Software Defined Networking (SDN) has revolutionized network architecture by separating the control plane from the data plane, offering enhanced flexibility, programmability, and centralized control. However, this paradigm shift introduces significant security concerns, particularly in the area of topology discovery, where threats such as topology poisoning, link fabrication, and host hijacking are prevalent due to the lack of standardization in SDN protocols and the dynamic nature network environments like virtual data centers and cloud infrastructures. This survey explores various security mechanisms proposed for topology discovery in SDN, with a focus on the OpenFlow protocol. It reviews key approaches designed to mitigate common vulnerabilities, including the use of authentication, encryption, and anomaly detection techniques. The survey highlights the trade-offs between security measures and network performance, analyzing their effectiveness in addressing topology-related threats while minimizing overhead. The findings suggest that while many solutions enhance SDN security, challenges such as resource consumption, latency, and packet processing overhead persist. Future research should aim to develop lightweight, scalable mechanisms that balance robust security with operational efficiency, ensuring optimal performance of SDN in dynamic, large-scale networks.
Software Defined Network, Topology Discovery, Link Layer Discovery Protocol (LLDP), OpenFlow
IRE Journals:
Ahmad Enesi Siyaka , Salisu Aliyu , Sahabi Yusuf Ali
"Securing Topology Discovery in Software Defined Networks: Trends, Gaps, and Future Directions" Iconic Research And Engineering Journals Volume 8 Issue 5 2024 Page 584-592
IEEE:
Ahmad Enesi Siyaka , Salisu Aliyu , Sahabi Yusuf Ali
"Securing Topology Discovery in Software Defined Networks: Trends, Gaps, and Future Directions" Iconic Research And Engineering Journals, 8(5)