Software Defined Networking Architecture, Security and Energy Efficiency: A Survey

IEEE Communications Surveys and Tutorials

Volumn 19, Issue 1, 2017, Pages 325-346

  Rawat, Danda B ^a   Reddy, Swetha R ^b  

^a Howard University   (United States)

^b GEORGIA SOUTHERN UNIVERSITY   (United States)

Author keywords

energy efficiency; network virtualization; OpenFlow network; SDN security; Software defined network

Indexed keywords

COST EFFECTIVENESS; ENERGY EFFICIENCY; NETWORK ARCHITECTURE; SOFTWARE DEFINED NETWORKING; SURVEYS; VIRTUAL REALITY; VIRTUALIZATION;

CENTRALIZED NETWORKS; NETWORK VIRTUALIZATION; OPENFLOW NETWORKS; OPERATING ENVIRONMENT; PROGRAMMABLE DEVICES; RESOURCE UTILIZATIONS; SDN SECURITY; SOFTWARE DEFINED NETWORKING (SDN);

NETWORK SECURITY;

EID: 85014098629     PISSN: None     EISSN: 1553877X     Source Type: Journal    
DOI: 10.1109/COMST.2016.2618874     Document Type: Review

References (188)

1. S. Jeschke, C. Brecher, H. Song, and D. B. Rawat, Industrial Internet of Things: Cyber-Manufacturing Systems. Cham, Switzerland: Springer, 2016.
2. D. B. Rawat, J. J. Rodrigues, and I. Stojmenović, Cyber-Physical Systems: From Theory to Practice. Boca Raton, FL, USA: CRC Press, 2015.
3. P. Goransson and C. Black, Software Defined Networks: A Comprehensive Approach. St. Louis, MO, USA: Elsevier, 2014.
4. N. McKeown, "Software-defined networking," INFOCOM Keynote Talk, vol. 17, no. 2, pp. 30-32, 2009.
5. T. D. Nadeau and K. Gray, SDN: Software Defined Networks. Sebastopol, CA, USA: O'Reilly Media, 2013.
6. F. Hu, Q. Hao, and K. Bao, "A survey on software-defined network and OpenFlow: From concept to implementation," IEEE Commun. Surveys Tuts., vol. 16, no. 4, pp. 2181-2206, 4th Quart., 2014.
7. D. Kreutz et al., "Software-defined networking: A comprehensive survey," Proc. IEEE, vol. 103, no. 1, pp. 14-76, Jan. 2015.
8. Open Networking Foundation. Accessed on May 8, 2016. [Online]. Available: https://www.opennetworking.org
9. Floodlight. Accessed on May 8, 2016. [Online]. Available: http://www.projectfloodlight.org/ floodlight
10. OpenDayLight. Accessed on May 8, 2016. [Online]. Available: https://www.opendaylight.org
11. N. McKeown et al. (2011). OpenFlow Switch Specification. Accessed on Aug. 1, 2016. [Online]. Available: https://www.opennetworking.org/ images/stories/downloads/sdn-resources/onf-specifications/openflow/ openflow-spec-v1.4.0.pdf
12. T. Xing, Z. Xiong, D. Huang, and D. Medhi, "SDNIPS: Enabling software-defined networking based intrusion prevention system in clouds," in Proc. 10th Int. Conf. Netw. Service Manag. (CNSM), Rio de Janeiro, Brazil, 2014, pp. 308-311.
13. O. Joldzic, Z. Djuric, and D. Vukovic, "Building a transparent intrusion detection and prevention system on SDN," Norsk informasjonssikkerhetskonferanse, vol. 7, no. 1, pp. 1-4, 2014.
14. S. A. Mehdi, J. Khalid, and S. A. Khayam, "Revisiting traffic anomaly detection using software defined networking," in Recent Advances in Intrusion Detection. Heidelberg, Germany: Springer, 2011, pp. 161-180.
15. S. Shin et al., "FRESCO: Modular composable security services for software-defined networks," in Proc. NDSS, San Diego, CA, USA, 2013, pp. 1-16.
16. S. Scott-Hayward, G. O'Callaghan, and S. Sezer, "SDN security: A survey," in Proc. IEEE SDN Future Netw. Services (SDN4FNS), Trento, Italy, 2013, pp. 1-7.
17. S. Shin, V. Yegneswaran, P. Porras, and G. Gu, "AVANT-GUARD: Scalable and vigilant switch flow management in software-defined networks," in Proc. ACM SIGSAC Conf. Comput. Commun. Security, Berlin, Germany, 2013, pp. 413-424.
18. D. B. Rawat and C. Bajracharya, Vehicular Cyber Physical Systems: Adaptive Connectivity and Security. Cham, Switzerland: Springer, 2016.
19. D. B. Rawat and C. Bajracharya, "Software defined networking for reducing energy consumption and carbon emission," in Proc. IEEE SoutheastCon, Norfolk, VA, USA, 2016, pp. 1-2.
20. E. Gelenbe and Y. Caseau, "The impact of information technology on energy consumption and carbon emissions," Ubiquity, vol. 2015, p. 1, Jun. 2015.
21. D. B. Rawat and S. Reddy, "Recent advances on software defined wireless networking," in Proc. IEEE SoutheastCon, Norfolk, VA, USA, 2016, pp. 1-8.
22. R. Wang et al., "Energy-aware routing algorithms in software-defined networks," in Proc. IEEE 15th Int. Symp. A World Wireless Mobile Multimedia Netw. (WoWMoM), Sydney, NSW, Australia, 2014, pp. 1-6.
