(A) framework for a security-enhanced SDN controller

Abstract

Software-Defined Networking(SDN) is a fascinating network paradigm in that it provides the network operator with lots of benefits such as a global network view, network programmability through the separation between the control logic and the data plane. While it provides means to improve a network security, it also has security issues that have a critical impact on SDN controllers. Because the previous studies just handle part of problems, they cannot assure the perfect security of the SDN controller. In this paper, we define what network asset should be protected. And then, we design and implement a controller generation framework, which provides a template to make the network operator easily develop their functions. Concerning what asset should be protected, we implement some security components and evaluate their functionality and performance overhead.