protocol State Fuzzing