The application of Software Defined Networking on securing computer networks: A survey
The application of Software Defined Networking on securing computer networks: A survey
复制标题
DOI：
10.1016/j.jnca.2019.01.019
复制
发表时间：
2019-04
期刊：
影响因子：
--
通讯作者：
Rishikesh Sahay;W. Meng;C. Jensen
中科院分区：
文献类型：
--
作者：
Rishikesh Sahay;W. Meng;C. Jensen
软件定义网络（SDN）已经成为一种新的网络范例，用于通过软件启用控制来管理从企业到家庭网络的不同类型的网络。逻辑上集中的控制平面和可编程性为提高网络安全性提供了很好的机会，例如实施新的机制来检测和缓解各种威胁，以及在SDN控制器上部署安全即服务。随着SDN技术的不断发展，本文对SDN技术在增强计算机网络安全方面的应用进行了广泛的研究。特别是，我们调查了最近的研究，重点是将SDN应用于网络安全，包括攻击检测和缓解，流量监控和工程，配置和策略管理，服务链和中间盒部署，以及智能电网安全。我们进一步确定了SDN安全性，兼容性和可扩展性问题的一些挑战和有前途的未来方向，应该在这个领域得到解决。
Software Defined Networking (SDN) has emerged as a new networking paradigm for managing different kinds of networks ranging from enterprise to home network through software enabled control. The logically centralized control plane and programmability offers a great opportunity to improve network security, like implementing new mechanisms to detect and mitigate various threats, as well as enables deploying security as a service on the SDN controller. Due to the increasing and fast development of SDN, this paper provides an extensive survey on the application of SDN on enhancing the security of computer networks. In particular, we survey recent research studies that focus on applying SDN for network security including attack detection and mitigation, traffic monitoring and engineering, configuration and policy management, service chaining, and middlebox deployment, in addition to smart grid security. We further identify some challenges and promising future directions on SDN security, compatibility and scalability issues that should be addressed in this field.