Software Defined Networking Architecture, Security and Energy Efficiency: A Survey <s> I. INTRODUCTION <s> Explore the emerging definitions, protocols, and standards for SDNsoftware-defined, software-driven, programmable networkswith this comprehensive guide. Two senior network engineers show you whats required for building networks that use software for bi-directional communication between applications and the underlying network infrastructure. This vendor-agnostic book also presents several SDN use cases, including bandwidth scheduling and manipulation, input traffic and triggered actions, as well as some interesting use cases around big data, data center overlays, and network-function virtualization. Discover how enterprises and service providers alike are pursuing SDN as it continues to evolve.Explore the current state of the OpenFlow model and centralized network control Delve into distributed and central control, including data plane generation Examine the structure and capabilities of commercial and open source controllers Survey the available technologies for network programmability Trace the modern data center from desktop-centric to highly distributed models Discover new ways to connect instances of network-function virtualization and service chaining Get detailed information on constructing and maintaining an SDN network topology Examine an idealized SDN framework for controllers, applications, and ecosystems <s> BIB001 </s> Software Defined Networking Architecture, Security and Energy Efficiency: A Survey <s> I. INTRODUCTION <s> OpenFlow is an open standard that has gained tremendous interest in the last few years within the network community. It is an embodiment of the software-defined networking paradigm, in which higher-level flow routing decisions are derived from a control layer that, unlike classic network switch implementations, is separated from the data handling layer. The central attraction to this paradigm is that by decoupling the control logic from the closed and proprietary implementations of traditional network switch infrastructure, researchers can more easily design and distribute innovative flow handling and network control algorithms. Indeed, we also believe that OpenFlow can, in time, prove to be one of the more impactful technologies to drive a variety of innovations in network security. OpenFlow could offer a dramatic simplification to the way we design and integrate complex network security applications into large networks. However, to date there remains a stark paucity of compelling OpenFlow security applications. In this paper, we introduce FRESCO, an OpenFlow security application development framework designed to facilitate the rapid design, and modular composition of OF-enabled detection and mitigation modules. FRESCO, which is itself an OpenFlow application, offers a Click-inspired [19] programming framework that enables security researchers to implement, share, and compose together, many different security detection and mitigation modules. We demonstrate the utility of FRESCO through the implementation of several well-known security defenses as OpenFlow security services, and use them to examine various performance and efficiency aspects of our proposed framework. <s> BIB002 </s> Software Defined Networking Architecture, Security and Energy Efficiency: A Survey <s> I. INTRODUCTION <s> The pull of Software-Defined Networking (SDN) is magnetic. There are few in the networking community who have escaped its impact. As the benefits of network visibility and network device programmability are discussed, the question could be asked as to who exactly will benefit? Will it be the network operator or will it, in fact, be the network intruder? As SDN devices and systems hit the market, security in SDN must be raised on the agenda. This paper presents a comprehensive survey of the research relating to security in software-defined networking that has been carried out to date. Both the security enhancements to be derived from using the SDN framework and the security challenges introduced by the framework are discussed. By categorizing the existing work, a set of conclusions and proposals for future research directions are presented. <s> BIB003 </s> Software Defined Networking Architecture, Security and Energy Efficiency: A Survey <s> I. INTRODUCTION <s> SDN separates the control plane and data plane. SDN needs to be equipped with complex and proprietary networking devices as it needs to separate the infrastructure layer (network device) from the control layer (network OS, which provides a central view and control over the network and network services) and the application layer (software/business application)[1][6][8]. When a single controller is given the job of controlling multiple devices (switches/routers) these changes in network structure brought about by SDN will inevitably impact on network security. In this paper we studied issues and security challenges in SDN and current status. <s> BIB004 </s> Software Defined