{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,17]],"date-time":"2026-07-17T16:05:22Z","timestamp":1784304322836,"version":"3.55.0"},"reference-count":162,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"4","license":[{"start":{"date-parts":[[2015,1,1]],"date-time":"2015-01-01T00:00:00Z","timestamp":1420070400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2015,1,1]],"date-time":"2015-01-01T00:00:00Z","timestamp":1420070400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2015,1,1]],"date-time":"2015-01-01T00:00:00Z","timestamp":1420070400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Commun. Surv. Tutorials"],"published-print":{"date-parts":[[2015]]},"DOI":"10.1109\/comst.2015.2474118","type":"journal-article","created":{"date-parts":[[2015,8,27]],"date-time":"2015-08-27T18:42:27Z","timestamp":1440700947000},"page":"2317-2346","source":"Crossref","is-referenced-by-count":430,"title":["Security in Software Defined Networks: A Survey"],"prefix":"10.1109","volume":"17","author":[{"given":"Ijaz","family":"Ahmad","sequence":"first","affiliation":[{"name":"Dept. of Commun. Eng., Univ. of Oulu, Oulu, Finland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Suneth","family":"Namal","sequence":"additional","affiliation":[{"name":"Dept. of Commun. Eng., Univ. of Oulu, Oulu, Finland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mika","family":"Ylianttila","sequence":"additional","affiliation":[{"name":"Dept. of Commun. Eng., Univ. of Oulu, Oulu, Finland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Andrei","family":"Gurtov","sequence":"additional","affiliation":[{"name":"Dept. of Comput. Sci., Aalto Univ., Aalto, Finland"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","first-page":"413","article-title":"Avant-guard: Scalable and vigilant switch flow management in software-defined networks","author":"shin","year":"0","journal-title":"Proc CCS"},{"key":"ref38","first-page":"1","article-title":"Modeling and performance evaluation of an OpenFlow architecture","author":"jarschel","year":"0","journal-title":"Proc 23rd ITC"},{"key":"ref33","first-page":"1","article-title":"A framework for integrating security services into software-defined networks","author":"shin","year":"0","journal-title":"Proc ONS"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/2491185.2491199"},{"key":"ref31","article-title":"SDN market size forecast","year":"2013"},{"key":"ref30","article-title":"SDN product directory","year":"0"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/1477942.1477944"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/2486001.2486003"},{"key":"ref35","article-title":"Software driven networks problem statement","author":"hartman","year":"2013"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/2491185.2491212"},{"key":"ref28","article-title":"SDN: Empowering the network","year":"2012"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2013.081313.00105"},{"key":"ref29","article-title":"VMware NSX virtualization and security platform","year":"0"},{"key":"ref20","article-title":"Use cases for ALTO with software defined networks","author":"xie","year":"2012"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/JPROC.2014.2371999"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/1384609.1384625"},{"key":"ref24","article-title":"Security analysis of the open networking foundation (ONF) OpenFlow switch specification. Internet engineering task force","author":"wasserman","year":"2013"},{"key":"ref23","article-title":"Requirements for security services based on software-defined networking","author":"jeong","year":"2014"},{"key":"ref101","first-page":"251","article-title":"Research on intelligent intrusion prevention system based on Snort","volume":"1","author":"li","year":"0","journal-title":"Proc Int Conf CMCE"},{"key":"ref26","article-title":"Security architecture for systems providing end-to-end communications","year":"2003"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.1109\/GREE.2013.25"},{"key":"ref25","article-title":"Software-defined networking and network function virtualization security architecture","author":"bernardo","year":"0"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/LANMAN.2011.6076935"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2013.6553676"},{"key":"ref154","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2010.87"},{"key":"ref153","doi-asserted-by":"publisher","DOI":"10.1145\/2396556.2396598"},{"key":"ref156","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2007.4342833"},{"key":"ref155","article-title":"On controller performance in software-defined networks","author":"tootoonchian","year":"0","journal-title":"Proc USENIX Hot-ICE