Security in SDN networks and their applications
Telematic engineering student. Technological faculty. Francisco Jose de Caldas Distrital University. Bogotá Colombia.
email: retapierot@correo.udistrital.edu.co
Telematic engineering student. Technological faculty. Francisco Jose de Caldas Distrital University. Bogotá Colombia.
email: edgonzalezc@correo.udistrital.edu.co
Professor. Technological faculty. Francisco Jose de Caldas Distrital University. Bogotá Colombia.
email: nnovoat@udistrital.edu.co
Introduction: The review article is the product of the research on Security in SDN networks and their applications, developed at the District University in 2020, presenting the latest advances, that have been made in security.
Problem: The security weaknesses that SDN networks have had, due to being a new architecture. This has not allowed traditional networks to be replaced.
Objective: To carry out a review of the state of the art of SDN networks, focusing research on the security of the control layer and its advances.
Methodology: The descriptive method is implemented, consulting databases such as Scopus, IEEE and ScienceDirect, using the following search criteria: SDN networks, security in SDN networks, applications with SDN networks and OpenFlow protocol. It is shown as a research sample: the Asian, European and American continents with years of research from 2014 to 2020.
Results: Great advances have been made in terms of security for SDN networks, which allows us to see an early solution to the weaknesses that it currently faces.
Conclusion: SDN networks will solve all the challenges they face and will be consolidated as a solid and reliable architecture.
Originality: an important focus is taken on the security of SDN networks and the great development that has occurred in this regard is evident.
Limitations: SDN networks are a new architecture, so their development has been very little and advances in security have been significantly affected.
P. Shome, M. Yan, S. M. Najafabad, N. Mastronarde and A. Sprintson, "CrossFlow: A cross-layer architecture for SDR using SDN principles," 2015 IEEE Conference on Network Function Virtualization and Software Defined Network (NFV-SDN), San Francisco, CA, 2015, pp. 37-39, doi: 10.1109/NFV-SDN.2015.7387403.
M. Aslan and A. Matrawy, "On the Impact of Network State Collection on the Performance of SDN Applications," in IEEE Communications Letters, vol. 20, no. 1, pp. 5-8, Jan. 2016, doi: 10.1109/LCOMM.2015.2496955.
T. Nadeau and K. Gray, An Auhoritative Review of Network Programmability Technologies. California: O’Reilly, 2013.
D. Maldonado, “Diseño e implementación de una aplicación bajo una Arquitectura SDN”, Tesis de maestría, Pontificia Universidad Javeriana, Bogotá, 2014.
D. F. Garzón Triana, C. E. Montenegro Marín, y P. A. Gaona García, “Lenguaje de dominio específico para configuración de dispositivos de redes”, ing. Solidar, vol. 12, n.º 20, pp. 83-94, oct. 2016.
F. Meneses, D. Corujo, A. Neto and R. L. Aguiar, "SDN-based End-to-End Flow Control in Mobile Slice Environments," 2018 IEEE Conference on Network Function Virtualization and Software Defined Networks (NFV-SDN), Verona, Italy, 2018, pp. 1-5, doi: 10.1109/NFV-SDN.2018.8725764.
Blenk, A. Basta, J. Zerwas and W. Kellerer, "Pairing SDN with network virtualization: The network hypervisor placement problem," 2015 IEEE Conference on Network Function Virtualization and Software Defined Network (NFV-SDN), San Francisco, CA, 2015, pp. 198-204, doi: 10.1109/NFV-SDN.2015.7387427.
R. Hernández Sampieri, C. Fernández Collado, and M. D. P. Baptista Lucio, Metodología de la investigación. 5nd. Ed. Bogotá: MC GRAW HILL. 2014. pp. 92-100.
H. Rivera Linares, F. Silva Cubillos, J. Hernández Gutierrez, y D. Mosquera Palacios, “Gestión gráfica de dispositivos activos de red multivendedor”, ing. Solidar, vol. 14, n.º 24, pp. 1-11, Jan. 2018.
B. Valencia Suárez, S. Santacruz Pareja, L. Becerra Sánchez, y J. Padilla Aguilar, “Mininet: una herramienta versátil para emulación y prototipado de Redes Definidas por Software”, eci, vol. 9, n.º 17, pp. 62 - 70, Jul. 2019.