Networking Architecture, Security and Energy Efficiency: A Survey <s> I. INTRODUCTION <s> Software Defined Networks discusses the historical networking environment that gave rise to SDN, as well as the latest advances in SDN technology. The book gives you the state of the art knowledge needed for successful deployment of an SDN, including: How to explain to the non-technical business decision makers in your organization the potential benefits, as well as the risks, in shifting parts of a network to the SDN model How to make intelligent decisions about when to integrate SDN technologies in a network How to decide if your organization should be developing its own SDN applications or looking to acquire these from an outside vendor How to accelerate the ability to develop your own SDN application, be it entirely novel or a more efficient approach to a long-standing problem Discusses the evolution of the switch platforms that enable SDN Addresses when to integrate SDN technologies in a network Provides an overview of sample SDN applications relevant to different industries Includes practical examples of how to write SDN applications <s> BIB005 </s> Software Defined Networking Architecture, Security and Energy Efficiency: A Survey <s> I. INTRODUCTION <s> Software-defined network (SDN) has become one of the most important architectures for the management of largescale complex networks, which may require repolicing or reconfigurations from time to time. SDN achieves easy repolicing by decoupling the control plane from data plane. Thus, the network routers/switches just simply forward packets by following the flow table rules set by the control plane. Currently, OpenFlow is the most popular SDN protocol/standard and has a set of design specifications. Although SDN/OpenFlow is a relatively new area, it has attracted much attention from both academia and industry. In this paper, we will conduct a comprehensive survey of the important topics in SDN/OpenFlow implementation, including the basic concept, applications, language abstraction, controller, virtualization, quality of service, security, and its integration with wireless and optical networks. We will compare the pros and cons of different schemes and discuss the future research trends in this exciting area. This survey can help both industry and academia R&D people to understand the latest progress of SDN/OpenFlow designs. <s> BIB006 </s> Software Defined Networking Architecture, Security and Energy Efficiency: A Survey <s> I. INTRODUCTION <s> Security has been considered as one of the top concerns in clouds. Intrusion Detection and Prevention Systems (IDPS) have been widely deployed to enhance the cloud security. Using Software-Defined Networking (SDN) approaches to enhance the system security in clouds has been recently presented in [1], [2]. However, none of existing works established a comprehensive IPS solution to reconfigure the cloud networking environment on-the-fly to counter malicious attacks. In this paper, we present an SDN-based IPS solution called SDNIPS that is a full lifecycle solution including detection and prevention in the cloud. We propose a new IDPS architecture based on Snort-based IDS and Open vSwitch (OVS). We also compare the SDN-based IPS solution with the traditional IPS approach from both mechanism analysis and evaluation. Network Reconfiguration (NR) features are designed and implemented based on the POX controller to enhance the prevention flexibility. Finally, evaluations of SDNIPS demonstrate its feasibility and efficiency over traditional approaches. <s> BIB007 </s> Software Defined Networking Architecture, Security and Energy Efficiency: A Survey <s> I. INTRODUCTION <s> Network convergence, user mobility and various types of applications all contribute to the inhomogeneity of modern networks. The emergence of new technologies, unfortunately, increases the number of possible security threats to all parts of infrastructure. Therefore, network security protocols and mechanisms have to be able to respond to any security threat without affecting the performance of the network or degrading the quality of service. This paper presents an early stage concept of a transparent intrusion prevention system (TIPS) implemented using a combination of various technologies, most notably Software-Defined Networking (SDN) and poll-mode packet processing, which enables deep packet inspection in high-speed network environments. <s> BIB008 </s> Software Defined Networking Architecture, Security and Energy Efficiency: A Survey <s> I. INTRODUCTION <s> The feature of centralized network control logic in Software-Defined Networks (SDNs) paves a way for green energy saving. Router power consumption attracts a wide spread attention in terms of energy saving. Most research on it is at component level or link level, i.e. each router is independent of energy saving. In this paper, we study global power management at network level by rerouting traffic through different paths to adjust the workload of links when