SDNForensics: A Comprehensive Forensics Framework for Software Defined Network

DOI

10.2991/cnct-16.2017.13How to use a DOI?

Keywords

SDN, SDN security, SDN forensics, Control plane

Abstract

Software-defined networking (SDN) is an emerging network architecture, which decouples the control and data planes of a network. Owing to its openness and standardization, SDN enables researchers to design and implement new innovative network functions and protocols in a much simpler and flexible way. However, the dynamism of programmable networks also brings potential new security challenges relating to various attacks such as scanning, spoofing attacks and denial-of-service attacks. We survey existing research efforts relating to both security challenges and promising solutions for SDN security problems. To the best of our knowledge, there are no published papers on SDN forensics. Before describing our forensics framework, the design goals and technical requirements of SDN forensics are discussed. Then SDNForensics, a comprehensive forensics framework, is proposed for the collection and analysis of digital evidence, built on SDN infrastructure.

Copyright

© 2017, the Authors. Published by Atlantis Press.

Open Access

This is an open access article distributed under the CC BY-NC license (http://creativecommons.org/licenses/by-nc/4.0/).

Download article (PDF)

TY  - CONF
AU  - Shu-hui ZHANG
AU  - Xiang-xu MENG
AU  - Lian-hai WANG
PY  - 2016/12
DA  - 2016/12
TI  - SDNForensics: A Comprehensive Forensics Framework for Software Defined Network
BT  - Proceedings of the International Conference on Computer Networks and Communication Technology (CNCT 2016)
PB  - Atlantis Press
SP  - 92
EP  - 99
SN  - 2352-538X
UR  - https://doi.org/10.2991/cnct-16.2017.13
DO  - 10.2991/cnct-16.2017.13
ID  - ZHANG2016/12
ER  -