Abstract:Software‐defined networking (SDN) is an agile, modern networking approach that facilitates innovations in the networking paradigm. The abstracted and centralized network operating system facilitates the network management and reduces operational expenditure (OPEX). The open nature and simplicity of the data‐forwarding plane dramatically reduces capital expenditure (CAPEX) by leveraging commodity servers and switches. SDN also lends itself very well to address major cloud computing issues and complement cloud services, especially in terms of network virtualization and networking as a service (NaaS). As a new technology, SDN does involve certain security challenges, which include distributed denial of service (DDoS) threats, build and run time injected malware, insider (tenant) attacks, and security holes resulting from controller misconfigurations. These are severe threats that can cripple an entire network. It is crucial to address the SDN vulnerabilities to ensure its successful deployment in private data center networks, on cloud platforms and beyond. Some security solutions leverage the built‐in features of SDN, such as its controller software component, while other solutions provide external SDN applications running above the controller. This study reviews the security solutions for the vulnerabilities of state‐of‐the‐art SDN controllers and the available countermeasures. Furthermore, an in‐depth analysis of the SDN features that support security is presented, and some unresolved research issues on SDN controllers are identified.

SDSEP: A Network Security Education Platform Based on Software-Defined Networking Technology

Research on Security Threat Monitoring and Testing Framework in Software - Defined Network Based on Depth Learning

Evolving Defense Mechanism for Future Network Security

Proactive Security Defense of Dynamic Network

Modeling for Endogenous Secure Domain Name System Based on Software Defined Networks

Security Evaluation in Software-Defined Networks

Securesdp: a novel software-defined perimeter implementation for enhanced network security and scalability

Demo: the Design and Implementation of Intelligent Software Defined Security Framework

Research on Software-Defined Network and the Security Defense Technology

NetSecu: A Collaborative Network Security Platform for In-network Security

Design of a Parallel and Distributed Network Security Simulation Platform

DESIGN AND DEVELOPMENT OF SECURE AND SUSTAINABLE SOFTWARE DEFINED NETWORKS

SDN Oriented Software-Defined Security Architecture

Construction of Network Security enforcement Virtual Simulation Experiment and Teaching Platform

The Practice of Remote Education on Information Security

SDN-Empowered Reliable and Dynamic Scheduling Scheme for Security Resources.

Dynamic Construction Scheme for Virtualization Security Service in Software-Defined Networks

On the Education of Networked Systems

A Testbed for Intelligent Software Defined Security Framework

Enhancing security in SDN: Systematizing attacks and defenses from a penetration perspective

Software‐defined networking security for private data center networks and clouds: Vulnerabilities, attacks, countermeasures, and solutions