the network is relatively idle. We construct the expand network topology according to routers' connection. A 0-1 integer linear programming model is formulated to minimize the power of integrated chassis and linecards that are used while putting idle ones to sleep under constraints of link utilization and packet delay. We proposed two algorithms to solve this problem: alternative greedy algorithm and global greedy algorithm. For comparison, we also use Cplex method just as GreenTe does since GreenTe is state of the art global traffic engineering mechanism. Simulation results on synthetic topologies and real topology of CERNET show the effectiveness of our algorithms. <s> BIB009 </s> Software Defined Networking Architecture, Security and Energy Efficiency: A Survey <s> I. INTRODUCTION <s> In this article the authors evaluate the impact of different sectors of information and communication technologies (ICT) on energy consumption and CO2 emissions. ICT is understood to cover computer and peripheral equipment including local area networks, telecommunication equipment and networks, and data centers. <s> BIB010 </s> Software Defined Networking Architecture, Security and Energy Efficiency: A Survey <s> I. INTRODUCTION <s> This book provides probabilistic, deterministic and geolocation-aware approaches for adaptive connectivity, robust security and privacy-aware communications for vehicular cyber physical systems (CPS). It presents mathematical models and numerical results obtained from experiments and simulations, and a trade-off between connectivity, security and privacy for vehicular communications. Connectivity between vehicles is crucial for vehicular CPS. Intelligent vehicular CPS provides not only road safety and traffic efficiency by exchanging information among vehicles, but also offers infotainment services to passengers using a variety of wireless technologies to forward the traffic/trajectory information with Vehicle-to-Vehicle (V2V), vehicular ad hoc network (VANET), and Vehicle-to-Roadside-to-Vehicle (V2R2V) communications. The book covers how to ensure that the message received from other vehicles is secure and trustworthy, rather than malicious. Further, it reveals how to make sure that the privacy of participants is not revealed while validating the received message. Researchers and professionals working with vehicular networks, smart systems, cyber physical systems, and mobile privacy will find this book valuable. <s> BIB011 </s> Software Defined Networking Architecture, Security and Energy Efficiency: A Survey <s> I. INTRODUCTION <s> With the exponential growth of the internet use, many organizations use vast amount of energy/power to operate and cool their network infrastructures and thus produce significant amount of carbon waste. The main focus of this research is to design OpenFlow based networks that will result in high speed computer networks and dramatic reductions of energy consumption and carbon emission. Note that optimizing a physical network requires tedious time spent manually debugging hardware, by manipulating a virtual network one may add and remove hosts with the click of a mouse. Mininet virtualization software allows the user to carry out what would normally be tedious processes in the matter of minutes. We also present steps toward converting a typical network set-up into an OpenFlow controlled Software Defined Network (SDN); to reduce the power consumption used by the network. Mininet is useful in visually representing a physical network to optimize power consumption using Software Defined Network. <s> BIB012 </s> Software Defined Networking Architecture, Security and Energy Efficiency: A Survey <s> I. INTRODUCTION <s> Software Defined Networking (SDN) is an emerging technology that is replacing traditional networks in many advanced applications such as network virtualization and cloud computing. Recently, SDN has been proposed for wireless networks to add flexibility to incorporate exponentially increasing wireless traffic and to adapt network configurations on the fly, and it is known as Software Defined Wireless Networking or SDWN. There have been several methods proposed for SDWN because of the benefits it offers such as flexibility, manageability and having greater control over the network. In this paper, we present a comprehensive study of different approaches for SDWN along with its challenges and benefits. We also outline current state of the research and future perspectives. With this paper, readers can have a more thorough understanding of SDWN and the research trends in this area. <s> BIB013
