Validating User Flows to Protect Software Defined Network Environments

Software Defined Network is a promising network paradigm which has led to several security threats in SDN applications that involve user flows, switches, and controllers in the network. Threats as spoofing, tampering, information disclosure, Denial of Service, flow table overloading, and so on have been addressed by many researchers. In this paper, we present novel SDN design to solve three security threats: flow table overloading is solved by constructing a star topology-based architecture, unsupervised hashing method mitigates link spoofing attack, and fuzzy classifier combined with L1-ELM running on a neural network for isolating anomaly packets from normal packets. For effective flow migration Discrete-Time Finite-State Markov Chain model is applied. Extensive simulations using OMNeT++ demonstrate the performance of our proposed approach, which is better at preserving holding time than are other state-of-the-art works from the literature.

What Is SASE? - Palo Alto Networks

7 Essentials Of Software-Defined Networking

Electronics, Free Full-Text

Innovax Technologies, LLC - Software Defined Perimeter (SDP) for

Security & Privacy in Software Defined Networks, Issues

What is RFI Remote File Inclusion Example & Mitigation Methods

Software supply chain threats Software supply chain security

Flow-based intrusion detection on software-defined networks: a

PDF) Enhancing Network Security through Software Defined