A Systematic Literature Review on Military Software Defined Networks <s> General Software Defined Network Applications <s> To maximize the performance of a software-defined network, a network observer must develop a state that can be tracked and controlled. We propose a novel method that uses the entire eigenspace of the Laplacian matrix to determine the state of a SDN. Our approach exploits the double orthogonality of the Laplacian matrix in order to define the dual basis. Each basis uses the entire reachability space with the objective of fully describing the centrality of each node over time. The reachability space is defined by the dual basis once the null space has been removed. The definition of the dual basis allows the network controller to observe the network state to determine which areas are most utilized and least utilized. Once the state has been estimated, the controller may choose to correct the network state by rerouting flows or preventing additional flows. <s> BIB001 </s> A Systematic Literature Review on Military Software Defined Networks <s> General Software Defined Network Applications <s> In this paper we introduce WASP, a general communication layer for hybrid wireless networks where multiple networks are used to complement each other. In our system, we capitalize on an infrastructure with a ubiquitous, wide-area network to help enable the creation of a local mobile ad-hoc network in an efficient, scalable, evolvable, and manageable way. In particular, in an architecture inspired by software-defined networking, we decouple the control plane and data plane in the mobile devices and shift the control plane to a centralized controller. The controller, reachable via the wide-area network, manages a collection of mobile devices by informing each device how to handle traffic based on neighbor information provided by the mobile devices. With this, a mobile ad-hoc network can help reduce the data burden on the ubiquitous network, and the ubiquitous network can help reduce the burden on the mobile devices. WASP can be used in different networks with different applications such as cellular and military networks. In this paper, we based our implementation on Android and tested on a collection of Google Nexus-4 devices to measure metrics such as battery consumption. We evaluate on an extended ns-3 simulation platform which we added the ability to run unmodified Android applications on the nodes within ns-3. Our experiments show that WASP scales better than traditional ad-hoc networks with only a minimal trade off of energy. Additionally, we show that a content distribution scheme using WASP on smart phones with cellular data plans significantly offloads bandwidth from the cellular infrastructure, and in turn reduces expensive data usage and energy usage. <s> BIB002 </s> A Systematic Literature Review on Military Software Defined Networks <s> General Software Defined Network Applications <s> Modern critical infrastructures represent the pivotal assets upon which the current society greatly relies to support welfare, economy, and quality of life. Nowadays, the trend is to re-organize these infrastructures by applying a System of Systems concept, where the sparse islands are progressively interconnected by means of proper middleware solutions through local or wide-area networks. The huge complexity of such systems makes the integration task among components extremely challenging. Indeed, it may introduce unexpected system behaviors, mainly affecting dependability and performance, that usually become evident only during systems operations and, in particular, in presence of stress or unexpected conditions. Additionally, as they cannot be detected earlier, these problems require complex on-site operations resulting in increased maintenance costs and overspending in terms of personnel resources. A promising way to cope with these new complex systems and to reduce maintenance costs, is to reproduce such distributed systems locally, and let them run prior to the actual execution on-site, in order to get knowledge about their real behavior and define mitigation means and improvement actions. On the other hand, the evaluation of this systems requires sophisticated modeling, simulation, and experimentation infrastructure, which needs the integration of existing simulation environments, real sub-systems, and experimental platforms, which have to interact in a coordinated way. Therefore, hybrid and distributed simulation strategies, supported by novel technologies for resources virtualization and working environment reproduction, represent the most promising way to define the needed strategies to actually support such complex paradigms [1, 2]. <s> BIB003 </s> A Systematic Literature Review on Military Software Defined Networks <s> General Software Defined Network Applications <s> The next generation (5G) mobile communication systems are targeting 1000× growth in aggregate data rate. To achieve that data rate, 5G mobile personal cell (mPC) is an emerging technology to provide ubiquitous connectivity to the users according to the traffic load and situations. In this paper, we provide a brief survey on the architecture and features for the 5G mobile personal cell in the context of the 3GPP LTE-A. More specifically, this paper highlights the key differences in the mPC architecture from the existing 3GPP LTE-A architecture. In mPC architecture, there is an additional personalized cell domain that helps users to ubiquitously connect