Workshop"},{"key":"ref150","doi-asserted-by":"publisher","DOI":"10.1109\/DRCN.2011.6076899"},{"key":"ref152","first-page":"1","article-title":"Extending networking into the virtualization layer","author":"pfaff","year":"0","journal-title":"Proc HOTNETS"},{"key":"ref151","doi-asserted-by":"publisher","DOI":"10.1145\/2491185.2491194"},{"key":"ref146","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2010.021110.00070"},{"key":"ref147","doi-asserted-by":"publisher","DOI":"10.1109\/WoWMoM.2014.6918981"},{"key":"ref148","doi-asserted-by":"publisher","DOI":"10.1145\/2043164.2018466"},{"key":"ref149","first-page":"351","article-title":"Scalable flow-based networking with DIFANE","volume":"41","author":"yu","year":"2011","journal-title":"ACM SIGCOMM Comput Commun Rev"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/NOMS.2014.6838273"},{"key":"ref58","first-page":"1","article-title":"DISCO: Distributed multi-domain SDN controllers","author":"phemius","year":"0","journal-title":"Proc IEEE NOMS"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/AINA.2013.113"},{"key":"ref56","article-title":"Security-enhanced floodlight","year":"0"},{"key":"ref55","first-page":"1","article-title":"Automating the testing of OpenFlow applications","author":"canini","year":"0","journal-title":"Proc 1st Int WRiPE"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2013.6654813"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1145\/2620728.2620743"},{"key":"ref52","first-page":"1","article-title":"FRESCO: Modular composable security services for software-defined networks","author":"shin","year":"0","journal-title":"Proc Symp Netw Distrib Syst Security"},{"key":"ref40","first-page":"1","article-title":"On the cascading failures of multi-controllers in software defined networks","author":"yao","year":"0","journal-title":"Proc Of 21st IEEE ICNP"},{"key":"ref162","doi-asserted-by":"crossref","DOI":"10.17487\/rfc6227","article-title":"Design goals for scalable internet routing","author":"li","year":"2011"},{"key":"ref161","doi-asserted-by":"publisher","DOI":"10.1145\/1810891.1810906"},{"key":"ref160","doi-asserted-by":"publisher","DOI":"10.1109\/NOF.2011.6126682"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2004.2"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2006.1607877"},{"key":"ref6","article-title":"New Arch: Future generation Internet architecture","author":"clark","year":"2004"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/SDN4FNS.2013.6702553"},{"key":"ref159","first-page":"1","article-title":"Automated and scalable QoS control for network convergence","volume":"10","author":"kim","year":"0","journal-title":"Proc INM\/WREN"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/DANCE.2002.1003480"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/VTCFall.2012.6399037"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/35.568214"},{"key":"ref157","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2013.6461195"},{"key":"ref158","article-title":"Software-defined networking: The new norm for networks","year":"0"},{"key":"ref9","doi-asserted-by":"crossref","first-page":"432","DOI":"10.1109\/TSMCC.2003.818498","article-title":"Active security support for active networks","volume":"33","author":"liu","year":"2003","journal-title":"IEEE Trans Syst Man Cybern Part C Appl Rev"},{"key":"ref46","doi-asserted-by":"crossref","DOI":"10.17487\/rfc5246","article-title":"The Transport Layer Security (TLS) protocol version 1.2","author":"dierks","year":"2008"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/GLOCOM.2011.6134496"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/2491185.2491222"},{"key":"ref47","doi-asserted-by":"crossref","DOI":"10.17487\/rfc6347","article-title":"Datagram Transport Layer Security Version 1.2","author":"rescorla","year":"2012"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/NOMS.2012.6212011"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/2491185.2491220"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/1866898.1866905"},{"key":"ref43","doi-asserted-by":"crossref","DOI":"10.17487\/rfc5693","article-title":"Application-layer traffic optimization (ALTO) problem statement","author":"seedorf","year":"2009"},{"key":"ref127","doi-asserted-by":"publisher","DOI":"10.1109\/EuCNC.2015.7194059"},{"key":"ref126","doi-asserted-by":"publisher","DOI":"10.1145\/1921151.1921162"},{"key":"ref125","doi-asserted-by":"publisher","DOI":"10.1109\/ICDCSW.2012.87"},{"key":"ref124","doi-asserted-by":"publisher","DOI":"10.1109\/NOMS.2014.6838409"},{"key":"ref73","article-title":"Developing floodlight modules. Floodlight OpenFlow controller","author":"switch","year":"2012"},{"key":"ref72","article-title":"OFRewind: Enabling record and replay troubleshooting for networks","author":"wundsam","year":"0","journal-title":"Proc