A Secured OpenFlow-Based Software Defined Networking Using Dynamic Bayesian Network

dc.contributor.authorSophakan, Natnaree
dc.contributor.authorSathitwiriyawong, Chanboon
dc.date.accessioned2026-08-06T10:25:51Z
dc.date.available2026-08-06T10:25:51Z
dc.date.issued2019-10-01
dc.description.abstractOpenFlow has been the main standard protocol of software defined networking (SDN) since the launch of this new networking paradigm. It is a programmable network protocol that controls traffic flows among switches and routers regardless of their platforms. Its security relies on the optional implementation of Transport Layer Security (TLS) which has been proven vulnerable. The aim of this research was to develop a secured OpenFlow, so-called Secured-OF. A stateful firewall was used to store state information for further analysis. Dynamic Bayesian Network (DBN) was used to learn denial-of-service attack and distributed denial-of-service attack. It analyzes packet states to determine the nature of an attack and adds that piece of information to the flow table entry. The proposed Secured-OF model in Ryu controller was evaluated with several performance metrics. The analytical evaluation of the proposed Secured-OF scheme was performed on an emulated network. The results showed that the proposed Secured-OF scheme offers a high attack detection accuracy at 99.5%. In conclusion, it was able to improve the security of the OpenFlow controller dramatically with trivial performance degradation compared to an SDN with no security implementation.
dc.identifier.citationInternational Conference on Control Automation and Systems, 2019-October, 1517-1522, 2019
dc.identifier.doi10.23919/ICCAS47443.2019.8971459
dc.identifier.issn15987833
dc.identifier.other2-s2.0-85079099322
dc.identifier.urihttps://dspace.kmitl.ac.th/handle/123456789/10218
dc.sourceInternational Conference on Control Automation and Systems
dc.subjectdenial-of-service attack
dc.subjectdistributed denial-of-service attack
dc.subjectdynamic bayesian network
dc.subjectfirewalls
dc.subjectHidden Markov models
dc.subjectOpenFlow
dc.subjectsoftware defined networking
dc.subjectstateful firewall
dc.titleA Secured OpenFlow-Based Software Defined Networking Using Dynamic Bayesian Network
dc.typeConference Paper

Files

Collections