with less transmission delay by supporting high mobility and data rate. Moreover, the key features of mPC such as its load balancing capability, capacity boosting, capability to cope with the disasters situations, and seamless mobility support regardless of the cell types and radio access technologies (RATs) are discussed. In addition, the suitable deployment scenario for the mPC is also discussed. Finally, we present possible challenges and point out the directions for mPC research. <s> BIB004 </s> A Systematic Literature Review on Military Software Defined Networks <s> General Software Defined Network Applications <s> The Internet is inherently a multipath network: For an underlying network with only a single path, connecting various nodes would have been debilitatingly fragile. Unfortunately, traditional Internet technologies have been designed around the restrictive assumption of a single working path between a source and a destination. The lack of native multipath support constrains network performance even as the underlying network is richly connected and has redundant multiple paths. Computer networks can exploit the power of multiplicity, through which a diverse collection of paths is resource pooled as a single resource, to unlock the inherent redundancy of the Internet. This opens up a new vista of opportunities, promising increased throughput (through concurrent usage of multiple paths) and increased reliability and fault tolerance (through the use of multiple paths in backup/redundant arrangements). There are many emerging trends in networking that signify that the Internet's future will be multipath, including the use of multipath technology in data center computing; the ready availability of multiple heterogeneous radio interfaces in wireless (such as Wi-Fi and cellular) in wireless devices; ubiquity of mobile devices that are multihomed with heterogeneous access networks; and the development and standardization of multipath transport protocols such as multipath TCP. The aim of this paper is to provide a comprehensive survey of the literature on network-layer multipath solutions. We will present a detailed investigation of two important design issues, namely, the control plane problem of how to compute and select the routes and the data plane problem of how to split the flow on the computed paths. The main contribution of this paper is a systematic articulation of the main design issues in network-layer multipath routing along with a broad-ranging survey of the vast literature on network-layer multipathing. We also highlight open issues and identify directions for future work. <s> BIB005 </s> A Systematic Literature Review on Military Software Defined Networks <s> General Software Defined Network Applications <s> Mobility support is one of the key use cases of Information-Centric Networking (ICN), and is also widely discussed as a potential advantage of ICN compared to IP. In this paper, we review the state-of- the-art solutions for supporting producer mobility in ICN networks. Through deep analysis of the procedures for handling pending Interests, we observe two issues in the previous mobility solutions, i.e., unnecessary bandwidth consumption and Data triangular routing. To address both issues and achieve a seamless and bandwidth-efficient handover, we propose two new Coordinator Assisted Mobility Support (CAMS) solutions, which are referred to as Coordinator Assisted Pending Interest Table (PIT) Update (CAPU) and Coordinator Assisted Interest Re-issue (CAIR). The feasibility and efficiency of the proposed solutions are validated via a proof-of-concept demonstration, showing the better performance of the proposed solutions compared with the existing solutions. <s> BIB006 </s> A Systematic Literature Review on Military Software Defined Networks <s> General Software Defined Network Applications <s> In this letter, we propose a novel SDN-based fast lightpath hopping (LPH) mechanism enabled by time synchronization to protect optical networks from eavesdropping and jamming. In order to realize fast LPH in optical networks, we establish an SDN-based LPH routing and signalling architecture, and set up an integer linear programming (ILP) model for fewest-shared-link multipath computation. We also demonstrate the first fast LPH prototype experiment and results show that an extremely high hop rate upto 1 MHz can be achieved with acceptable bit error rates (BERs) by control/switching separation and precise timing. <s> BIB007 </s> A Systematic Literature Review on Military Software Defined Networks <s> General Software Defined Network Applications <s> To defend against network reconnaissance for unauthorized access of the packet forwarding path, we leverage software-defined networking (SDN) and build moving target defense (MTD) by randomizing network addresses. We distinguish our work from prior research by implementing MTD at the data plane and on all nodes along the forwarding path. Thus, our scheme is fast and lightweight in operation (significantly decreasing the controller communication overhead) and enables quicker security response to reduce the attack impact (as opposed to having the attack impact all the way to the endhost destination). We validate our work on an Open vSwitch-based testbed and show that the attacker's cost to achieve timely network reconnaissance increases by more than an order of magnitude than having the controller actuate the MTD. <s> BIB008 </s> A Systematic Literature Review on Military Software