23. B. Yan, J. Zhou, J. Wu, and Y. Zhao, "Poster: SDN based energy management system for optical access network," in Proc. 9th Int. Conf. Commun. Netw. China (CHINACOM), Maoming, China, 2014, pp. 658-659.
24. B. B. Bista, A. Fukushi, T. Takata, and D. B. Rawat, "Reducing energy consumption in wired OpenFlow-based networks," Int. J. Control Autom., vol. 7, no. 6, pp. 401-412, 2014.
25. B. B. Bista, M. Takanohashi, T. Takata, and D. B. Rawat, "A power saving scheme for open flow network," J. Clean Energy Technol., vol. 1, no. 4, pp. 276-280, 2013.
26. K. Dhamecha and B. Trivedi, "SDN issues - A survey," Int. J. Comput. Appl., vol. 73, no. 18, pp. 30-35, 2013.
27. S. Scott-Hayward, S. Natarajan, and S. Sezer, "A survey of security in software defined networks," IEEE Commun. Surveys Tuts., vol. 18, no. 1, pp. 623-654, 1st Quart., 2016.
28. I. Alsmadi and D. Xu, "Security of software defined networks: A survey," Comput. Security, vol. 53, pp. 79-108, Sep. 2015.
29. W. Li, W. Meng, and L. F. Kwok, "A survey on OpenFlow-based software defined networks: Security challenges and countermeasures," J. Netw. Comput. Appl., vol. 68, pp. 126-139, Jun. 2016.
30. N. Feamster, H. Balakrishnan, J. Rexford, A. Shaikh, and J. van Der Merwe, "The case for separating routing from routers," in Proc. ACM SIGCOMM Workshop Future Directions Netw. Architect., Portland, OR, USA, 2004, pp. 5-12.
31. A. Greenberg et al., "A clean slate 4D approach to network control and management," ACM SIGCOMM Comput. Commun. Rev., vol. 35, no. 5, pp. 41-54, 2005.
32. M. Casado et al., "Ethane: Taking control of the enterprise," ACM SIGCOMM Comput. Commun. Rev., vol. 37, no. 4, pp. 1-12, 2007.
33. N. Feamster, J. Rexford, and E. Zegura, "The road to SDN: An intellectual history of programmable networks," ACM SIGCOMM Comput. Commun. Rev., vol. 44, no. 2, pp. 87-98, 2014.
34. S. Bhattacharjee, K. L. Calvert, and E. W. Zegura, An Architecture for Active Networking. New York, NY, USA: Springer, 1997.
35. D. L. Tennenhouse and D. J. Wetherall, "Towards an active network architecture," in Proc. DARPA Act. Netw. Conf. Expo., San Francisco, CA, USA, 2002, pp. 2-15.
36. D. J. Wetherall, J. V. Guttag, and D. L. Tennenhouse, "ANTS: A toolkit for building and dynamically deploying network protocols," in Proc. IEEE Open Architect. Netw. Program., San Francisco, CA, USA, 1998, pp. 117-129.
37. J. E. van der Merwe, S. Rooney, L. Leslie, and S. Crosby, "The tempest - a practical framework for network programmability," IEEE Netw., vol. 12, no. 3, pp. 20-28, May/Jun. 1998.
38. A. Bavier, N. Feamster, M. Huang, L. Peterson, and J. Rexford, "In VINI veritas: Realistic and controlled network experimentation," ACM SIGCOMM Comput. Commun. Rev., vol. 36, no. 4, pp. 3-14, 2006.
39. D. S. Alexander et al., "The SwitchWare active network architecture," IEEE Netw., vol. 12, no. 3, pp. 29-36, May/Jun. 1998.
40. N. McKeown et al., "OpenFlow: Enabling innovation in campus networks," ACM SIGCOMM Comput. Commun. Rev., vol. 38, no. 2, pp. 69-74, 2008.
41. W. Stallings, "Software-defined networks and OpenFlow," Internet Protocol J., vol. 16, no. 1, pp. 1-6, 2013.
42. SDN-Ready White Box Data Center. Accessed on May 8, 2016. [Online]. Available: http://www.pica8.com/open-networking/sdn-readywhite-box-data-center.php
43. A. Voellmy and P. Hudak, "Nettle: Taking the sting out of programming network routers," in Practical Aspects of Declarative Languages. Heidelberg, Germany: Springer, 2011, pp. 235-249.
44. N. Gude et al., "NOX: Towards an operating system for networks," ACM SIGCOMM Comput. Commun. Rev., vol. 38, no. 3, pp. 105-110, 2008.
45. A. Voellmy, H. Kim, and N. Feamster, "Procera: A language for highlevel reactive network control," in Proc. 1st Workshop Hot Topics Softw. Defined Netw., Helsinki, Finland, 2012, pp. 43-48.
46. Defining Openness for Open SDN and NFV. Accessed on Nov. 16, 2015. [Online]. Available: https://www.sdxcentral.com/articles/ featured/defining-open-sdn-nfv-a-primer-network-operators/2014/07/
47. S. Gutz, A. Story, C. Schlesinger, and N. Foster, "Splendid isolation: A slice abstraction for software-defined networks," in Proc. 1st Workshop Hot Topics Softw. Defined Netw., Helsinki, Finland, 2012, pp. 79-84.
48. M. Reitblatt, N. Foster, J. Rexford, and D. Walker, "Consistent updates for software-defined networks: Change you can believe in!" in Proc. 10th ACM Workshop Hot Topics Netw., Cambridge, MA, USA, 2011, p. 7.
49. C. Monsanto, J. Reich, N. Foster, J. Rexford, and D. Walker, "Composing software defined networks," in Proc. NSDI, Lombard, IL, USA, 2013, pp. 1-13.
