METHOD FOR SUPPORTING SECURITY FUNCTION IN SOFTWARE DEFINED NETWORK, NETWORK DEVICE AND SOFTWARE DEFINED CONTROLLER THEREFOR

摘要

Disclosed is a method for processing a security function applicable to a software defined network (SDN) environment. The method for processing a security function of a network device comprises the steps of: transmitting a list of a security function supported by a network device to an SDN controller; receiving, from the SDN controller, an instruction of an application of the security function satisfying a security level required in accordance with at least one security or service level among terminals of a terminal-to-terminal path; and performing the security function satisfying the required security level as an end network device with respect to traffic of the terminal-to-terminal path. Accordingly, a high level of security can be achieved even without directly performing, by a terminal, a security function requiring a large amount of computing power by performing the security function (encryption and/or tunneling) in a network device (e.g. gateway) rather than the terminal.;COPYRIGHT KIPO 2018