M. I. Hamed, B. M. ElHalawany, M. M. Fouda and A. S. T. Eldien, "A novel approach for resource utilization and management in SDN," 2017 13th International Computer Engineering Conference (ICENCO), Cairo, 2017, pp. 337-342, doi: 10.1109/ICENCO.2017.8289810.
B. Pandya, S. Parmar, Z. Saquib and A. Saxena, "Framework for securing SDN southbound communication," 2017 International Conference on Innovations in Information, Embedded and Communication Systems (ICIIECS), Coimbatore, 2017, pp. 1-5, doi: 10.1109/ICIIECS.2017.8275912.
Jalili, H. Nazari, S. Namvarasl and M. Keshtgari, "A comprehensive analysis on control plane deployment in SDN: In-band versus out-of-band solutions," 2017 IEEE 4th International Conference on Knowledge-Based Engineering and Innovation (KBEI), Tehran, 2017, pp. 1025-1031, doi: 10.1109/KBEI.2017.8324949.
Harikrishna, P., Amuthan, A. SDN-based DDoS Attack Mitigation Scheme using Convolution Recursively Enhanced Self Organizing Maps. Sādhanā 45, 104 (2020). https://doi-org.bdigital.udistrital.edu.co/10.1007/s12046-020-01353-x.
Ihsan H Abdulqadder, Shijie Zhou, Deqing Zou, Israa T. Aziz, Syed Muhammad Abrar Akber, Multi-layered intrusion detection and prevention in the SDN/NFV enabled cloud of 5G networks using AI-based defense mechanisms, Computer Networks, Volume 179, 2020, 107364, ISSN 1389-1286, https://doi.org/10.1016/j.comnet.2020.107364.
Marcos V.O. de Assis, Luiz F. Carvalho, Joel J.P.C. Rodrigues, Jaime Lloret, Mario L. Proença Jr, Near real-time security system applied to SDN environments in IoT networks using convolutional neural network, Computers & Electrical Engineering, Volume 86, 2020, 106738, ISSN 0045-7906, https://doi.org/10.1016/j.compeleceng.2020.106738.
Molina Zarca, A.; Bagaa, M.; Bernal Bernabe, J.; Taleb, T.; Skarmeta, A.F. Semantic-Aware Security Orchestration in SDN/NFV-Enabled IoT Systems. Sensors 2020, 20, 3622.
Nife, F.N., Kotulski, Z. Application-Aware Firewall Mechanism for Software Defined Networks. J Netw Syst Manage 28, 605–626 (2020). https://doi-org.bdigital.udistrital.edu.co/10.1007/s10922-020-09518-z.
A. Singh, S. Batra, G. S. Aujla, N. Kumar and L. T. Yang, "BloomStore: Dynamic Bloom-Filter-based Secure Rule-Space Management Scheme in SDN," in IEEE Transactions on Industrial Informatics, vol. 16, no. 10, pp. 6252-6262, Oct. 2020, doi: 10.1109/TII.2020.2966708.
N. Ravi and S. M. Shalinie, "Learning-Driven Detection and Mitigation of DDoS Attack in IoT via SDN-Cloud Architecture," in IEEE Internet of Things Journal, vol. 7, no. 4, pp. 3559-3570, April 2020, doi: 10.1109/JIOT.2020.2973176.
P. Shrivastava, M. S. Jamal and K. Kataoka, "EvilScout: Detection and Mitigation of Evil Twin Attack in SDN Enabled WiFi," in IEEE Transactions on Network and Service Management, vol. 17, no. 1, pp. 89-102, March 2020, doi: 10.1109/TNSM.2020.2972774.
Z. Li, W. Xing, S. Khamaiseh and D. Xu, "Detecting Saturation Attacks Based on Self-Similarity of OpenFlow Traffic," in IEEE Transactions on Network and Service Management, vol. 17, no. 1, pp. 607-621, March 2020, doi: 10.1109/TNSM.2019.2959268.
L. Richarson and S. Ruby, RESTful Web Services. California: O’Reilly, 2008, pp. 94-102.
K. Pentikousis, Y. Wang and W. Hu, "Mobileflow: Toward software-defined mobile networks," in IEEE Communications Magazine, vol. 51, no. 7, pp. 44-53, Jul 2013, doi: 10.1109/MCOM.2013.6553677.