50. C. Liang and F. R. Yu, "Wireless network virtualization: A survey, some research issues and challenges," IEEE Commun. Surveys Tuts., vol. 17, no. 1, pp. 358-380, 1st Quart., 2015.
51. K. Barr et al., "The VMware mobile virtualization platform: Is that a hypervisor in your pocket?" ACM SIGOPS Oper. Syst. Rev., vol. 44, no. 4, pp. 124-135, 2010.
52. C. Dixon et al., "Software defined networking to support the software defined environment," IBM J. Res. Develop., vol. 58, nos. 2-3, pp. 1-14, Mar./May 2014.
53. R. Sherwood et al., "FlowVisor: A network virtualization layer," OpenFlow Switch Consortium, Stanford Univ., Stanford, CA, USA, Tech. Rep., 2009, accessed on Aug. 1, 2016. [Online]. Available: http://archive.openflow.org/downloads/technicalreports/openflow-tr-2009-1-flowvisor.pdf
54. E. Salvadori, R. D. Corin, A. Broglio, and M. Gerola, "Generalizing virtual network topologies in OpenFlow-based networks," in Proc. IEEE Glob. Telecommun. Conf. (GLOBECOM), Houston, TX, USA, 2011, pp. 1-6.
55. Z. Bozakov and P. Papadimitriou, "AutoSlice: Automated and scalable slicing for software-defined networks," in Proc. ACM Conf. CoNEXT Student Workshop, Nice, France, 2012, pp. 3-4.
56. P. Skoldstrom and W. John, "Implementation and evaluation of a carrier-grade OpenFlow virtualization scheme," in Proc. 2nd Eur. Workshop Softw. Defined Netw. (EWSDN), Berlin, Germany, 2013, pp. 75-80.
57. P. Lin, J. Bi, and H. Hu, "VCP: A virtualization cloud platform for SDN intra-domain production network," in Proc. 20th IEEE Int. Conf. Netw. Protocols (ICNP), Austin, TX, USA, 2012, pp. 1-2.
58. D. Drutskoy, E. Keller, and J. Rexford, "Scalable network virtualization in software-defined networks," IEEE Internet Comput., vol. 17, no. 2, pp. 20-27, Mar./Apr. 2013.
59. J. Reich, C. Monsanto, N. Foster, J. Rexford, and D. Walker, "Modular SDN programming with pyretic," USENIX Tech. Rep., 2013, accessed on Aug. 1, 2016. [Online]. Available: https://www.cs.princeton.edu/?jrex/papers/pyretic13.pdf
60. A. Blenk, A. Basta, and W. Kellerer, "HyperFlex: An SDN virtualization architecture with flexible hypervisor function allocation," in Proc. IFIP/IEEE IM, Ottawa, ON, Canada, 2015, pp. 397-405.
61. L. Velasco, A. Asensio, J. L. Berral, A. Castro, and V. López, "Towards a carrier SDN: An example for elastic inter-datacenter connectivity," Opt. Exp., vol. 22, no. 1, pp. 55-61, 2014.
62. V. Pandey, "Towards widespread SDN adoption: Need for synergy between photonics and SDN within the data center," in Proc. IEEE Photon. Soc. Summer Topical Meeting Series, Waikoloa, HI, USA, 2013, pp. 227-228.
63. J. Kempf, Y. Zhang, R. Mishra, and N. Beheshti, "Zeppelin - A third generation data center network virtualization technology based on SDN and MPLS," in Proc. IEEE 2nd Int. Conf. Cloud Netw. (CloudNet), San Francisco, CA, USA, 2013, pp. 1-9.
64. S. Jain et al., "B4: Experience with a globally-deployed software defined WAN," ACM SIGCOMM Comput. Commun. Rev., vol. 43, no. 4, pp. 3-14, 2013.
65. I. F. Akyildiz, A. Lee, P. Wang, M. Luo, and W. Chou, "A roadmap for traffic engineering in SDN-OpenFlow networks," Comput. Netw., vol. 71, pp. 1-30, Oct. 2014.
66. J. Gubbi, R. Buyya, S. Marusic, and M. Palaniswami, "Internet of Things (IoT): A vision, architectural elements, and future directions," Future Gener. Comput. Syst., vol. 29, no. 7, pp. 1645-1660, 2013.
67. A. Gupta et al., "SDX: A software defined Internet exchange," in Proc. ACM Conf. SIGCOMM, Chicago, IL, USA, 2014, pp. 551-562.
68. V. Kotronis, X. Dimitropoulos, and B. Ager, "Outsourcing the routing control logic: Better Internet routing based on SDN principles," in Proc. 11th ACM Workshop Hot Topics Netw., Redmond, WA, USA, 2012, pp. 55-60.
69. J. Costa-Requena, "SDN integration in LTE mobile backhaul networks," in Proc. Int. Conf. Inf. Netw. (ICOIN), Phuket, Thailand, 2014, pp. 264-269.
70. P. Berthou, "Leveraging SDN for the 5G networks," in Software Defined Mobile Networks (SDMN): Beyond LTE Network Architecture. Hoboken, NJ, USA: Wiley, 2015, pp. 61-80.
71. D. B. Rawat, S. Shetty, and C. Xin, "Stackelberg-game-based dynamic spectrum access in heterogeneous wireless systems," IEEE Syst. J., vol. 10, no. 4, 2016.
72. J. Sánchez, I. M. B. Yahia, N. Crespi, T. Rasheed, and D. Siracusa, "Softwarized 5G networks resiliency with self-healing," in Proc. 1st Int. Conf. 5G Ubiquitous Connectivity (5GU), 2014, pp. 229-233.
