{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,28]],"date-time":"2026-07-28T19:11:59Z","timestamp":1785265919557,"version":"3.55.0"},"reference-count":30,"publisher":"Springer Science and Business Media LLC","issue":"3","license":[{"start":{"date-parts":[[2025,3,19]],"date-time":"2025-03-19T00:00:00Z","timestamp":1742342400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2025,3,19]],"date-time":"2025-03-19T00:00:00Z","timestamp":1742342400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Int. J. Inf. Secur."],"published-print":{"date-parts":[[2025,6]]},"abstract":"<jats:title>Abstract<\/jats:title>\n          <jats:p>This paper presents a comprehensive study on the implementation of a Security-Enhanced Software-Defined Networking (SEC-SDN) framework integrated with game theory modeling and Snort, an open-source intrusion detection system, to strengthen cloud environments against Distributed Denial-of-Service (DDoS) attacks. As cloud computing continues to dominate the technological landscape, ensuring robust security for these highly scalable yet vulnerable systems is critical. The proposed SEC-SDN framework incorporates game theory to model dynamic interactions between attackers and defenders, enabling proactive and adaptive decision making for threat mitigation. By integrating Snort with SEC-SDN, the framework gains enhanced monitoring capabilities, facilitating real-time detection of malicious traffic patterns and the immediate enforcement of security policies to neutralize threats. This synergistic approach not only limits the impact of DDoS attacks but also preserves the availability and integrity of cloud services. A series of simulated DDoS attack scenarios were conducted on a cloud-based network to evaluate the effectiveness of the proposed framework. The results demonstrate significant improvements in threat detection, response times, and overall resilience of cloud environments against cyber threats. The findings highlight the potential of combining SEC-SDN, game theory modeling, and intrusion detection systems such as Snort to establish a scalable, adaptive, and robust security framework. This study contributes to the advancement of cloud security by proposing an innovative solution that dynamically evolves to address the increasingly sophisticated tactics of cyber attackers, ensuring the reliability and continuity of cloud services.\n\n<\/jats:p>","DOI":"10.1007\/s10207-025-01012-4","type":"journal-article","created":{"date-parts":[[2025,3,19]],"date-time":"2025-03-19T06:10:37Z","timestamp":1742364637000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":10,"title":["Enhancing network security through integration of game theory in software-defined networking framework"],"prefix":"10.1007","volume":"24","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-8817-910X","authenticated-orcid":false,"given":"Florea","family":"Razvan","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4136-9387","authenticated-orcid":false,"given":"Craus","family":"Mitica","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2025,3,19]]},"reference":[{"key":"1012_CR1","volume-title":"DoS Attack on SDN: a study on control plane strategies in-band and out-of-band","author":"RH Neves","year":"2022","unstructured":"Neves, R.H., Silva, A.A.A., Gava, V., Azevedo, M.T., Sandoval, J.F.R., et al.: DoS Attack on SDN: a study on control plane strategies in-band and out-of-band. Springer Nature, Berlin (2022)"},{"issue":"1","key":"1012_CR2","doi-asserted-by":"publisher","first-page":"41","DOI":"10.1145\/2723872.2723879","volume":"49","author":"Ali Abedi","year":"2015","unstructured":"Abedi, Ali, Heard, Andrew, Brecht, Tim: Conducting repeatable experiments and fair comparisons using 802.11n mimo networks. ACM SIGOPS Oper. Syst. Rev. 49(1), 41\u201350 (2015)","journal-title":"ACM SIGOPS Oper. Syst. Rev."