J. Tourrilhes, P. Sharma, S. Banerjee and J. Pettit, "SDN and OpenFlow Evolution: A Standards Perspective," in Computer, vol. 47, no. 11, pp. 22-29, Nov. 2014, doi: 10.1109/MC.2014.326.
W. Zhou, L. Li and W. Chou, "SDN Northbound REST API with Efficient Caches," 2014 IEEE International Conference on Web Services, Anchorage, AK, 2014, pp. 257-264, doi: 10.1109/ICWS.2014.46.
W. Zhou, L. Li, M. Luo and W. Chou, "REST API Design Patterns for SDN Northbound API," 2014 28th International Conference on Advanced Information Networking and Applications Workshops, Victoria, BC, 2014, pp. 358-365, doi: 10.1109/WAINA.2014.153.
Z. Yang and K. L. Yeung, "SDN Candidate Selection in Hybrid IP/SDN Networks for Single Link Failure Protection," in IEEE/ACM Transactions on Networking, vol. 28, no. 1, pp. 312-321, Feb. 2020, doi: 10.1109/TNET.2019.2959588.
P. Morreale and J. Anderson, Software Defined Networking, Univ. Politec. 1st Edition, Catalunya, CRC Press, 2014. pp. 1–67.
B. Y. Yoon, S. Kim and J. Lee, "Transport SDN architecture for distributed cloud services," 2014 12th International Conference on Optical Internet 2014 (COIN), Jeju, 2014, pp. 1-2, doi: 10.1109/COIN.2014.6950614.
L. Cui, F. R. Yu and Q. Yan, "When big data meets software-defined networking: SDN for big data and big data for SDN," in IEEE Network, vol. 30, no. 1, pp. 58-65, January-February 2016, doi: 10.1109/MNET.2016.7389832.
H. Jang and J. Lin, "SDN based QoS aware bandwidth management framework of ISP for smart homes," 2017 IEEE SmartWorld, Ubiquitous Intelligence & Computing, Advanced & Trusted Computed, Scalable Computing & Communications, Cloud & Big Data Computing, Internet of People and Smart City Innovation (SmartWorld/SCALCOM/UIC/ATC/CBDCom/IOP/SCI), San Francisco, CA, 2017, pp. 1-6, doi: 10.1109/UIC-ATC.2017.8397480.
Mckeown, H. Rashvand, T. Wilcox and P. Thomas, "Priority SDN Controlled Integrated Wireless and Powerline Wired for Smart-Home Internet of Things," 2015 IEEE 12th Intl Conf on Ubiquitous Intelligence and Computing and 2015 IEEE 12th Intl Conf on Autonomic and Trusted Computing and 2015 IEEE 15th Intl Conf on Scalable Computing and Communications and Its Associated Workshops (UIC-ATC-ScalCom), Beijing, 2015, pp. 1825-1830, doi: 10.1109/UIC-ATC-ScalCom-CBDCom-IoP.2015.331.
T. Theodorou and L. Mamatas, "CORAL-SDN: A software-defined networking solution for the Internet of Things," 2017 IEEE Conference on Network Function Virtualization and Software Defined Networks (NFV-SDN), Berlin, 2017, pp. 1-2, doi: 10.1109/NFV-SDN.2017.8169870.
P. Bosshart, D. Daly, M. Izzard, N. McKeown, J. Rexford, C. Schlesinger, D. Talayco, A. Vahdat, G. Varghese, and D. Walker, “Programming Protocol- Independent Packet Processors”, ACM SIGCOMM Computer Communication Review, Vol. 44, No.3, July 2014, pp. 88–95, doi: https://doi.org/10.1145/2656877.2656890.
L. Sidki, Y. Ben-Shimol and A. Sadovski, "Fault tolerant mechanisms for SDN controllers," 2016 IEEE Conference on Network Function Virtualization and Software Defined Networks (NFV-SDN), Palo Alto, CA, 2016, pp. 173-178, doi: 10.1109/NFV-SDN.2016.7919494.
R. Bifulco and R. Canonico, "Analysis of the handover procedure in Follow-Me Cloud," 2012 IEEE 1st International Conference on Cloud Networking (CLOUDNET), Paris, 2012, pp. 185-187, doi: 10.1109/CloudNet.2012.6483683.