73. A. Gember, C. Dragga, and A. Akella, "ECOS: Leveraging softwaredefined networks to support mobile application offloading," in Proc. 8th ACM/IEEE Symp. Architect. Netw. Commun. Syst., Austin, TX, USA, 2012, pp. 199-210.
74. J. Lee et al., "meSDN: Mobile extension of SDN," in Proc. 5th Int. Workshop Mobile Cloud Comput. Services, Bretton Woods, NH, USA, 2014, pp. 7-14.
75. K.-K. Yap et al., "The Stanford openroads deployment," in Proc. 4th ACM Int. Workshop Exp. Eval. Characterization, Beijing, China, 2009, pp. 59-66.
76. R. Muñoz, R. Vilalta, R. Casellas, and R. Martínez, "SDN orchestration and virtualization of heterogeneous multi-domain and multi-layer transport networks: The STRAUSS approach," in Proc. IEEE Int. Black Sea Conf. Commun. Netw. (BlackSeaCom), Constanta, Romania, 2015, pp. 142-146.
77. T. Szyrkowiec et al., "Demonstration of SDN based optical network virtualization and multidomain service orchestration," in Proc. 3rd Eur. Workshop Softw. Defined Netw. (EWSDN), Budapest, Hungary, 2014, pp. 137-138.
78. Q. Qi, W. Wang, X. Gong, and X. Que, "A SDN-based network virtualization architecture with autonomie management," in Proc. Globecom Workshops (GC Wkshps), Austin, TX, USA, 2014, pp. 178-182.
79. M. S. Malik, M. Montanari, J. H. Huh, R. B. Bobba, and R. H. Campbell, "Towards SDN enabled network control delegation in clouds," in Proc. 43rd Annu. IEEE/IFIP Int. Conf. Depend. Syst. Netw. (DSN), Budapest, Hungary, 2013, pp. 1-6.
80. R. D. Corin, M. Gerola, R. Riggio, F. De Pellegrini, and E. Salvadori, "VeRTIGO: Network virtualization and beyond," in Proc. Eur. Workshop Softw. Defined Netw. (EWSDN), Darmstadt, Germany, 2012, pp. 24-29.
81. D. B. Rawat, M. Song, and S. Shetty, Dynamic Spectrum Access for Wireless Networks. Cham, Switzerland: Springer, 2015.
82. D. B. Rawat and N. Sharma, "Wireless network virtualization for enhancing security: Status, challenges and perspectives," in Proc. IEEE SoutheastCon, Norfolk, VA, USA, 2016, pp. 1-8.
83. A. Gudipati, D. Perry, L. E. Li, and S. Katti, "SoftRAN: Software defined radio access network," in Proc. 2nd ACM SIGCOMM Workshop Hot Topics Softw. Defined Netw., Hong Kong, 2013, pp. 25-30.
84. M. Peng, C. Wang, V. Lau, and H. V. Poor, "Fronthaul-constrained cloud radio access networks: Insights and challenges," IEEE Wireless Commun., vol. 22, no. 2, pp. 152-160, Apr. 2015.
85. M. Y. Arslan, K. Sundaresan, and S. Rangarajan, "Software-defined networking in cellular radio access networks: Potential and challenges," IEEE Commun. Mag., vol. 53, no. 1, pp. 150-156, Jan. 2015.
86. M. Yang et al., "OpenRAN: A software-defined ran architecture via virtualization," ACM SIGCOMM Comput. Commun. Rev., vol. 43, no. 4, pp. 549-550, 2013.
87. A. P. Bianzino, C. Chaudet, D. Rossi, and J.-L. Rougier, "A survey of green networking research," IEEE Commun. Surveys Tuts., vol. 14, no. 1, pp. 3-20, 1st Quart., 2012.
88. D. Staessens, S. Sharma, D. Colle, M. Pickavet, and P. Demeester, "Software defined networking: Meeting carrier grade requirements," in Proc. 18th IEEE Workshop Local Metropol. Area Netw. (LANMAN), Chapel Hill, NC, USA, 2011, pp. 1-6.
89. B. Heller et al., "ElasticTree: Saving energy in data center networks," in Proc. NSDI, vol. 10. San Jose, CA, USA, 2010, pp. 249-264.
90. L. Schehlmann, S. Abt, and H. Baier, "Blessing or curse? Revisiting security aspects of software-defined networking," in Proc. 10th Int. Conf. Netw. Service Manag. (CNSM), Rio de Janeiro, Brazil, 2014, pp. 382-387.
91. S. Shin and G. Gu, "CloudWatcher: Network security monitoring using OpenFlow in dynamic cloud networks (or: How to provide security monitoring as a service in clouds?)," in Proc. 20th IEEE Int. Conf. Netw. Protocols (ICNP), Austin, TX, USA, 2012, pp. 1-6.
92. P.-W. Chi, C.-T. Kuo, H.-M. Ruan, S.-J. Chen, and C.-L. Lei, "An AMI threat detection mechanism based on SDN networks," in Proc. SECURWARE, Lisbon, Portugal, 2014, pp. 208-211.
93. J. François and O. Festor, "Anomaly traceback using software defined networking," in Proc. Nat. Conf. Parallel Comput. Technol. (PARCOMPTECH), Atlanta, GA, USA, 2015, pp. 203-208.
94. R. Jin and B. Wang, "Malware detection for mobile devices using software-defined networking," in Proc. 2nd GENI Res. Educ. Exp. Workshop (GREE), Salt Lake City, UT, USA, 2013, pp. 81-88.
95. K. Giotis, G. Androulidakis, and V. Maglaris, "Leveraging SDN for efficient anomaly detection and mitigation on legacy networks," in Proc. 3rd Eur. Workshop Softw. Defined Netw. (EWSDN), Budapest, Hungary, 2014, pp. 85-90.
