Abstract:As networks expand in size and complexity, they pose greater administrative and management challenges. Software Defined Networks (SDN) offer a promising approach to meeting some of these challenges. In this paper, we propose a policy driven security architecture for securing end to end services across multiple SDN domains. We develop a language based approach to design security policies that are relevant for securing SDN services and communications. We describe the policy language and its use in specifying security policies to control the flow of information in a multi-domain SDN. We demonstrate the specification of fine grained security policies based on a variety of attributes such as parameters associated with users and devices/switches, context information such as location and routing information, and services accessed in SDN as well as security attributes associated with the switches and Controllers in different domains. An important feature of our architecture is its ability to specify path and flow based security policies, which are significant for securing end to end services in SDNs. We describe the design and the implementation of our proposed policy based security architecture and demonstrate its use in scenarios involving both intra and inter-domain communications with multiple SDN Controllers. We analyse the performance characteristics of our architecture as well as discuss how our architecture is able to counteract various security attacks. The dynamic security policy based approach and the distribution of corresponding security capabilities intelligently as a service layer that enable flow based security enforcement and protection of multitude of network devices against attacks are important contributions of this paper.

A Testbed for Intelligent Software Defined Security Framework

Research on Security Threat Monitoring and Testing Framework in Software - Defined Network Based on Depth Learning

Guarding the Perimeter of Cloud-Based Enterprise Networks: an Intelligent SDN Firewall

Demo: the Design and Implementation of Intelligent Software Defined Security Framework

An Intelligent Honeynet Architecture Based on Software Defined Security.

Intrinsic Security: A Robust Framework for Cloud-Native Network Slicing via a Proactive Defense Paradigm

Evolving Defense Mechanism for Future Network Security

Intrinsic Security and Self-Adaptive Cooperative Protection Enabling Cloud Native Network Slicing

Asidps: Auto-Scaling Intrusion Detection And Prevention System For Cloud

SDN Oriented Software-Defined Security Architecture

A Machine Learning Based Intrusion Detection System for Software Defined 5 G Network

Machine Learning-Based IDS for Software-Defined 5G Network

Securing Edge Networks with Securebox

A Security Framework to Protect Edge Supported Software Defined Internet of Things Infrastructure.

Security Evaluation in Software-Defined Networks

Software Defined Systems

A Software-Defined Architecture for Integrating Heterogeneous Space and Ground Networks

A Policy based Security Architecture for Software Defined Networks

IS2N: Intent-Driven Security Software-Defined Network with Blockchain

Design and analysis of a robust security layer for software defined network framework

An intelligent zero trust secure framework for software defined networking