Visible to the public Risk-driven Security Metrics Development for Software-defined Networking

TitleRisk-driven Security Metrics Development for Software-defined Networking
Publication TypeConference Paper
Year of Publication2018
AuthorsSavola, Reijo M., Savolainen, Pekka
Conference NameProceedings of the 12th European Conference on Software Architecture: Companion Proceedings
Conference LocationNew York, NY, USA
ISBN Number978-1-4503-6483-6
KeywordsMetrics, pubcrawl, risk analysis, security metrics, software-defined networking
AbstractIntroduction of SDN (Software-Defined Networking) into the network management turns the formerly quite rigid networks to programmatically reconfigurable, dynamic and high-performing entities, which are managed remotely. At the same time, introduction of the new interfaces evidently widens the attack surface, and new kind of attack vectors are introduced threatening the QoS even critically. Thus, there is need for a security architecture, drawing from the SDN management and monitoring capabilities, and eventually covering the threats posed by the SDN evolution. For efficient security-architecture implementation, we analyze the security risks of SDN and based on that propose heuristic security objectives. Further, we decompose the objectives for effective security control implementation and security metrics definition to support informed security decision-making and continuous security improvement.
Citation Keysavola_risk-driven_2018