T HE INFORMATION and Communication Technology (ICT) infrastructures are expanding continuously with the increase in a number of devices and applications for Internet-of-Things (IoT)  and cyber physical systems  . Software-Defined Networking (SDN) is regarded as a technology that is capable of managing the entire network efficiently and transforming the complex network architecture into the simple and manageable one. Recent studies have shown that the traditional networks are not capable of satisfying the growing demands as all components in the network are vertically integrated forming a complex structure that is hard to manage BIB005 - BIB006 . Traditional networks are capable of supporting only vendor specific policies and offer no flexibility for dynamic network environment BIB005 , BIB001 , BIB006 . Fig. 1 depicts the comparison of high level transformation of traditional networking architecture and SDN architecture. SDN is regarded as the hardware independent next generation networking paradigm in which networking device from any vendors could be controlled through SDN. SDN has decoupled application plane, data plane and control plane. It has two prime components: controller and switches. SDN controller is responsible for the management of entire network whereas networking switches are responsible for operating based on the instructions deployed through SDN controller. Unlike the traditional networks, where the entire system needs to be reconfigured to upgrade the system, only the software needs to be updated in the SDN, making it more convenient for upgrading and reduction of overall cost  . SDN has gained significant attention as it is flexible and can be programmed using any high-level programming languages to serve the purpose of the client devices and users [8] -  . Programmable SDN allows to adapt the network parameters based on its operating environment to improve overall network performance as well as detect flaws in the network. Due to the increasingly pervasive existence of smart programmable devices in the network, SDN provides security (e.g., SDN IPS BIB007 , TIPS BIB008 , anomaly attacks  ), energy efficiency and network virtualization for enhancing the overall network performance. Despite the advantages that programmable SDN technology offers, it can be vulnerable to many kind of attacks such as anomaly attacks, intrusion attacks, Denial-of-Service (DoS) attacks, etc. BIB002 - BIB011 . Furthermore, programmable SDN can be used to help reduce energy consumption by network infrastructure and devices while providing network security. According to the reports on the energy consumption, the energy consumption by the ICT infrastructure is proliferating BIB012 and it is expected to consume up to 14% of the worldwide energy consumption by the end of 2020 BIB010 , BIB013 . This necessitates an effort and need to reduce the energy consumption in the networks. SDN platform is capable of providing high performance along with energy efficiency and network security. However, the energy efficiency methods have to be implemented in SDN to control the inflating energy consumption while providing network security. The proper traffic management and implementation of sleep-awake mechanisms in SDN can reduce the overall power consumption of the network and thus the energy bills BIB009 -  . Although there are related survey papers BIB006 ,  , BIB003 , BIB004 -  which provide information about the SDN, more up to date activities of rapidly advancing research areas on SDN security and energy efficiency is to be brought to the research community. Furthermore, state-of-the-art literature does not provide recent advances on security threats/attacks and countermeasures in SDN by categorizing them in terms of their types and recent advances in energy management schemes in SDN. The aim of this survey paper is to provide the recent works towards the security aspects of SDN with a more focus on various security threats that are resolved by SDN and new threats that arise as a result of SDN implementation; and various strategies that are implemented to achieve energy efficiency in SDN. Further, we present various security threats that are resolved by SDN and new threats that arise as a result of SDN implementation. We also provide a survey on the different strategies that are implemented to achieve energy efficiency in the networks through SDN implementation. The main contributions of this paper include: • We present a detailed study on SDN security aspects by categorization them into two parts. The first part discusses the threats that can be resolved by the implementation of SDN and the second part discusses security threats because of SDN implementation along with their countermeasures. • We summarize security attacks and countermeasures in SDN in a tabular form for a side-by-side comparison. • We provide a survey on recent techniques to reduce energy consumption in SDN and present side-by-side comparison of different techniques for energy saving through SDN. • We present a discussion of research challenges, open problems and recommendations for SDN that are needed to be addressed to realize its full potential. The organization of the paper is as follows. Section II discusses about the background of SDN. Security and Energy Efficiency are presented in Sections III and IV respectively. Challenges in SDN are discussed in Section V. Finally, the conclusions are presented in Section VI.