Software-Defined Networking is an innovative architecture approach in the networking field. This technology allows networks to be centrally and intelligently managed by unified applications such as traffic classification and security management. Traditional networks’ static nature has a minimal capacity to meet organisations business requirements. Software-Defined Networks (SDNs) are the emerging architectures that address a range of networking challenges with new solutions. Nevertheless, these centralised and programmable techniques face various challenges and issues that require contemporary security solutions such as Intrusion Detection Systems. Recently, the majority of this type of security solution has been developed using Machine Learning techniques. Deep Learning algorithms have recently been used to provide more accuracy and efficiency. This paper presents a new detection approach based on Convolutional Neural Network (CNN). The experiments proved that the proposed model could be successfully implemented in a Software-Defined Network controller to detect various attacks with 100% accuracy, achieved a low degradation rate of 2.3% throughput and 1.8% latency when executed in a large-scale network.
In the evolving landscape of network architecture, Software-Defined Networking (SDN) stands out as a paradigm shift, introducing unparalleled flexibility and control over network resources. Despite its significant advantages in terms of efficiency and programmability, SDN introduces a spectrum of security vulnerabilities, primarily due to its inherent architecture that separates the control plane from the data plane. This separation, while facilitating dynamic network management, also exposes the network to a range of sophisticated cyber threats, including Distributed Denial of Service (DDoS) attacks, penetration attempts through SQL injections, and various forms of intrusion tactics aimed at exploiting both the centralised nature of SDN controllers and the open interfaces of its switches. This paper delves into the intricate security landscape of SDN, highlighting the critical vulnerabilities that plague this modern networking approach. By examining the nature and implications of prevalent network attacks such as DDoS, DoS, Probe, and SQL Injection, we shed light on the pressing need for robust intrusion detection systems (IDS) that are specifically tailored to the unique challenges of SDN environments. Our investigation reveals significant gaps in current research, particularly in the development of effective real-time traffic processing mechanisms and strategies to mitigate system overload, which are imperative for the deployment of resilient SDN architectures. This study contributes to the ongoing discourse on SDN security, offering a strategic blueprint for the development of sophisticated IDS solutions that can adapt to the evolving dynamics of network threats. Our findings underscore the importance of continual research and innovation in network security strategies to safeguard the future of Software-Defined Networking.
In Software-Defined Networks, the Intrusion Detection System is receiving growing attention, due to the expansion of the internet and cloud storage. This system is vital for institutions that use cloud services and have many users. Although the Intrusion Detection System offers several security features, its performance is lagging behind in large enterprise’s networks. Existing approaches are based on centralised processing and use many features to implement a protection system. Therefore, system overload and poor performance occur at the controller and OpenFlow switches. As a result, the current solutions create issues that must be considered, especially when they are implemented on large networks. Furthermore, enhancements in security applications improve the reliability of networks. Following a literature review of the existing Intrusion Detection Systems, this paper presents a new model that offers decentralised processing and exchanges data over a trusted, independent channel, in order to solve issues relating to system overload and poor performance. Our model utilises an appropriate feature selection method to reduce the number of extracted features and minimise the data transmitted over the channels. Additionally, the Naive Bayes algorithm has been employed for flow classification purposes, since it is a fast classifier. We successfully implemented our framework, using the Mininet emulator, which provides a suitable networking environment. Evaluations indicates that our proposed system can detect various attacks with an accuracy of 98.46% and nominal decreasing rates of 1.5% in throughput and 0.7% in latency analyses, when the model is implemented in wide range networks.
Recently, video streaming services consumption has grown massively and is foreseen to increase even more in the future. The tremendous traffic usage has negatively impacted the network’s quality of service due to network congestion and end-to-end customers’ satisfaction represented by the quality of experience, especially during evening peak hours. This paper introduces an intelligent multimedia framework that aims to optimise the network’s quality of service and users’ quality of experience by taking into account the integration of Software-Defined Networking and Reinforcement Learning, which enables exploring, learning, and exploiting potential paths for video streaming flows. Moreover, an objective study was conducted to assess video streaming for various realistic network environments and under low and high traffic loads to obtain two quality of experience metrics; video multimethod assessment fusion and structural similarity index measure. The experimental results validate the effectiveness of the proposed solution strategy, which demonstrated better viewing quality by achieving better customers’ quality of experience, higher throughput and lower data loss compared with the currently existing solutions.
In-network softwarization, Network Slicing provides scalability and flexibility through various services such as Quality of Service (QoS) and Quality of Experience (QoE) to cover the network demands. For the QoS, a set of policies must be considered in real-time, accompanied by a group of functions and services to guarantee the end-user needs based on network demand. On the other hand, for the QoE, the service's performance needs to be improved to bring an efficient service to cover the demands of the end-user. The 3G Partnership Project (3GPP) defined the slice as a component of resources used to process a set of packets. These resources need to be flexible, which means the resources can be scaled up or down based on the demand. This survey discusses softwarization and virtualization techniques, considering how to implement the slices for future networks. Specifically, we discuss current advances concerning the functionality and architecture of the 5G network. Therefore, the paper critically evaluates recent research and systems related to mobility management as a service in real-time inter/intra slice control by considering the strengths and limitations of these contributions to identify the research gaps and possible research directions for emerging research and development opportunities. Moreover, we extend our review by considering the slice types and their numbers based on the 3GPP Technical Specification (3GPP TS). The study presented in this paper identifies open issues and research directions that reveal that mobility management at a service level with inter/intra slice management techniques has strong potential in future networks and requires further investigation from the research community to exploit its benefits fully.
Modern wireless communication systems suffer from phase shifting and, more importantly, from interference caused by multipath propagation. Multipath propagation results in an antenna receiving two or more copies of the signal sequence sent from the same source but that has been delivered via different paths. Multipath components are treated as redundant copies of the original data sequence and are used to improve the performance of forward error correction (FEC) codes without extra redundancy, in order to improve data transmission reliability and increase the bit rate over the wireless communication channel. For a proof of concept Bose, Ray-Chaudhuri, and Hocquenghem (BCH) and Reed-Solomon (RS) codes have been used for FEC to compare their bit error rate (BER) performances. The results showed that the wireless multipath components significantly improve the performance of FEC. Furthermore, FEC codes with low error correction capability and employing the multipath phenomenon are enhanced to perform better than FEC codes which have a bit higher error correction capability and did not utilise the multipath. Consequently, the bit rate is increased, and communication reliability is improved without extra redundancy.