},{"key":"1012_CR3","doi-asserted-by":"crossref","unstructured":"Florea, R., Craus, M.: Modeling an Enterprise Environment for Testing Openstack Cloud Platform against Low-Rate DDoS Attacks. In: 26th International Conference on System Theory, Control and Computing (ICSTCC) (2022)","DOI":"10.1109\/ICSTCC55426.2022.9931822"},{"key":"1012_CR4","doi-asserted-by":"publisher","unstructured":"Wang, H., Xu, L., Gu, G.: FloodGuard: A DoS Attack Prevention Extension in Software-Defined Networks. In: 45th Annual IEEE\/IFIP International Conference on Dependable Systems and Networks, pp. 239\u2013250. Rio de Janeiro, Brazil (2015). https:\/\/doi.org\/10.1109\/DSN.2015.27. Keywords: Switches; Security; Protocols; Software; IP networks; Throughput; Software-Defined Networking; SDN; Security; Denial-of-Service Attack","DOI":"10.1109\/DSN.2015.27."},{"key":"1012_CR5","doi-asserted-by":"publisher","unstructured":"Shin, S., Xu, L., Hong, S., Gu, G.: Enhancing Network Security through Software Defined Networking (SDN). In: 25th International Conference on Computer Communication and Networks (ICCCN), pp. 1\u20139. Waikoloa (2016). https:\/\/doi.org\/10.1109\/ICCCN.2016.7568520. Keywords: Communication networks; Switches; Monitoring; Access control; Centralized control; Software-Defined Networking; Network Security","DOI":"10.1109\/ICCCN.2016.7568520."},{"key":"1012_CR6","doi-asserted-by":"crossref","unstructured":"Huang, L., Zhi, X., Gao, Q., Kausar, S., Zheng, S.: Design and implementation of multicast routing system over SDN and sFlow. In: 8th IEEE International Conference on Communication Software and Networks (ICCSN), pp. 524\u2013529 (2016)","DOI":"10.1109\/ICCSN.2016.7586578"},{"key":"1012_CR7","doi-asserted-by":"crossref","unstructured":"Arbettu, R.K., Khondoker, R., Bayarou, K., Weber, F.: Security analysis of OpenDaylight, ONOS, Rosemary and Ryu SDN controllers. In: 17th International telecommunications network strategy and planning symposium (Networks), pp. 37\u201344. IEEE. (PIC S &T) (2016)","DOI":"10.1109\/NETWKS.2016.7751150"},{"issue":"3","key":"1012_CR8","first-page":"66","volume":"84","author":"P Tivig","year":"2022","unstructured":"Tivig, P., Borcoci, E.: Performance evaluation experiments for video and VoIP traffic with RYU controller and mininet framework. U.P.B. Sci. Bull., Ser. C 84(3), 66 (2022)","journal-title":"U.P.B. Sci. Bull., Ser. C"},{"key":"1012_CR9","first-page":"54","volume-title":"A comparative evaluation of the performance of popular SDN controllers","author":"Lusani Mamushiane","year":"2018","unstructured":"Mamushiane, Lusani, Lysko, Albert, Dlamini, Sabelo: A comparative evaluation of the performance of popular SDN controllers, pp. 54\u201359. Wireless Days (WD), Paris (2018)"},{"issue":"2","key":"1012_CR10","doi-asserted-by":"publisher","first-page":"118","DOI":"10.32877\/bt.v6i2.943","volume":"6","author":"JA Dharma","year":"2023","unstructured":"Dharma, J.A.: Network attack detection using intrusion detection system utilizing snort based on telegram. Bit-Tech. 6(2), 118\u2013126 (2023)","journal-title":"Bit-Tech."