96. S. Lim, J.-I. Ha, H. Kim, Y. Kim, and S. Yang, "A SDN-oriented DDoS blocking scheme for botnet-based attacks," in Proc. 6th Int. Conf. Ubiquitous Future Netw. (ICUFN), Shanghai, China, 2014, pp. 63-68.
97. R. Sahay, G. Blanc, Z. Zhang, and H. Debar, "Towards autonomic DDoS mitigation using software defined networking," in Proc. NDSS Workshop Security Emerg. Netw. Technol. (SENT), San Diego, CA, USA, 2015, pp. 1-7.
98. C.-J. Chung, P. Khatkar, T. Xing, J. Lee, and D. Huang, "NICE: Network intrusion detection and countermeasure selection in virtual network systems," IEEE Trans. Depend. Secure Comput., vol. 10, no. 4, pp. 198-211, Jul./Aug. 2013.
99. A. G. P. Lobato, U. da Rocha Figueiredo, and O. C. M. B. Duarte, "An architecture for intrusion prevention using software defined networks," in Proc. WNetVirt, Rio de Janeiro, Brazil, 2013, p. 1.
100. M. Roesch et al., "Snort: Lightweight intrusion detection for networks," in Proc. LISA, vol. 99. Seattle, WA, USA, 1999, pp. 229-238.
101. Q. Yan and F. R. Yu, "Distributed denial of service attacks in softwaredefined networking with cloud computing," IEEE Commun. Mag., vol. 53, no. 4, pp. 52-59, Apr. 2015.
102. M. Abliz, "Internet denial of service attacks and defense mechanisms," Dept. Comput. Sci., Univ. Pittsburgh, Pittsburgh, PA, USA, Tech. Rep. TR-11-178, 2011.
103. D. Kreutz, F. M. V. Ramos, and P. Verissimo, "Towards secure and dependable software-defined networks," in Proc. 2nd ACM SIGCOMM Workshop Hot Topics Softw. Defined Netw., Hong Kong, 2013, pp. 55-60.
104. J. H. Jafarian, E. Al-Shaer, and Q. Duan, "OpenFlow random host mutation: Transparent moving target defense using software defined networking," in Proc. 1st Workshop Hot Topics Softw. Defined Netw., Helsinki, Finland, 2012, pp. 127-132.
105. S. Hong, L. Xu, H. Wang, and G. Gu, "Poisoning network visibility in software-defined networks: New attacks and countermeasures," in Proc. NDSS, 2015, pp. 1-15.
106. X. Du, M.-Z. Wang, X. Zhang, and L. Zhu, "Traffic-based malicious switch detection in SDN," Int. J. Security Appl., vol. 8, no. 5, pp. 119-130, 2014.
107. M. Dhawan, R. Poddar, K. Mahajan, and V. Mann, "SPHINX: Detecting security attacks in software-defined networks," in Proc. Netw. Distrib. Syst. Security (NDSS) Symp., San Diego, CA, USA, 2015, pp. 1-15.
108. H. Hu, W. Han, G.-J. Ahn, and Z. Zhao, "FLOWGUARD: Building robust firewalls for software-defined networks," in Proc. 3rd Workshop Hot Topics Softw. Defined Netw., Chicago, IL, USA, 2014, pp. 97-102.
109. S. K. Fayazbakhsh, V. Sekar, M. Yu, and J. C. Mogul, "FlowTags: Enforcing network-wide policies in the presence of dynamic middlebox actions," in Proc. 2nd ACM SIGCOMM Workshop Hot Topics Softw. Defined Netw., Hong Kong, 2013, pp. 19-24.
110. Z. Qazi et al., "Practical and incremental convergence between SDN and middleboxes," in Proc. Open Netw. Summit, Santa Clara, CA, USA, 2013, pp. 1-15.
111. B. Anwer, T. Benson, N. Feamster, D. Levin, and J. Rexford, "A slick control plane for network middleboxes," in Proc. 2nd ACM SIGCOMM Workshop Hot Topics Softw. Defined Netw., Hong Kong, 2013, pp. 147-148.
112. M. Canini, D. Venzano, P. Perešíni, D. Kostić, and J. Rexford, "A NICE way to test OpenFlow applications," in Proc. NSDI, vol. 12. San Jose, CA, USA, 2012, pp. 127-140.
113. P. Porras et al., "A security enforcement kernel for OpenFlow networks," in Proc. 1st Workshop Hot Topics Softw. Defined Netw., Helsinki, Finland, 2012, pp. 121-126.
114. S. E. Schechter, J. Jung, and A. W. Berger, "Fast detection of scanning worm infections," in Recent Advances in Intrusion Detection. Heidelberg, Germany: Springer, 2004, pp. 59-81.
115. J. Twycross and M. M. Williamson, "Implementing and testing a virus throttle," in Proc. USENIX Security, 2003, p. 20.
116. Y. Gu, A. McCallum, and D. Towsley, "Detecting anomalies in network traffic using maximum entropy estimation," in Proc. 5th ACM SIGCOMM Conf. Internet Meas., Berkeley, CA, USA, 2005, p. 32.
117. M. V. Mahoney, "Network traffic anomaly detection based on packet bytes," in Proc. ACM Symp. Appl. Comput., Melbourne, FL, USA, 2003, pp. 346-350.
118. S. M. Mousavi and M. St-Hilaire, "Early detection of DDoS attacks against SDN controllers," in Proc. Int. Conf. Comput. Netw. Commun. (ICNC), Garden Grove, CA, USA, 2015, pp. 77-81.