USENIX Annu Tech Conf"},{"key":"ref129","doi-asserted-by":"publisher","DOI":"10.1109\/CSE.2009.267"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1145\/2342441.2342453"},{"key":"ref128","doi-asserted-by":"publisher","DOI":"10.1109\/NTMS.2015.7266528"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1145\/2103621.2103685"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1002\/9781118900253.ch13"},{"key":"ref130","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2008.276"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1109\/SDN4FNS.2013.6702551"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1145\/2342356.2342414"},{"key":"ref75","year":"0","journal-title":"Advanced Message Queuing Protocol"},{"key":"ref133","article-title":"SDN security considerations in the data center. Open networking foundation","year":"0"},{"key":"ref134","first-page":"1","article-title":"CloudWatcher: Network security monitoring using OpenFlow in dynamic cloud networks (or: How to provide security monitoring as a service in clouds?)","author":"shin","year":"0","journal-title":"Proc 20th IEEE ICNP"},{"key":"ref131","article-title":"Flowvisor: A network virtualization layer","author":"sherwood","year":"2009"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1109\/5.58325"},{"key":"ref132","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2013.8"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1109\/CNSM.2013.6727805"},{"key":"ref136","doi-asserted-by":"publisher","DOI":"10.1109\/SDN4FNS.2013.6702540"},{"key":"ref135","doi-asserted-by":"publisher","DOI":"10.1109\/ICCT.2010.5689156"},{"key":"ref138","doi-asserted-by":"publisher","DOI":"10.1145\/2342441.2342467"},{"key":"ref137","doi-asserted-by":"publisher","DOI":"10.1109\/ICNP.2011.6089085"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1145\/2342441.2342444"},{"key":"ref139","doi-asserted-by":"publisher","DOI":"10.1109\/ICNP.2013.6733664"},{"key":"ref62","first-page":"672","article-title":"Reliability-aware controller placement for software-defined networks","author":"hu","year":"0","journal-title":"Proc IFIP\/IEEE Int Symp IM"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/CC.2014.6821736"},{"key":"ref63","article-title":"HyperFlow: A distributed control plane for OpenFlow","author":"tootoonchian","year":"0","journal-title":"Proc USENIX Internet Netw Manage Conf Res Enterprise Netw"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/LCN.2010.5735752"},{"key":"ref140","doi-asserted-by":"publisher","DOI":"10.1145\/1592681.1592685"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1145\/2342441.2342466"},{"key":"ref141","doi-asserted-by":"publisher","DOI":"10.1016\/j.bjp.2013.12.015"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1145\/2377677.2377766"},{"key":"ref142","doi-asserted-by":"crossref","DOI":"10.17487\/rfc6830","article-title":"The locator\/ID separation protocol (LISP)","author":"farinacci","year":"2013"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1145\/1592681.1592684"},{"key":"ref143","doi-asserted-by":"publisher","DOI":"10.1002\/9780470772898"},{"key":"ref68","doi-asserted-by":"crossref","first-page":"279","DOI":"10.1145\/2034574.2034812","article-title":"Frenetic: A network programming language","volume":"46","author":"foster","year":"2011","journal-title":"SIGPlan Notices"},{"key":"ref144","first-page":"1","article-title":"Effective flow protection in OpenFlow rings","author":"sgambelluri","year":"0","journal-title":"Proc OFC\/NFOEC"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/1355734.1355746"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1145\/2342441.2342451"},{"key":"ref145","doi-asserted-by":"publisher","DOI":"10.1109\/NOMS.2014.6838393"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/2390231.2390239"},{"key":"ref109","article-title":"OpenFlow Firewall: A Floodlight Module","year":"0"},{"key":"ref95","doi-asserted-by":"publisher","DOI":"10.1109\/HOTI.2013.17"},{"key":"ref108","doi-asserted-by":"publisher","DOI":"10.1109\/IMIS.2013.55"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.1109\/ICCW.2013.6649444"},{"key":"ref107","doi-asserted-by":"publisher","DOI":"10.1109\/NOMS.2014.6838227"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.1109\/SDN4FNS.2013.6702547"},{"key":"ref106","doi-asserted-by":"publisher","DOI":"10.1109\/ICCSN.2011.6013582"},{"key":"ref92","first-page":"1","article-title":"Expressing and enforcing flow-based network security policies","author":"hinrichs","year":"2009"},{"key":"ref105","doi-asserted-by":"publisher","DOI":"10.1109\/NOMS.2014.6838228"},{"key":"ref91","doi-asserted-by":"publisher","DOI":"10.1145\/2342441.2342458"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.1109\/MILCOM.2013.172"},{"key":"ref90","first-page":"1","article-title":"Security