SDN Security Review: Threat Taxonomy, Implications, and Open Challenges

Software-Defined networking (SDN) is a networking paradigm to enable dynamic, flexible, and programmatically efficient configuration of networks to revolutionize network control and management via separation of the control plane and data plane. The SDN technology has evolved in response to the demands from large data centers toward all types of networks, from IoT, enterprise, to ISP networks. On the one hand, SDN has provided solutions for high-demand resources, managing unpredictable data traffic patterns, and rapid network reconfiguration. It is further used to enhance network virtualization and security. On the other hand, SDN is still subject to many traditional network security threats. It also introduces new security vulnerabilities, primarily due to its logically centralized control plane infrastructure and functions. In this paper, we conduct a comprehensive survey on the core functionality of SDN from the perspective of secure communication infrastructure at different scales. A specific focus is put forward to address the challenges in securing SDN-based communications, with efforts taken up to address them. We further categorize the appropriate solutions for specific threats at each layer of SDN infrastructures. Lastly, security implications and future research trends are highlighted to provide insights for future research.

Automated summary

Software-Defined Networking (SDN) is a networking paradigm that enables dynamic and flexible configuration of networks by separating the control plane and data plane. SDN provides solutions for managing high-demand resources, unpredictable data traffic patterns, and network security. However, it also faces traditional security threats and introduces new vulnerabilities. This paper conducts a comprehensive survey on SDN's core functionality and proposes measures to address the challenges in securing SDN-based communications, along with categorizing threat solutions at different layers. Security implications and future research trends are highlighted.