A Novel Design for Real-Time Intrusion Response in Latest Software-Defined Networks by Graphical Security Models

Abstract

In the current era, many of the application domains are adopting software-defined network (SDN). SDN provides a special functionality to the network flow by controlling it dynamically with more robustness. Traditional networks are high in cost whereas SDN is economical. Since there are more chances of cyber-attacks, security solutions are proposed to reinforce and retreat the SDN. These security solutions have to be compared with each other and select the optimized solution to provide the best security for SDN. Graphical security models like attack trees and attack graphs can be used to measure and estimate the safety of SDN. Due to computational complexity, it is hard to provide security for SDN against cyber-attacks in real-time cases. Using precomputations, this paper aims to detect the disturbance which causes in SDN and finds the possibility of future attacks in the future for real-time cases. Various SDN components are taken into considerations for conducting an assessment on security which was not accessible in the existing network. Experimental analysis of this paper estimates all the possible attacking path in an ongoing attack which can be mitigated in real-time cases. It also exposes the security metrics which depends on the flow table that includes SDN components. Hence, it is possible to provide security for SDN against cyber-attacks in real-time cases.