119. R. Braga, E. Mota, and A. Passito, "Lightweight DDoS flooding attack detection using NOX/OpenFlow," in Proc. IEEE 35th Conf. Local Comput. Netw. (LCN), Denver, CO, USA, 2010, pp. 408-415.
120. C. Schlesinger, A. Story, S. Gutz, N. Foster, and D. Walker, "Splendid isolation: Language-based security for software-defined networks," in Proc. Workshop Hot Topics Softw. Defined Netw., Helsinki, Finland, 2012, pp. 79-84.
121. M. Ambrosin, M. Conti, F. De Gaspari, and R. Poovendran, "LinesWitch: Efficiently managing switch flow in software-defined networking while effectively tackling DoS attacks," in Proc. 10th ACM Symp. Inf. Comput. Commun. Security, Singapore, 2015, pp. 639-644.
122. J. M. Dover. A Denial of Service Attack Against the Open Floodlight SDN Controller. Accessed on Aug. 1, 2016. [Online]. Available: http://dovernetworks.com/wp-content/uploads/2013/12/OpenFlood light-12302013.pdf
123. J. Mirkovic and P. Reiher, "A taxonomy of DDoS attack and DDoS defense mechanisms," ACM SIGCOMM Comput. Commun. Rev., vol. 34, no. 2, pp. 39-53, 2004.
124. M. Drašar, M. Vizváry, and J. Vykopal, "Similarity as a central approach to flow-based anomaly detection," Int. J. Netw. Manag., vol. 24, no. 4, pp. 318-336, 2014.
125. A.-S. Kim, H.-J. Kong, S.-C. Hong, S.-H. Chung, and J. W. Hong, "A flow-based method for abnormal network traffic detection," in Proc. IEEE/IFIP Netw. Oper. Manag. Symp., vol. 1. Seoul, South Korea, 2004, pp. 599-612.
126. P. Casas, J. Mazel, and P. Owezarski, "Unsupervised network intrusion detection systems: Detecting the unknown without knowledge," Comput. Commun., vol. 35, no. 7, pp. 772-783, 2012.
127. Z. Li, Y. Gao, and Y. Chen, "HiFIND: A high-speed flow-level intrusion detection approach with DoS resiliency," Comput. Netw., vol. 54, no. 8, pp. 1282-1299, 2010.
128. B. Wang, Y. Zheng, W. Lou, and Y. T. Hou, "DDoS attack protection in the era of cloud computing and software-defined networking," Comput. Netw., vol. 81, pp. 308-319, Apr. 2015.
129. R. Kloti, V. Kotronis, and P. Smith, "OpenFlow: A security analysis," in Proc. 21st IEEE Int. Conf. Netw. Protocols (ICNP), Göttingen, Germany, 2013, pp. 1-6.
130. N. Handigol, B. Heller, V. Jeyakumar, D. Maziéres, and N. McKeown, "Where is the debugger for my software-defined network?" in Proc. 1st Workshop Hot Topics Softw. Defined Netw., Helsinki, Finland, 2012, pp. 55-60.
131. E. Kohler, R. Morris, B. Chen, J. Jannotti, and M. F. Kaashoek, "The click modular router," ACM Trans. Comput. Syst., vol. 18, no. 3, pp. 263-297, 2000.
132. K. Benton, L. J. Camp, and C. Small, "OpenFlow vulnerability assessment," in Proc. 2nd ACM SIGCOMM Workshop Hot Topics Softw. Defined Netw., Hong Kong, 2013, pp. 151-152.
133. A. Bates, K. Butler, A. Haeberlen, M. Sherr, and W. Zhou, "Let SDN be your eyes: Secure forensics in data center networks," in Proc. NDSS Workshop Security Emerg. Netw. Technol. (SENT), 2014, pp. 1-7.
134. M. Suh, S. H. Park, B. Lee, and S. Yang, "Building firewall over the software-defined network controller," in Proc. 16th Int. Conf. Adv. Commun. Technol. (ICACT), 2014, pp. 744-748.
135. W. P. de Jesus, D. A. da Silva, R. T. de Sousa, Jr., and F. V. L. da Frota, "Analysis of SDN contributions for cloud computing security," in Proc. IEEE/ACM 7th Int. Conf. Utility Cloud Comput. (UCC), London, U.K., 2014, pp. 922-927.
136. R. Buyya, A. Beloglazov, and J. Abawajy, "Energy-efficient management of data center resources for cloud computing: A vision, architectural elements, and open challenges," in Proc. Green Cloud, 2010, pp. 1-6.
137. B. G. Assefa and O. Ozkasap, "State-of-the-art energy efficiency approaches in software defined networking," in Proc. ICN, San Francisco, CA, USA, 2015, p. 268.
138. F. Kaup, S. Melnikowitsch, and D. Hausheer, "Measuring and modeling the power consumption of OpenFlow switches," in Proc. 10th Int. Conf. Netw. Service Manag. (CNSM), Rio de Janeiro, Brazil, 2014, pp. 181-186.
139. C. E. Hopps. (2000). Analysis of an Equal-Cost Multi-Path Algorithm. Accessed on Aug. 1, 2016. [Online]. Available: https://tools.ietf.org/html/rfc2992
140. M. Al-Fares, S. Radhakrishnan, B. Raghavan, N. Huang, and A. Vahdat, "Hedera: Dynamic flow scheduling for data center networks," in Proc. NSDI, vol. 10. San Jose, CA, USA, 2010, p. 19.
141. A. R. Curtis, W. Kim, and P. Yalagandula, "Mahout: Lowoverhead datacenter traffic management using end-host-based elephant detection," in Proc. IEEE INFOCOM, Shanghai, China, 2011, pp. 1629-1637.
