Abstract:Security of Supervisory Control and Data Acquisition (SCADA) network is essential for the Naval shipboard systems. Software-Defined Networking (SDN) is introduced in this paper towards security, which is configured with a controller or multiple controllers that are given total control over the network. This design makes it flexible to control the SDN framework. While the fact that these controllers are responsible for managing software-defined networks, it also makes the network vulnerable to the circumstance in which a controller is compromised. This necessitates a dynamic controller configuration that allows an SDN network to be able to defend itself against a threat that is attempting to or successful in compromising a controller. In order to accomplish this, the SDN network requires multiple controllers and the ability to detect and shift network control to another controller in case one becomes compromised. An SDN with a dynamic controller configuration is introduced in this paper to allow the network to remain resilient if an attacker is to compromise a controller and also if a controller were to fail. Dynamic SDN controller configuration is driven by the multi-controller configuration and methods for detecting and responding to attacks. Specifically, these methods are practical in the Mininet environment to ensure the security of Naval SCADA networks but are applicable to most SDN applications. Dynamic controller configuration adds an extra layer of network security to SDN and alleviates a controller from becoming a single point of failure.

SDN-RDCD: A Real-Time and Reliable Method for Detecting Compromised SDN Devices.

Intelligent DDoS Detection in Botnet Combined with Packet-Level Features under SDN

TPDD: A Two-Phase DDoS Detection System in Software-Defined Networking

Combination Attacks and Defenses on SDN Topology Discovery.

Detection and Defense Against Network Isolation Attacks in Software‐defined Networks

A Method of DDoS Attack Detection and Mitigation for the Comprehensive Coordinated Protection of SDN Controllers

REAL-GUARD

Detecting DDoS Attack on SDN Due to Vulnerabilities in OpenFlow

Detection and Mitigation of DoS Attacks in Software Defined Networks

An improved network security situation assessment approach in software defined networks

SDN-ESRC: A Secure and Resilient Control Plane for Software-Defined Networks

SDN-Defend: A Lightweight Online Attack Detection and Mitigation System for DDoS Attacks in SDN

Traffic-Based Malicious Switch Detection in Sdn

SecSDN-Cloud: Defeating Vulnerable Attacks Through Secure Software-Defined Networks

SDN Dynamic Controller Configuration to Mitigate Compromised Controllers

A Collaborative Intrusion Detection System Against DDoS for SDN.

DDoS Detection Using a Cloud-Edge Collaboration Method Based on Entropy-Measuring SOM and KD-Tree in SDN

A Novel Distributed Denial-of-Service Attack Detection Scheme for Software Defined Networking Environments.

An Efficient Scheme to Defend Data-to-Control-Plane Saturation Attacks in Software-Defined Networking

Survey of Attacks and Countermeasures for SDN

SD-Anti-DDoS: Fast and efficient DDoS defense in software-defined networks