Defined Networks <s> General Software Defined Network Applications <s> In this paper, we integrate programmable networks in microgrid to provide flexible and easy-to-manage communication solutions, thus enabling resilient microgrid operations in face of various cyber and physical disturbances. Specifically, two contributions have been made: (1) Establish a novel softwaredefined networking (SDN) based communication architecture that abstracts the network infrastructure from the upper-level applications to significantly expedite the development of microgrid applications; (2) Create a hardware-in-the-loop cyberphysical platform for evaluating and validating the performance of the presented architecture, control techniques and SDN based functionalities. Test results have demonstrated that the new architecture can significantly enhance microgrid resilience, particularly for those that have high penetration of renewable energy sources. <s> BIB009
Twenty-six papers have been found to discuss SDN applications in a context slightly related to military networks. SDN applications can be used to control network traffic, monitor, test, or orchestrate a network. In military networks running SDN, these applications can simplify both operational and administrative tasks in the network. This includes simplifying the management operations such as applying monitoring to network elements  , but it can also be used in other contexts such as routing network traffic in power grids on a military base BIB009 , or tracking moving base-stations in vehicles BIB004 . However, the articles that are reviewed in this sections do not apply directly to the military domain, but include general SDN applications that have been identified by the corresponding authors as adoptable to the military domain. The nature of the SDN technology is appealing to military networks, since SDN offers lower complexity and lower cost that allows for fast failovers and network redundancy in low cost networks, without using expensive technologies such as MultiProtocol Packet Label Switching (MPLS). SDN opens up for a more flexible routing mechanism, where the network routing on switches and routers can be based on more attributes than only the destination IP and MAC address. This flexible forwarding mechanism applies per flow, and therefore it is possible to use SDN to achieve multipath routing BIB005 . In military networks, load balancing/ multipathing of constrained bandwidth links is a cheaper alternative than overlay networks or BGP. From a security perspective, multipathing also makes it more difficult to do wiretapping, when parts of the network traffic are diverted around the wiretap. An alternative to physical multipathing is to use multiple radio channels or optical channels to split the traffic into multiple virtual frequency channels BIB007 . The concept of making advanced routing decisions based on alternative headers other than the IP addresses is also reflected through security and content routing. An approach for confusing an attacker is suggested by Chang BIB008 , by randomizing IP addresses and routing according to other attributes such as the IP option field. However, such SDN routing applications are only possible in small and closed networks. A similar approach also applies to content-based networking (CBN) BIB006 , by extending the network devices to also be able to read the data content of a packet and base the routing decisions on content. Currently, no SDN technology is available for CBN, and no standard exists on how the network packet headers and the data content is used for making routing decisions. Advanced SDN routing can also be enabled by mixing packet header attributes. In order to enable network isolation, it is most common to use one domain identifier in the packet header, such as a VLAN ID for layer 2. Schlesinger  presents an abstraction layer for network programming that opens up for utilizing a combination of both layer 2 and layer 3 when making SDN forwarding rules. This enables network isolation within one VLAN when IP addresses do not overlap. Monitoring applications combined with flow control in SDN can also increase the performance of an SDN network. Due to the dynamics of SDN, network flows can be specified and changed in a per flow, per network device basis. Hence, the controller is capable of calculating the utilization of the network links and performing load balancing and prioritization of flows per link. By calculating the full paths and their bandwidth utilization, spectral graph theory can be used to increase the robustness and the performance of low bandwidth military networks BIB001 . A similar network performance enhancing application is also suggested in an architecture named WASP BIB002 that is customized for wireless networks. It shows that less distributed management traffic across nodes, by replacing distributed protocol with SDN, enhances the overall network performance. Another type of an SDN application is a network testbed. Chadha et al.  shows the importance of having testbeds in both civil and military contexts to increase the quality and security of an infrastructure. The author shows how using SDN as a networking tool to create a virtual network infrastructure on a server that is used for quality assurance and testing, in order to ease network provisioning. Accordingly, Ficco et al. BIB003 demonstrated how OpenFlow in test-beds for military use significantly reducing the costs of testing critical infrastructures.