Design and Implementation of a New Security Plane for Hybrid Distributed SDNs

摘要

Software defined network 'SDN' architectures can be considered as a big revolution in the field of computer networks, because they offer a lot of advantages and allow having a visibility and a total control on the equipment, services and applications deployed in the network. On the other hand, the implementation of this type of architecture is not obvious and requires great expertise and good handling and management of network equipment. So, SDN architectures have evolved towards distributed and hybrid architectures. The security of these architectures is considered to be the biggest problem in front of their deployments. In this paper we propose the integration of a new flexible security layer that allows managing security in SDN networks in order to detect and prevent against intrusion attempts and zero day attacks without impacting the performance of controllers and SDNs nodes. In this article we discuss also the challenges of the SDN; we detail the functioning of our framework and provide an implementation of our new SDN security layer.