Validating User Flows to Protect Software Defined Network Environments

Software Defined Network is a promising network paradigm which has led to several security threats in SDN applications that involve user flows, switches, and controllers in the network. Threats as spoofing, tampering, information disclosure, Denial of Service, flow table overloading, and so on have been addressed by many researchers. In this paper, we present novel SDN design to solve three security threats: flow table overloading is solved by constructing a star topology-based architecture, unsupervised hashing method mitigates link spoofing attack, and fuzzy classifier combined with L1-ELM running on a neural network for isolating anomaly packets from normal packets. For effective flow migration Discrete-Time Finite-State Markov Chain model is applied. Extensive simulations using OMNeT++ demonstrate the performance of our proposed approach, which is better at preserving holding time than are other state-of-the-art works from the literature.

NSG flow logs overview - Azure Network Watcher

Ensure Security Across Your Entire Network Using Software Defined

Scalability, Consistency, Reliability and Security in SDN

PERM-GUARD: Authenticating the Validity of Flow Rules in Software

How Netflix uses eBPF flow logs at scale for network insight

Software defined wireless sensor networks application

Flow-based intrusion detection on software-defined networks: a

The application of Software Defined Networking on securing

Solutions - Cisco Zero Trust Architecture Guide - Cisco

What is Computer System Validation and How Do You Do It?

Validating User Flows to Protect Software Defined Network Environments

What Is Zero Trust Network Access? - Cisco