SECURITY OF SDN TRAFFIC IN A COMMUNICATION CLOUD ENVIRONMENT OF MULTIPLE APPLICATIONS ON TOP OF AN SDN CONTROLLER

摘要

In a control entity for improving SDN traffic security in a communication cloud, descriptor information is acquired (S301), which comprises information on at least one forwarding table to be configured in a switching entity, information on a software defined network, and, for each of a plurality of applications, allowed rule properties in flow table entries corresponding to a plurality of specific functions of the plurality of applications. The plurality of specific functions are chained (S302) based on the descriptor information. Using the allowed rule properties, it is checked (S303) whether or not configuration of forwarding rules in the switching entity is allowed, which are included in the plurality of specific functions which are chained, and the at least one forwarding table is configured (S304) in the switching entity based on a result of the checking.