},{"key":"1012_CR11","volume-title":"ICT with Intelligent Applications. ICTIS 2023. Lecture Notes in Networks and Systems","author":"Y Gala","year":"2023","unstructured":"Gala, Y., Vanjari, N., Doshi, D., Radhanpurwala, I.: Hybrid Intrusion Detection System Using Autoencoders and Snort. In: Choudrie, J., Mahalle, P.N., Perumal, T., Joshi, A. (eds.) ICT with Intelligent Applications. ICTIS 2023. Lecture Notes in Networks and Systems, vol. 719. Springer, Singapore (2023)"},{"key":"1012_CR12","doi-asserted-by":"crossref","unstructured":"Dao, N. N., Park, J., Park, M., Cho, S.: A feasible method to combat against DDoS attack in SDN network. In: Conference on Information Networking, pp. 309\u2013311 (2015)","DOI":"10.1109\/ICOIN.2015.7057902"},{"key":"1012_CR13","doi-asserted-by":"crossref","unstructured":"Mousavi, S.M., St-Hilaire, M.: Early detection of DDoS attacks against SDN controllers. In: Conference on Computing, Networking and Communications, pp. 77\u201381 (2017)","DOI":"10.1109\/ICCNC.2015.7069319"},{"key":"1012_CR14","doi-asserted-by":"crossref","unstructured":"Dharma, N.I.G., Muthohar, M.F., Prayuda, J.D.A., Priagung, K., Choi, D.: Time-based DDoS detection and mitigation for SDN controller. In: Network Operations and Mag. Symp., pp. 550\u2013553 (2015)","DOI":"10.1109\/APNOMS.2015.7275389"},{"key":"1012_CR15","doi-asserted-by":"crossref","unstructured":"Shoeb, A., Chithralekha, T.: Resource management of switches and controller during saturation time to avoid DDoS in SDN. In: IEEE Conference on Engineering and Technology, pp. 152\u2013157 (2016)","DOI":"10.1109\/ICETECH.2016.7569231"},{"key":"1012_CR16","doi-asserted-by":"crossref","unstructured":"Macedo, R., de Castro, R., Santos, A., Ghamri-Doudane, Y., Nogueira, M.: Self-organized SDN controller cluster conformations against DDoS attacks effects. In: IEEE Global Communications Conference, pp. 1\u20136 (2016)","DOI":"10.1109\/GLOCOM.2016.7842259"},{"key":"1012_CR17","doi-asserted-by":"publisher","first-page":"362","DOI":"10.3390\/fi14120362","volume":"14","author":"R Florea","year":"2022","unstructured":"Florea, R., Craus, M.: A game-theoretic approach for network security using honeypots. Future Internet 14, 362 (2022). https:\/\/doi.org\/10.3390\/fi14120362","journal-title":"Future Internet"},{"key":"1012_CR18","doi-asserted-by":"publisher","first-page":"66","DOI":"10.7717\/peerj-cs.900","volume":"8","author":"E Jaw","year":"2022","unstructured":"Jaw, E., Wang, X.: A novel hybrid-based approach of snort automatic rule generator and security event correlation (SARG-SEC). PeerJ Comput. Sci. 8, 66 (2022)","journal-title":"PeerJ Comput. Sci."},{"key":"1012_CR19","doi-asserted-by":"crossref","unstructured":"Ujjan, R., Pervez, Z., Dahal, K.: Suspicious Traffic Detection in SDN with Collaborative Techniques of Snort and Deep Neural Networks. In: 2018 IEEE 20th International Conference on High Performance Computing and Communications; IEEE 16th International Conference on Smart City; IEEE 4th International Conference on Data Science and Systems (HPCC\/SmartCity\/DSS), pp. 915\u2013920 (2018)","DOI":"10.1109\/HPCC\/SmartCity\/DSS.2018.00152"},{"key":"1012_CR20","doi-asserted-by":"crossref","unstructured":"Akhtar, N., Matta, I., Raza, A., Wang, Y.: EL-SEC: ELastic management of security applications on virtualized infrastructure. In: IEEE INFOCOM 2018\u2014IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS), pp. 778\u2013783 (2018)","DOI":"10.1109\/INFCOMW.2018.8407019"},{"key":"1012_CR21","doi-asserted-by":"crossref","unstructured":"Ujjan, R., Pervez, Z., Dahal, K.: Snort Based Collaborative Intrusion Detection System Using Blockchain in SDN. In: 2019 13th International Conference on Software, Knowledge, Information Management and Applications (SKIMA), pp. 1\u20138 (2019)","DOI":"10.1109\/SKIMA47702.2019.8982413"},{"key":"1012_CR22","doi-asserted-by":"publisher","first-page":"36256","DOI":"10.1109\/ACCESS.2018.2846236","volume":"6","author":"M Paliwal","year":"2018","unstructured":"Paliwal, M., Shrimankar, D., Tembhurne, O.: Controllers in SDN: a review report. IEEE Access 6, 36256\u201336270 (2018)","journal-title":"IEEE Access"},{"key":"1012_CR23","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3421764","volume":"53","author":"L Zhu","year":"2020","unstructured":"Zhu, L., Karim, M., Sharif, K., Xu, C., Li, F., Du, X., Guizani, M.: SDN controllers. ACM Comput. Surv. (CSUR) 53, 1\u201340 (2020)","journal-title":"ACM Comput. Surv. (CSUR)"},{"key":"1012_CR24","doi-asserted-by":"publisher","first-page":"472","DOI":"10.1109\/COMST.2019.2935453","volume":"22","author":"T Das","year":"2020","unstructured":"Das, T., Sridharan, V., Gurusamy, M.: A survey on controller placement in SDN. IEEE Commun. Surv. Tutor. 22, 472\u2013503 (2020)","journal-title":"IEEE Commun. Surv. Tutor."},{"issue":"9","key":"1012_CR25","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3556973","volume":"55","author":"A Liatifis","year":"2022","unstructured":"Liatifis, A., Sarigiannidis, P., Argyriou, V., Lagkas, T.: Advancing SDN from OpenFlow to P4: a survey. ACM Comput. Surv. 55(9), 1\u201337 (2022)","journal-title":"ACM Comput. Surv."},{"key":"1012_CR26","doi-asserted-by":"crossref","unstructured":"Goswami, B., Kulkarni, M., Paulose, J.: A Survey on P4 Challenges in Software Defined Networks: P4 Programming. IEEE Access (2022)","DOI":"10.1109\/ACCESS.2023.3275756"},{"key":"1012_CR27","unstructured":"Hauser, F., H\u00e4berle, M., Merling, D., Lindner, S., Gurevich, V., Zeiger, F., Frank, R., Menth, M.: A Survey on Data Plane Programming with P4: Fundamentals, Advances, and Applied Research. ArXiv (2021)"},{"key":"1012_CR28","doi-asserted-by":"crossref","unstructured":"Larsen, J.K., Guanciale, R., Haller, P., Scalas, A.: P4R-Type: A Verified API for P4 Control Plane Programs. Proceedings of the ACM on Programming Languages (2023)","DOI":"10.1145\/3580420"},{"key":"1012_CR29","doi-asserted-by":"crossref","unstructured":"Ye, C., He, F.: P4b: A Translator from P4 Programs to Boogie. In: Proceedings of the 31st ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering (2023)","DOI":"10.1145\/3611643.3613091"},{"key":"1012_CR30","unstructured":"Paolucci, F., Cugini, F., Castoldi, P., Osi\u0144ski, T.: Enhancing 5G SDN\/NFV Edge with P4 Data Plane Programmability. IEEE Netw. (2023)"}],"container-title":["International Journal of Information Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-025-01012-4.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10207-025-01012-4\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-025-01012-4.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,21]],"date-time":"2025-06-21T10:10:52Z","timestamp":1750500652000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10207-025-01012-4"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,3,19]]},"references-count":30,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2025,6]]}},"alternative-id":["1012"],"URL":"https:\/\/doi.org\/10.1007\/s10207-025-01012-4","relation":{},"ISSN":["1615-5262","1615-5270"],"issn-type":[{"value":"1615-5262","type":"print"},{"value":"1615-5270","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,3,19]]},"assertion":[{"value":"19 March 2025","order":1,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare no competing interests.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}}],"article-number":"100"}}