Abstract:Software-defined networking (SDN) has significantly transformed the field of network management through the consolidation of control and provision of enhanced adaptability. However, this paradigm shift has concurrently presented novel security concerns. The preservation of service path integrity holds significant importance within SDN environments due to the potential for malevolent entities to exploit network flows, resulting in a range of security breaches. This research paper introduces a model called "EnsureS", which aims to enhance the security of SDN by proposing an efficient and secure service path validation approach. The proposed approach utilizes a Lightweight Service Path Validation using Batch Hashing and Tag Verification, focusing on improving service path validation's efficiency and security in SDN environments. The proposed EnsureS system utilizes two primary techniques in order to validate service pathways efficiently. Firstly, the method utilizes batch hashing in order to minimize computational overhead. The proposed EnsureS algorithm enhances performance by aggregating packets through batches rather than independently; the hashing process takes place on each one in the service pathway. Additionally, the implementation of tag verification enables network devices to efficiently verify the authenticity of packets by leveraging pre-established trust relationships. EnsureS provides a streamlined and effective approach for validating service paths in SDN environments by integrating these methodologies. In order to assess the efficacy of the Proposed EnsureS, a comprehensive series of investigations were conducted within a simulated SDN circumstance. The efficacy of Proposed EnsureS was then compared to that of established methods. The findings of our study indicate that the proposed EnsureS solution effectively minimizes computational overhead without compromising on the established security standards. The implementation successfully reduces the impact of different types of attacks, such as route alteration and packet spoofing, increasing SDN networks' general integrity.

Securesdp: a novel software-defined perimeter implementation for enhanced network security and scalability

Evolving Defense Mechanism for Future Network Security

Guarding the Perimeter of Cloud-Based Enterprise Networks: an Intelligent SDN Firewall

SDN Oriented Software-Defined Security Architecture

Building a Highly Available and Intrusion Tolerant Database Security and Protection System (DSPS)

SD-Access: Practical Experiences in Designing and Deploying Software Defined Enterprise Networks

A Policy based Security Architecture for Software Defined Networks

Security Evaluation in Software-Defined Networks

Design and analysis of a robust security layer for software defined network framework

Demo: the Design and Implementation of Intelligent Software Defined Security Framework

Developing an SDN security model (EnsureS) based on lightweight service path validation with batch hashing and tag verification

Methods and Techniques for Dynamic Deployability of Software-Defined Security Services

Enhancing security in SDN: Systematizing attacks and defenses from a penetration perspective

A New Approach for Delivering Customized Security Everywhere: Security Service Chain

Programmable System Security in a Software Defined World–Research Challenges and Opportunities

Software‐defined networking security for private data center networks and clouds: Vulnerabilities, attacks, countermeasures, and solutions

Five-Layers SDP-Based Hierarchical Security Paradigm for Multi-access Edge Computing

An adaptive multistage intrusion detection and prevention system in software defined networking environment

DESIGN AND DEVELOPMENT OF SECURE AND SUSTAINABLE SOFTWARE DEFINED NETWORKS

A Comprehensive Survey of Distributed Denial of Service Detection and Mitigation Technologies in Software-Defined Network

Securing Software-Defined Networks Through Adaptive Moving Target Defense Capabilities