Innovations and Interdisciplinary Solutions for Underserved Areas. Third EAI International Conference, InterSol 2019, Cairo, Egypt, February 14–15, 2019, Proceedings

Research Article

S-SDS: A Framework for Security Deployment as Service in Software Defined Networks

Download
134 downloads
  • @INPROCEEDINGS{10.1007/978-3-030-34863-2_9,
        author={Adama Coly and Ma\~{n}ssa Mbaye},
        title={S-SDS: A Framework for Security Deployment as Service in Software Defined Networks},
        proceedings={Innovations and Interdisciplinary Solutions for Underserved Areas. Third EAI International Conference, InterSol 2019, Cairo, Egypt, February 14--15, 2019, Proceedings},
        proceedings_a={INTERSOL},
        year={2019},
        month={11},
        keywords={SDS SDN Control plane Data plane IPsec OpenFlow Security service deployment Network Security Floodlight Mininet},
        doi={10.1007/978-3-030-34863-2_9}
    }
    
  • Adama Coly
    Maïssa Mbaye
    Year: 2019
    S-SDS: A Framework for Security Deployment as Service in Software Defined Networks
    INTERSOL
    Springer
    DOI: 10.1007/978-3-030-34863-2_9
Adama Coly1,*, Maïssa Mbaye1,*
  • 1: Gaston Berger University
*Contact email: coly.adama@ugb.edu.sn, maissa.mbaye@ugb.edu.sn

Abstract

Software Defined Networking (SDN) is an emerging networking paradigm that addresses current network design limitations. It promotes centralized control of the network by clearly separating and . In one hand, Security in SDN is one of the most challenging research topics. In the other hand, deployment of security as service is one of the most cutting-edge topic. In this paper, we propose a general framework for security deployment as a service in SDN networks. As a case study we proposed extension of OpenFlow protocol for IPsec VPN set. We have evaluated this proposal using a real world testbed based on Mininet and Floodlight. Preliminary results show that our proposal can enable security service without drastically degrading performance in comparison to deploy security on endpoints of communications.