Abstract

While demands on wide area network (WAN) services are gradually increasing, the regular WAN is struggling to cope with the high network services requirements. Recent software-defined wide area networks (SD-WAN) technology has provided a robust network system to handle large and increasing network loads. SD-WAN is providing a central and programmable control on the network system, which ensures more flexibility and agility. Moreover, as it enables the cloud use for network services, security becomes a significant challenge in SD-WAN. As a result, several types of threats among the three network planes need to be handled through a stable security system integrated with the SD-WAN. This article reviews the significant challenges faced in SD-WAN systems facing each plane of the SD-WAN structure, such as intersection attacks, leakage of information threats, and eavesdropping attacks.

References

• P. A. Dhakulkar, P. S. Dubey, A. A. Gaikwad and S. P. Dhokane, "Software Defined Wide Area Network," International Journal of Innovations in Engineering and Science, vol. 3, no. 6, pp. 27-32, 2018.
• S. Gordeychik, D. Kolegov and A. Nikolaev, "SD-WAN Internet Census," ArXiv, 2018.
• A. Rajendran, Security Analysis of a Software Defined Wide Area Network Solution, Espoo: Royal Institute of Technology, 2016.
• F. Bannour, S. Souihi and A. Mellouk, "Distributed SDN Control: Survey, Taxonomy, and Challenges," 2018.
• O. N. F. TR-511, "Principles and Practices for Security Software-Defined Networks," 4 2015. [Online]. Available: https://www.opennetworking.org/wp-content/uploads/2014/10/Principles_and_Practices_for_Securing_Software-Defined_Networks_applied_to_OFv1.3.4_V1.0.pdf. [Accessed 14 3 2020].
• M. Niemiec , P. Jaglarz, M. Jekot, P. Cholda and P. Borylo, "Risk Assessment Approach to Secure Northbound Interface of SDN Networks," in International Conference on Computing, Networking and Communications (ICNC), Honolulu, HI, USA, 2019, pp. 164-169.
• L. R. Bays, R. R. Oliveira, M. P. Barcellos and L. P. Gaspary, "Virtual network security: threats, countermeasures, and challenges," Journal of Internet Services and Applications, 2016.
• M. Dirksen, A security architecture for software defined wide area networks, Leiden: Faculty of Governance and Global Affairs, 2018.
• Aaron Gember-Jacobson, Raajay Viswanathan, Chaithan Prakash, Robert Grandl, Junaid Khalid, Sourav Das, and Aditya Akella, "OpenNF: Enabling Innovation in Network Function Control," ACM SIGCOMM Computer Communication Review, vol. 44, no. 4, 2014.
• Mohammad R. Abbasi, Ajay Guleria, and Mandalika S. Devi, "Traffic Engineering in Software Defined Networks: A Survey," Journal of Telecommunications and Information Technology, vol. nr 4, pp. 3--14, 2016.
• D. Kreutz, F. M. V. Ramos, P. E. Veríssimo, C. E. Rothenberg, S. Azodolmolky and S. Uhlig, "Software-Defined Networking: A Comprehensive Survey," Proceedings of the IEEE, vol. 103, no. 1, pp. 14-76, Jan. 2015.
• Z. Yang, Y. Cui, B. Li, Y. Liu and Y. Xu, "Software-Defined Wide Area Network (SD-WAN): Architecture, Advances and Opportunities," in 28th International Conference on Computer Communication and Networks (ICCCN), Valencia, Spain, 2019.
• J. Benabbou1, K. Elbaamrani and N. Idboufker, "Security in OpenFlow-based SDN, opportunities and challenges," PHOTONIC NETWORK COMMUNICATIONS, vol. 37, no. 1, pp. 1-23, 2019.
• A. Shaghaghi, M. A. Kaafar, R. Buyya and S. Jha, "Software-Defined Network (SDN) Data Plane Security: Issues, Solutions and Future Directions," in Handbook of Computer Networks and Cyber Security, Cham, Springer, 2020.
• S. Gordeychik and D. Kolegov, "SD-WAN Threat Landscape," ArXiv, 2018.
• M. FRAMINGHAM, "SD-WAN Infrastructure Market Poised to Reach $5.25 Billion in 2023, According to New IDC Forecast," International Data Corporation, 24 July 2019. [Online]. Available: https://www.idc.com/getdoc.jsp?containerId=prUS45380319. [Accessed 14 March 2020].
• L. Chen, J. Lingys, K. Chen and F. Liu, "AuTO: Scaling Deep Reinforcement Learning for Datacenter-Scale Automatic Traffic Optimization," 2018.