M. B. Al-Somaidai, “Survey of Software Components to Emulate OpenFlow Protocol as an SDN Implementation”, American Journal of Software Engineering and Applications, vol. 3, no. 6, December 2014, pp. 74, doi: 10.11648/j.ajsea.20140306.12.
S. Ali and M. Ghazal, "Real-time Heart Attack Mobile Detection Service (RHAMDS): An IoT use case for Software Defined Networks," 2017 IEEE 30th Canadian Conference on Electrical and Computer Engineering (CCECE), Windsor, ON, 2017, pp. 1-6, doi: 10.1109/CCECE.2017.7946780.
P. Demestichas et al., "5G on the Horizon: Key Challenges for the Radio-Access Network," in IEEE Vehicular Technology Magazine, vol. 8, no. 3, pp. 47-53, Sept. 2013, doi: 10.1109/MVT.2013.2269187.
D. La Oliva et al., "Xhaul: toward an integrated fronthaul/backhaul architecture in 5G networks," in IEEE Wireless Communications, vol. 22, no. 5, pp. 32-40, October 2015, doi: 10.1109/MWC.2015.7306535.
Sutton, “5G network architecture,” The Journal, vol. 12, pp. 8–15, 2018.
X. Costa-Perez et al., "5G-Crosshaul: An SDN/NFV Integrated Fronthaul/Backhaul Transport Network Architecture," in IEEE Wireless Communications, vol. 24, no. 1, pp. 38-45, February 2017, doi: 10.1109/MWC.2017.1600181WC.
R. S. Kalan, M. Sayit and A. C. Begen, "Implementation of SAND Architecture Using SDN," 2018 IEEE Conference on Network Function Virtualization and Software Defined Networks (NFV-SDN), Verona, Italy, 2018, pp. 1-6, doi: 10.1109/NFV-SDN.2018.8725632.
G. Bianchi, E. Biton, N. Blefari-Melazzi, I. Borges, L. Chiaraviglio, P. de la Cruz Ramos, P. Eardley, F. Fontes, M. J. McGrath, L. Natarianni, D. Niculescu, C. Parada, M. Popovici, V. Riccobene, S. Salsano, B. Sayadi, J. Thomson, C. Tselios, and G. Tsolis, “Superfluidity: a flexible functional architecture for 5G networks”, Emerg. Telecommun, vol. 27, pp. 1178–1186, 2016, doi: https://doi.org/10.1002/ett.3082.
D. Gedia and L. Perigo, "Performance Evaluation of SDN-VNF in Virtual Machine and Container," 2018 IEEE Conference on Network Function Virtualization and Software Defined Networks (NFV-SDN), Verona, Italy, 2018, pp. 1-7, doi: 10.1109/NFV-SDN.2018.8725805.
J. Teixeira, G. Antichi, D. Adami, A. Del Chiaro, S. Giordano and A. Santos, "Datacenter in a Box: Test Your SDN Cloud-Datacenter Controller at Home," 2013 Second European Workshop on Software Defined Networks, Berlin, 2013, pp. 99-104, doi: 10.1109/EWSDN.2013.23.
Asensio, L. Gifre, M. Ruiz and L. Velasco, "Carrier SDN for flexgrid-based inter-datacenter connectivity," 2014 16th International Conference on Transparent Optical Networks (ICTON), Graz, 2014, pp. 1-4, doi: 10.1109/ICTON.2014.6876337.
P. Varga et al., "Real-time security services for SDN-based datacenters," 2017 13th International Conference on Network and Service Management (CNSM), Tokyo, 2017, pp. 1-9, doi: 10.23919/CNSM.2017.8256030.
W. Hong, K. Wang and Y. Hsu, "Application-Aware Resource Allocation for SDN-based Cloud Datacenters," 2013 International Conference on Cloud Computing and Big Data, Fuzhou, 2013, pp. 106-110, doi: 10.1109/CLOUDCOM-ASIA.2013.44.
P. Samadi, D. Calhoun, H. Wang and K. Bergman, "Accelerating cast traffic delivery in data centers leveraging physical layer optics and SDN," 2014 International Conference on Optical Network Design and Modeling, Stockholm, 2014, pp. 73-77.
