Risk-driven security metrics development for software-defined networking

Reijo M. Savola, Pekka Savolainen

    Research output: Chapter in Book/Report/Conference proceedingConference article in proceedingsScientificpeer-review

    Abstract

    Introduction of SDN (Software-Defined Networking) into the network management turns the formerly quite rigid networks to programmatically reconfigurable, dynamic and high-performing entities, which are managed remotely. At the same time, introduction of the new interfaces evidently widens the attack surface, and new kind of attack vectors are introduced threatening the QoS even critically. Thus, there is need for a security architecture, drawing from the SDN management and monitoring capabilities, and eventually covering the threats posed by the SDN evolution. For efficient security-architecture implementation, we analyze the security risks of SDN and based on that propose heuristic security objectives. Further, we decompose the objectives for effective security control implementation and security metrics definition to support informed security decision-making and continuous security improvement.
    Original languageEnglish
    Title of host publicationECSA '18
    Subtitle of host publicationProceedings of the 12th European Conference on Software Architecture
    PublisherAssociation for Computing Machinery ACM
    ISBN (Electronic)978-1-4503-6483-6
    DOIs
    Publication statusPublished - 24 Sept 2018
    MoE publication typeNot Eligible
    Event12th European Conference on Software Architecture, ECSA 2018 - Madrid, Spain
    Duration: 24 Sept 201828 Sept 2018
    Conference number: 12

    Conference

    Conference12th European Conference on Software Architecture, ECSA 2018
    Abbreviated titleECSA 2018
    Country/TerritorySpain
    CityMadrid
    Period24/09/1828/09/18

    Keywords

    • Risk analysis
    • Security metrics
    • Software-Defined Networking

    Fingerprint

    Dive into the research topics of 'Risk-driven security metrics development for software-defined networking'. Together they form a unique fingerprint.

    Cite this