Virtual Security Functions and Their Placement in Software Defined Networks: A Survey

Authors : Sedef DEMIRCI, Mehmet DEMIRCI, Seref SAGIROGLU

Pages : 833-851

Doi:10.35378/gujs.422000

View : 15 | Download : 7

Publication Date : 2019-09-01

Article Type : Review Paper

Abstract :Software Defined Networking insert ignore into journalissuearticles values(SDN); and Network Functions Virtualization insert ignore into journalissuearticles values(NFV); are two important technologies gaining prominence thanks to their benefits for improving the flexibility and cost efficiency in networks. These technologies have been utilized extensively for providing new age security solutions in recent years. Through the use of SDN and NFV, network security functions are virtualized and deployed in a hardware-independent manner, thus reducing costs as well as enabling faster innovations and developments. Functions virtualized with NFV such as firewall, deep packet inspection, intrusion detection systems etc. can reside as applications in the SDN architecture. The issue of where to place these functions in the network is an important problem discussed in the literature. When placing these functions, objectives such as efficient use of network resources, energy consumption, cost, network load, delay etc. must be considered for each function, in addition to ensuring that network security requirements are met. This paper provides a critical survey on the placement of virtualized network security functions in software defined networks and identifies open problems in this field. We briefly describe SDN and NFV technologies, touch upon the relationship between them, exemplify and review the most common virtual security functions in SDN. We also examine and compare the studies on the optimal placement of virtual security functions. Finally, we identify several open research challenges in this area and suggest potential future directions to be considered by researchers.
Keywords : SDN, software defined networking, NFV, network function virtualization, cyber security