امنیت شبکه از طریق شبکه نرم‌افزاری تعریف شده (SDN) Enhancing Network Security through Software Defined Networking – SDN

I. INTRODUCTION Software Defined Networking (SDN) has quickly emerged as a new promising technology for future networks. With the separation of control plane from data plane thus enabling the easy addition of new, creative, powerful network functions/protocols, SDN has attracted significant attention from both academia and industry. In academia, since the publication of OpenFlow [33], which is a key component to realize the SDN concept, many research ideas based on SDN/OpenFlow have been proposed (and still go on) [35] [48] [6] [20] [26]. In industry, SDN is widely considered as the new paradigm for future networks, and many companies are deploying or plan to deploy such technology in order to strengthen their network architectures [24], reduce operational cost [19], and enable new network applications/functions [60]. The reason why many researchers and practitioners have interests in SDN is mainly because by decoupling the control logic from the closed, proprietary implementations of traditional network switch infrastructure, SDN enables us to design and distribute innovative flow handling and network control algorithms easily, and it helps us add much more intelligence and flexibility to the control plane. With the help of SDN, we can dynamically control network flows and monitor network status easily. For example, by employing SDN, we can easily implement a network load balancing function that is not easily and cheaply solved with existing techniques. These powerful and rich functions from SDN enable people to create new and creative network services or architectures. Some researchers propose a network virtualization service for a cloud network or a large-scale enterprise network [47] [37], and it has come into the spotlight due to its efficient resource management [17] [40]. In addition, a new wireless network architecture that can provide more robust wireless network services has been proposed based on SDN technology [38]. Besides these examples, there are many cases of employing SDN for a new service or a new architecture [35] [48] [6], and some have been already applied into real world network environments (e.g., Google data centers [24]).