for future software defined mobile networks","author":"liyanage","year":"0","journal-title":"Proc 9th Int Conf NGMAST"},{"key":"ref103","doi-asserted-by":"publisher","DOI":"10.1109\/MNET.2011.6085639"},{"key":"ref102","first-page":"229","article-title":"Snort: Lightweight intrusion detection for networks","volume":"99","author":"roesch","year":"0","journal-title":"Proc LISA"},{"key":"ref111","doi-asserted-by":"publisher","DOI":"10.1109\/COMSNETS.2014.6734922"},{"key":"ref112","doi-asserted-by":"publisher","DOI":"10.1109\/ICACT.2014.6779061"},{"key":"ref110","doi-asserted-by":"publisher","DOI":"10.1145\/2620728.2620749"},{"key":"ref98","doi-asserted-by":"publisher","DOI":"10.1109\/HPEC.2013.6670325"},{"key":"ref99","doi-asserted-by":"publisher","DOI":"10.1109\/ICCT.2013.6820345"},{"key":"ref96","doi-asserted-by":"publisher","DOI":"10.1109\/ICACT.2014.6778942"},{"key":"ref97","doi-asserted-by":"publisher","DOI":"10.1145\/2491185.2491189"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/OPNARC.2001.916839"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/1096536.1096541"},{"key":"ref12","article-title":"Maestro: A system for scalable OpenFlow control","author":"cai","year":"2010"},{"key":"ref13","first-page":"137","article-title":"SANE: A protection architecture for enterprise networks","author":"casado","year":"0","journal-title":"Proc Usenix Security"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/1282427.1282382"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2014.2320094"},{"key":"ref118","doi-asserted-by":"publisher","DOI":"10.1145\/1851275.1851262"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1007\/s11276-015-0973-5"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom.2013.179"},{"key":"ref117","doi-asserted-by":"publisher","DOI":"10.1145\/1402958.1402966"},{"key":"ref17","doi-asserted-by":"crossref","DOI":"10.1002\/9781118900253","author":"liyanage","year":"2015","journal-title":"Software Defined Mobile Networks (SDMN) Beyond LTE Network Architecture"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1145\/1868447.1868448"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2011.250"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1109\/NOMS.2012.6211961"},{"key":"ref119","doi-asserted-by":"publisher","DOI":"10.1145\/2390231.2390233"},{"key":"ref19","article-title":"Software driven networks problem statement","author":"nadeau","year":"2011"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2012.6364688"},{"key":"ref114","doi-asserted-by":"publisher","DOI":"10.1109\/NOMS.2014.6838323"},{"key":"ref113","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2010.03.005"},{"key":"ref116","doi-asserted-by":"publisher","DOI":"10.1109\/COMPSAC.2013.138"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1109\/ITC.2013.6662939"},{"key":"ref115","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCN.2013.6614094"},{"key":"ref120","doi-asserted-by":"publisher","DOI":"10.1145\/2491185.2491223"},{"key":"ref89","doi-asserted-by":"publisher","DOI":"10.1145\/2486001.2486022"},{"key":"ref121","doi-asserted-by":"publisher","DOI":"10.1145\/2491185.2491203"},{"key":"ref122","doi-asserted-by":"publisher","DOI":"10.1109\/WoWMoM.2014.6918983"},{"key":"ref123","doi-asserted-by":"publisher","DOI":"10.1145\/2535771.2535794"},{"key":"ref85","article-title":"Secure cloud computing with a virtualized network infrastructure","author":"hao","year":"0","journal-title":"Proc 2nd USENIX Conf Hot Topics Cloud Comput"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1145\/2043164.2018516"},{"key":"ref87","doi-asserted-by":"crossref","first-page":"161","DOI":"10.1007\/978-3-642-23644-0_9","article-title":"Revisiting traffic anomaly detection using software defined networking","author":"mehdi","year":"2011","journal-title":"Recent Advances in Intrusion Detection"},{"key":"ref88","article-title":"Extensible and scalable network monitoring using OpenSafe","author":"ballard","year":"0","journal-title":"Proc INM\/WREN"}],"container-title":["IEEE Communications Surveys & Tutorials"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9739\/7331734\/07226783.pdf?arnumber=7226783","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,4,10]],"date-time":"2025-04-10T17:23:57Z","timestamp":1744305837000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/7226783\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2015]]},"references-count":162,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1109\/comst.2015.2474118","relation":{},"ISSN":["1553-877X","2373-745X"],"issn-type":[{"value":"1553-877X","type":"electronic"},{"value":"2373-745X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2015]]}}}