Exploring Security Dynamics in SDN Controller Architectures: Threat Landscape and Implications

IEEE Access, 2024

Full text Open access: Gold Metadata (CSL-JSON)
DOI 10.1109/access.2024.3390968
Data confidence 85 high
How this score is calculated

It is built from checkable properties of the record itself: whether the article has a DOI, how many independent sources confirmed its data, whether the required fields are filled in, and how recent the latest confirmation is. Disagreement between sources and a missing identifier lower it. A value of 80 or above means the record was published without further checking; 60 to 79 means it is published at reduced confidence, with a manual check advisable. A record verified by an editor by hand is never pushed below 90 by a recalculation. This scores our data about the article, not the article itself.

Abstract

Software Defined Networking (SDN) has emerged as a new paradigm for managing heterogeneous networks ranging from enterprises to home network via decoupling the control plane from the data plane. In traditional networking landscape, these two planes are tightly bounded together inside a single appliance. The logically centralized and distributed control plane and programmability offers a great opportunity to improve network security, such as implementing new mechanisms to detect and mitigate various threats, and also enables security as a service in an SDN paradigm. Due to ever increasing and fast development of SDN, this paper provides an extensive survey on SDN controllers, SDN related security threats, and the solutions to mitigate the security threats. This study provides a comprehensive survey on 53 SDN controllers from different aspects including language, architecture, organization, open source, scalability, consistency, reliability, API used, library, and their description. We have also provided a detailed security analysis of SDN architecture with an extensive classification of security threats endangering its different architectural components, and the solutions to effectively mitigate them. This paper also identifies challenges and promising future direction on SDN deployment, standardization, implementation and security issues that should be addressed in this field.