Y. Han, S. Seo, J. Li, J. Hyun, J. Yoo and J. W. Hong, "Software defined networking-based traffic engineering for data center networks," The 16th Asia-Pacific Network Operations and Management Symposium, Hsinchu, 2014, pp. 1-6, doi: 10.1109/APNOMS.2014.6996601.
Elgendi, K. S. Munasinghe and A. Jamalipour, "A three-tier SDN architecture for DenseNets," 2015 9th International Conference on Signal Processing and Communication Systems (ICSPCS), Cairns, QLD, 2015, pp. 1-7, doi: 10.1109/ICSPCS.2015.7391793.
Monga, E. Pouyoul and C. Guok, "Software-Defined Networking for Big-Data Science - Architectural Models from Campus to the WAN," 2012 SC Companion: High Performance Computing, Networking Storage and Analysis, Salt Lake City, UT, 2012, pp. 1629-1635, doi: 10.1109/SC.Companion.2012.341.
M. Osman, J. Núñez-Martínez and J. Mangues-Bafalluy, "Hybrid SDN: Evaluation of the impact of an unreliable control channel," 2017 IEEE Conference on Network Function Virtualization and Software Defined Networks (NFV-SDN), Berlin, 2017, pp. 242-246, doi: 10.1109/NFV-SDN.2017.8169866.
P. Qin, B. Dai, B. Huang and G. Xu, "Bandwidth-Aware Scheduling With SDN in Hadoop: A New Trend for Big Data," in IEEE Systems Journal, vol. 11, no. 4, pp. 2337-2344, Dec. 2017, doi: 10.1109/JSYST.2015.2496368.
U. Khan and B. K. Ratha, "Time series prediction QoS routing in software defined vehicular ad-hoc network," 2015 International Conference on Man and Machine Interfacing (MAMI), Bhubaneswar, 2015, pp. 1-6, doi: 10.1109/MAMI.2015.7456576.
P. Jayashree and F. Infant Princy, "Leveraging SDN to conserve energy in WSN-An analysis," 2015 3rd International Conference on Signal Processing, Communication and Networking (ICSCN), Chennai, 2015, pp. 1-6, doi: 10.1109/ICSCN.2015.7219904.
S. Jain, M. Zhu, J. Zolla, U. Hölzle, S. Stuart, A. Vahdat, A. Kumar, S. Mandal, J. Ong, L. Poutievski, A. Singh, S. Venkata, J. Wanderer and J. Zhou, “B4: Experience with a Globally-Deployed Software Defined WAN”, ACM SIGCOMM Computer Communication Review, Vol.43, No.4, August 2013, pp. 3, doi: https://doi.org/10.1145/2534169.2486019.
S. Lazar and C. Stefan, "Future Vehicular networks: What control technologies?," 2016 International Conference on Communications (COMM), Bucharest, 2016, pp. 337-340, doi: 10.1109/ICComm.2016.7528203.
E. K. Ali, M. Manel and Y. Habib, "An Efficient MPLS-Based Source Routing Scheme in Software-Defined Wide Area Networks (SD-WAN)," 2017 IEEE/ACS 14th International Conference on Computer Systems and Applications (AICCSA), Hammamet, 2017, pp. 1205-1211, doi: 10.1109/AICCSA.2017.165.
E. Rojas, "From Software-Defined to Human-Defined Networking: Challenges and Opportunities," in IEEE Network, vol. 32, no. 1, pp. 179-185, Jan.-Feb. 2018, doi: 10.1109/MNET.2017.1700070.
T. Ninikrishna et al., "Software defined IoT: Issues and challenges," 2017 International Conference on Computing Methodologies and Communication (ICCMC), Erode, 2017, pp. 723-726, doi: 10.1109/ICCMC.2017.8282560.
M. Ketel, "Enhancing BYOD Security Through SDN," SoutheastCon 2018, St. Petersburg, FL, 2018, pp. 1-2, doi: 10.1109/SECON.2018.8479230.
P. Amaral, P. F. Pinto, L. Bernardo and A. Mazandarani, "Application Aware SDN Architecture using Semi-supervised Traffic Classification," 2018 IEEE Conference on Network Function Virtualization and Software Defined Networks (NFV-SDN), Verona, Italy, 2018, pp. 1-6, doi: 10.1109/NFV-SDN.2018.8725753.
