Security Benefits and Drawbacks of Software-Defined Networking

摘要

Security elements of data communication networks such as packet filters, firewalls, intrusion detection and prevention systems are in first line of defense against cyber security threats and various attacks such as DDoS and many others. With constantly increasing demand of compute power and grow of various cloud services, complexity of traditional networks makes it more difficult to maintain security policies in fast and safe manner. To simplify management and overcome limitations of traditional networks concept of software-defined networking (SDN) was proposed. The main idea of SDN is separation of control and data planes of devices. Combined control plane into network controller brings intelligence into network and open wider possibilities for automation. Separated data plane makes it possible for devices to run in headless mode during critical situations when control plane is not functioning. SDN also simplifies managing of security policies, it helps to ensure intime deploying and minimize possibility of mistake. However, SDN architecture has some places which can be used as main point of cyber-attack. Purpose of this paper is to describe security benefits and drawbacks of software-defined network.