SDN IMPLEMENTATION IN REGARD TO NETWORK ELEMENTS SECURITY

摘要

The article presents the process of creating an example multi-domain Software Defined Network based on open sourcesolutions. Significant threats to the SDN and currently used protection practices were discussed. Authors proposeda solution to the problem of resource authorization and authentication by introducing a Hidden Data Layer based onsteganographic methods to SDN. Hidden Data Layer consists of three essential elements, i.e. a Head Resident whichdoubles the functions of a public SDN controller and is a superior unit concerning public one, a Hidden Layer Protocolrealising communication between individual network elements. The third element is Hidden Protocol Interpreter as aninterpretive and executive function which carries out tasks sent by secret layer protocol. This type of solution assuresat first fast and effective detection of threats and secondarily redundancy of the control layer in the case of disabling ordebilitating the use of the public controller.