Hung-Chin Jang, Chi-Wei Huang and Fu-Ku Yeh, "Design a bandwidth allocation framework for SDN based smart home," 2016 IEEE 7th Annual Information Technology, Electronics and Mobile Communication Conference (IEMCON), Vancouver, BC, 2016, pp. 1-6, doi: 10.1109/IEMCON.2016.7746320.
H S. Van Rossem et al., "Deploying elastic routing capability in an SDN/NFV-enabled environment," 2015 IEEE Conference on Network Function Virtualization and Software Defined Network (NFV-SDN), San Francisco, CA, 2015, pp. 22-24, doi: 10.1109/NFV-SDN.2015.7387398.
D. Tatang, F. Quinkert, J. Frank, C. Röpke and T. Holz, "SDN-Guard: Protecting SDN controllers against SDN rootkits," 2017 IEEE Conference on Network Function Virtualization and Software Defined Networks (NFV-SDN), Berlin, 2017, pp. 297-302, doi: 10.1109/NFV-SDN.2017.8169856.
Aydeger, K. Akkaya and A. S. Uluagac, "SDN-based resilience for smart grid communications," 2015 IEEE Conference on Network Function Virtualization and Software Defined Network (NFV-SDN), San Francisco, CA, 2015, pp. 31-33, doi: 10.1109/NFV-SDN.2015.7387401.
C. J. Casey, M. Yan, C. Chojnacki and A. Sprintson, "Flowsim: Interactive SDN switch visualization," 2015 IEEE Conference on Network Function Virtualization and Software Defined Network (NFV-SDN), San Francisco, CA, 2015, pp. 34-36, doi: 10.1109/NFV-SDN.2015.7387402.
J. Medved, R. Varga, A. Tkacik and K. Gray, "OpenDaylight: Towards a Model-Driven SDN Controller architecture," Proceeding of IEEE International Symposium on a World of Wireless, Mobile and Multimedia Networks 2014, Sydney, NSW, 2014, pp. 1-6, doi: 10.1109/WoWMoM.2014.6918985.
M. Paliwal, D. Shrimankar and O. Tembhurne, "Controllers in SDN: A Review Report," in IEEE Access, vol. 6, pp. 36256-36270, 2018, doi: 10.1109/ACCESS.2018.2846236.
R. Mijumbi, J. Serrat, J. Gorricho, S. Latre, M. Charalambides and D. Lopez, "Management and orchestration challenges in network functions virtualization," in IEEE Communications Magazine, vol. 54, no. 1, pp. 98-105, January 2016, doi: 10.1109/MCOM.2016.7378433.
M. Ángel Barrera Pérez, N. Y. Serrato Losada, E. Rojas Sánchez, y G. Mancilla Gaona, “Estado del arte en redes definidas por software (SDN)”, Vis. Electron., vol. 13, n.º 1, pp. 178-194, ene. 2019. https://doi.org /10.14483/22484728.14424
J. F. Herrera-Cubides, P. A. Gaona-García, C. E. Montenegro-Marín, S. Sánchez-Alonso, y D. Martin-Moncunill, “Abstraction of linked data’s world”, Visión electrónica, vol. 13, no. 1, pp. 57-74, feb. 2019. https://doi.org /10.14483/22484728.14397
Copyright (c) 2021 Ingeniería Solidaria

This work is licensed under a Creative Commons Attribution 4.0 International License.
Cession of rights and ethical commitment
As the author of the article, I declare that is an original unpublished work exclusively created by me, that it has not been submitted for simultaneous evaluation by another publication and that there is no impediment of any kind for concession of the rights provided for in this contract.
In this sense, I am committed to await the result of the evaluation by the journal Ingeniería Solidaría before considering its submission to another medium; in case the response by that publication is positive, additionally, I am committed to respond for any action involving claims, plagiarism or any other kind of claim that could be made by third parties.
At the same time, as the author or co-author, I declare that I am completely in agreement with the conditions presented in this work and that I cede all patrimonial rights, in other words, regarding reproduction, public communication, distribution, dissemination, transformation, making it available and all forms of exploitation of the work using any medium or procedure, during the term of the legal protection of the work and in every country in the world, to the Universidad Cooperativa de Colombia Press.