Keywords
How to Cite
Abstract
Software‑defined networking (SDN) centralizes and programs network control but exposes controller‑centric vulnerabilities. In a Mininet + OpenDaylight simulated environment, we identified weaknesses (default “admin” credentials, unencrypted controller–switch traffic, flow rule manipulation), deployed security policies (OpenFlow rules via RESTCONF, Group‑Based Policy, mTLS with X.509 certificates) and assessed their effect against DoS and MITM using Wireshark, Ettercap and controller logs. Across four periods (T1–T4), we observed lower relative latency (~45%→~30%), stable availability (≈90–95%), and improved detection rate (~40%→~45%). A paired t‑test (α=0.05) indicated statistically significant improvements. Findings show that mTLS + GBP + OpenFlow strengthen confidentiality, integrity and availability in the simulated SDN.
References
Arévalo-Herrera, J., Camargo Mendoza, J., & Martínez Torre, J. I. (2025). Assessing SDN controller vulnerabilities: A survey on attack typologies, detection mechanisms, controller selection, and dataset application in machine learning. Wireless Personal Communications, 140, 739–775. https://doi.org/10.1007/s11277-025-11748-w
Mabood, N., Tariq, N., Khan, F. A., & Ashraf, M. (2025). A comprehensive survey on software defined networking (SDN) security. En M. Arif, A. Jaffar, & O. Geman, (eds.). Computing and emerging technologies (ICCET 2023). Springer, Cham. https://doi.org/10.1007/978-3-031-77617-5_18
Mejía Viteri, J. T., Gonzales Valero, M. I., Fernández Torres, A. del R., & Crespo Torres, N. M. (2024). Seguridad contra ataques DDoS en los entornos SDN con inteligencia artificial. Revista Metropolitana de Ciencias, 7(3). https://doi.org/10.33262/rmc.v7i3.2844
Mudgal, A., Verma, A., Singh, M., Sahoo, K. S., Elmroth, E., & Bhuyan, M. (2024). FloRa: Flow table low-rate overflow reconnaissance and detection in SDN. IEEE Transactions on Network and Service Management, 21(6), 6670–6683. https://doi.org/10.1109/TNSM.2024.3446178
Ohri, P., & Guha Neogi, S. (2022). Software-defined networking security challenges and solutions: A comprehensive survey. International Journal of Computing and Digital Systems, 12(1), 383–400. https://doi.org/10.12785/ijcds/120131
Open Networking Foundation. (2025). OpenFlow 2.0. https://n9.cl/rw7o3
Ouedraogo Rakissaga, W. A., Omar, H. H., & Kouraogo, P. J. (2025). Software Defined Networks: Strengths, weaknesses, and resilience to failures. Engineering, 17(1), 20–35. https://doi.org/10.4236/eng.2025.171002
Shahzad, M., Rizvi, S., Khan, T. A., Ahmad, S., Siddiqui, M. S., Chen, J., Li, X., Wang, Y., Kumar, N., Patel, R., García, S., Fernández, L., Müller, H., Schmidt, P., Ivanov, A., Silva, C., Kim, Y., & Al-Mistarihi, M. (2025). An exhaustive parametric analysis for securing SDN through traditional, AI/ML, and blockchain approaches: A systematic review. International Journal of Networked and Distributed Computing, 13(1). https://doi.org/10.1007/s44227-024-00055-8
Swileh, M. N., & Zhang, S. (2024). Unseen attack detection in software-defined networking using a BERT-based large language model. arXiv. https://arxiv.org/abs/2412.06239
Wang, H. (2025). A zero-trust security model applied in SDN intelligent network. SPIE Digital Library. https://doi.org/10.1117/12.3058610
This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.