142. A. R. Curtis et al., "DevoFlow: Scaling flow management for highperformance networks," ACM SIGCOMM Comput. Commun. Rev., vol. 41, no. 4, pp. 254-265, 2011.
143. M. Yu, J. Rexford, M. J. Freedman, and J. Wang, "Scalable flow-based networking with DIFANE," ACM SIGCOMM Comput. Commun. Rev., vol. 40, no. 4, pp. 351-362, 2010.
144. A. Tootoonchian and Y. Ganjali, "HyperFlow: A distributed control plane for OpenFlow," in Proc. Internet Netw. Manag. Conf. Res. Enterprise Netw., San Jose, CA, USA, 2010, p. 3.
145. Y. Hu, W. Wang, X. Gong, X. Que, and S. Cheng, "BalanceFlow: Controller load balancing for OpenFlow networks," in Proc. IEEE 2nd Int. Conf. Cloud Comput. Intell. Syst. (CCIS), vol. 2. Hangzhou, China, 2012, pp. 780-785.
146. S. H. Yeganeh and Y. Ganjali, "Kandoo: A framework for efficient and scalable offloading of control applications," in Proc. 1st Workshop Hot Topics Softw. Defined Netw., Helsinki, Finland, 2012, pp. 19-24.
147. Y. Guo, Z. Wang, X. Yin, X. Shi, and J. Wu, "Traffic engineering in SDN/OSPF hybrid network," in Proc. IEEE 22nd Int. Conf. Netw. Protocols (ICNP), Raleigh, NC, USA, 2014, pp. 563-568.
148. A. Chanda, C. Westphal, and D. Raychaudhuri, "Content based traffic engineering in software defined information centric networks," in Proc. IEEE Conf. Comput. Commun. Workshops (INFOCOM WKSHPS), Turin, Italy, 2013, pp. 357-362.
149. B. Puype, W. Vereecken, D. Colle, M. Pickavet, and P. Demeester, "Multilayer traffic engineering for energy efficiency," Photon. Netw. Commun., vol. 21, no. 2, pp. 127-140, 2011.
150. A. Ruiz-Rivera, K.-W. Chin, and S. Soh, "GreCo: An energy aware controller association algorithm for software defined networks," IEEE Commun. Lett., vol. 19, no. 4, pp. 541-544, Apr. 2015.
151. A. Tootoonchian, M. Ghobadi, and Y. Ganjali, "OpenTM: Traffic matrix estimator for OpenFlow networks," in Passive and Active Measurement. Heidelberg, Germany: Springer, 2010, pp. 201-210.
152. S. R. Chowdhury, M. F. Bari, R. Ahmed, and R. Boutaba, "PayLess: A low cost network monitoring framework for software defined networks," in Proc. IEEE Netw. Oper. Manag. Symp. (NOMS), Kraków, Poland, 2014, pp. 1-9.
153. C. Yu et al., "FlowSense: Monitoring network utilization with zero measurement cost," in Passive and Active Measurement. Heidelberg, Germany: Springer, 2013, pp. 31-41.
154. J. Suh, T. T. Kwon, C. Dixon, W. Felter, and J. Carter, "OpenSample: A low-latency, sampling-based measurement platform for SDN," in Proc. ICDCS, Madrid, Spain, 2014, pp. 1-10.
155. M. Yu, L. Jose, and R. Miao, "Software defined traffic measurement with OpenSketch," in Proc. NSDI, vol. 13. Lombard, IL, USA, 2013, pp. 29-42.
156. T. Benson, A. Anand, A. Akella, and M. Zhang, "MicroTE: Fine grained traffic engineering for data centers," in Proc. 7th Conf. Emerg. Netw. Exp. Technol., Tokyo, Japan, 2011, p. 8.
157. P. Kazemian et al., "Real time network policy checking using header space analysis," in Proc. NSDI, Lombard, IL, USA, 2013, pp. 99-111.
158. R. McGeer, "A safe, efficient update protocol for OpenFlow networks," in Proc. 1st Workshop Hot Topics Softw. Defined Netw., Helsinki, Finland, 2012, pp. 61-66.
159. T. Mizrahi and Y. Moses, "Time-based updates in software defined networks," in Proc. 2nd ACM SIGCOMM Workshop Hot Topics Softw. Defined Netw., Hong Kong, 2013, pp. 163-164.
160. C. R. Meiners, A. X. Liu, and E. Torng, "TCAM Razor: A systematic approach towards minimizing packet classifiers in TCAMs," in Proc. IEEE Int. Conf. Netw. Protocols (ICNP), Beijing, China, 2007, pp. 266-275.
161. K. Kannan and S. Banerjee, "Compact TCAM: Flow entry compaction in TCAM for power aware SDN," in Distributed Computing and Networking. Heidelberg, Germany: Springer, 2013, pp. 439-444.
162. C. R. Meiners, A. X. Liu, and E. Torng, "Bit Weaving: A non-prefix approach to compressing packet classifiers in TCAMs," IEEE/ACM Trans. Netw., vol. 20, no. 2, pp. 488-500, Apr. 2012.
163. Y. Kanizo, D. Hay, and I. Keslassy, "Palette: Distributing tables in software-defined networks," in Proc. IEEE INFOCOM, Turin, Italy, 2013, pp. 545-549.
164. H. Huang, P. Li, S. Guo, and B. Ye, "The joint optimization of rules allocation and traffic engineering in software defined network," in Proc. IEEE 22nd Int. Symp. Qual. Service (IWQoS), Hong Kong, 2014, pp. 141-146.
165. F. Giroire, J. Moulierac, and T. K. Phan, "Optimizing rule placement in software-defined networks for energy-aware routing," in Proc. IEEE Glob. Commun. Conf. (GLOBECOM), Austin, TX, USA, 2014, pp. 2523-2529.
166. M. Dong, H. Li, K. Ota, and J. Xiao, "Rule caching in SDN-enabled mobile access networks," IEEE Netw., vol. 29, no. 4, pp. 40-45, Jul./Aug. 2015.
167. N. Katta, O. Alipourfard, J. Rexford, and D. Walker, "Rulecaching algorithms for software-defined networks," Tech. Rep., 2014, accessed on Aug. 1, 2016. [Online]. Available: http://www.cs.princeton.edu/~nkatta/papers/cacheflow-long14.pdf
168. M. Jarschel and R. Pries, "An OpenFlow-based energy-efficient data center approach," in Proc. ACM SIGCOMM Conf. Appl. Technol. Architect. Protocols Comput. Commun., Helsinki, Finland, 2012, pp. 87-88.
169. D. Kakadia and V. Varma. (2012). Energy Efficient Data Center Networks - A SDN Based Approach. Accessed on Aug. 1, 2016. [Online]. Available: http://goo.gl/6o5MBj
170. J. M. Wang, Y. Wang, X. Dai, and B. Bensaou, "SDN-based multi-class QoS-guaranteed inter-data center traffic management," in Proc. IEEE 3rd Int. Conf. Cloud Netw. (CloudNet), 2014, pp. 401-406.
171. A. Sallahi and M. St-Hilaire, "Optimal model for the controller placement problem in software defined networks," IEEE Commun. Lett., vol. 19, no. 1, pp. 30-33, Jan. 2015.
172. S.-H. Wang, "Virtual machine placement for energy efficiency and QoS in software defined datacenter networks," Ph.D. dissertation, College Elect. Comput. Eng., Nat. Chiao Tung Univ., Hsinchu, Taiwan, 2013.
173. D. Li, Y. Shang, and C. Chen, "Software defined green data center network with exclusive routing," in Proc. IEEE INFOCOM, Toronto, ON, Canada, 2014, pp. 1743-1751.
174. A. Markiewicz, P. N. Tran, and A. Timm-Giel, "Energy consumption optimization for software defined networks considering dynamic traffic," in Proc. IEEE 3rd Int. Conf. Cloud Netw. (CloudNet), 2014, pp. 155-160.
175. J. Naous, D. Erickson, G. A. Covington, G. Appenzeller, and N. McKeown, "Implementing an OpenFlow switch on the NetFPGA platform," in Proc. 4th ACM/IEEE Symp. Architect. Netw. Commun. Syst., San Jose, CA, USA, 2008, pp. 1-9.
176. T. H. Vu, V. C. Luc, N. T. Quan, N. H. Thanh, and P. N. Nam, "Energy saving for OpenFlow switch on the NetFPGA platform based on queue engineering," SpringerPlus, vol. 4, no. 1, p. 64, 2015.
177. Y. Hua, X. Liu, and D. Feng, "Smart in-network deduplication for storage-aware SDN," ACM SIGCOMM Comput. Commun. Rev., vol. 43, no. 4, pp. 509-510, 2013.
178. S. Keshav, An Engineering Approach to Computer Networking: ATM Networks, the Internet, and the Telephone Network, vol. 11997. Reading, MA, USA: Addison-Wesley, 1997.
179. D. Awduche, A. Chiu, A. Elwalid, I. Widjaja, and X. Xiao, "Overview and principles of Internet traffic engineering," Tech. Rep., 2002, accessed on Aug. 1, 2016. [Online]. Available: https://tools.ietf.org/html/rfc3272
180. B. Fortz, J. Rexford, and M. Thorup, "Traffic engineering with traditional IP routing protocols," IEEE Commun. Mag., vol. 40, no. 10, pp. 118-124, Oct. 2002.
181. D. O. Awduche and B. Jabbari, "Internet traffic engineering using multi-protocol label switching (MPLS)," Comput. Netw., vol. 40, no. 1, pp. 111-129, 2002.
182. N. Katta, O. Alipourfard, J. Rexford, and D. Walker, "Infinite CacheFlow in software-defined networks," in Proc. 3rd Workshop Hot Topics Softw. Defined Netw., Chicago, IL, USA, 2014, pp. 175-180.
183. E. Spitznagel, D. Taylor, and J. Turner, "Packet classification using extended TCAMs," in Proc. 11th IEEE Int. Conf. Netw. Protocols, Atlanta, GA, USA, 2003, pp. 120-131.
184. X. Jin et al., "Dynamic scheduling of network updates," in Proc. ACM Conf. SIGCOMM, Chicago, IL, USA, 2014, pp. 539-550.
185. S. Sezer et al., "Are we ready for SDN? Implementation challenges for software-defined networks," IEEE Commun. Mag., vol. 51, no. 7, pp. 36-43, Jul. 2013.
186. Á. L. V. Caraguay, A. B. Peral, L. I. B. López, and L. J. G. Villalba, "SDN: Evolution and opportunities in the development IoT applications," Int. J. Distrib. Sens. Netw., vol. 2014, 2014, Art. no. 735142.
187. Z. Qin, G. Denker, C. Giannelli, P. Bellavista, and N. Venkatasubramanian, "A software defined networking architecture for the Internet-of-Things," in Proc. IEEE Netw. Oper. Manag. Symp. (NOMS), Kraków, Poland, 2014, pp. 1-9.
188. N. Dorsch, F. Kurtz, H. Georg, C. Hägerling, and C. Wietfeld, "Software-defined networking for smart grid communications: Applications, challenges and advantages," in Proc. IEEE Int. Conf. Smart Grid Commun. (SmartGridComm), Venice, Italy, 2014, pp. 422-427.