{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,24]],"date-time":"2026-06-24T15:57:28Z","timestamp":1782316648904,"version":"3.54.5"},"reference-count":318,"publisher":"MDPI AG","issue":"11","license":[{"start":{"date-parts":[[2025,11,3]],"date-time":"2025-11-03T00:00:00Z","timestamp":1762128000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"Australian National Next Generation Technology Fund","award":["10385"],"award-info":[{"award-number":["10385"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Future Internet"],"abstract":"<jats:p>Over the last decade, Software-Defined Networking (SDN) has garnered increasing research interest for networking and security. This interest stems from the programmability and dynamicity offered by SDN, as well as the growing importance of SDN as a foundational technology of future telecommunications networks and the greater Internet. However, research into SDN security has focused disproportionately on the security of the control plane, resulting in the relative trivialization of data plane security methods and a corresponding lack of appreciation of the data plane in SDN security discourse. To remedy this, this paper provides a comprehensive review of SDN data plane security research, classified into three primary research domains and several sub-domains. The three primary research domains are as follows: security capabilities within the data plane, security of the SDN infrastructure, and dynamic routing within the data plane. Our work resulted in the identification of specific strengths and weaknesses in existing research, as well as promising future directions, based on novelty and overlap with emerging technology domains. The most striking future directions are the use of hybrid SDN architectures leveraging a programmable data plane, SDN for heterogeneous network security, and the development of trust-based methods for SDN management and security, including trust-based routing.<\/jats:p>","DOI":"10.3390\/fi17110503","type":"journal-article","created":{"date-parts":[[2025,11,3]],"date-time":"2025-11-03T17:32:01Z","timestamp":1762191121000},"page":"503","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["Securing the SDN Data Plane in Emerging Technology Domains: A Review"],"prefix":"10.3390","volume":"17","author":[{"ORCID":"https:\/\/orcid.org\/0009-0001-6236-8527","authenticated-orcid":false,"given":"Travis","family":"Quinn","sequence":"first","affiliation":[{"name":"School of Computers and Systems, University of New South Wales, Canberra 2612, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6626-7881","authenticated-orcid":false,"given":"Faycal","family":"Bouhafs","sequence":"additional","affiliation":[{"name":"School of Computers and Systems, University of New South Wales, Canberra 2612, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5293-6140","authenticated-orcid":false,"given":"Frank","family":"den Hartog","sequence":"additional","affiliation":[{"name":"School of Computers and Systems, University of New South Wales, Canberra 2612, Australia"},{"name":"Network Engineering and Cybersecurity Capability, University of Canberra, Canberra 2617, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2025,11,3]]},"reference":[{"key":"ref_1","unstructured":"Casado, M., Freedman, M.J., Pettit, J., Luo, J., McKeown, N., and Shenker, S. (2007, January 27\u201331). Ethane: Taking control of the enterprise. Proceedings of the SIGCOMM \u201907: Proceedings of the 2007 Conference on Applications, Technologies, Architectures, and Protocols for Computer Communications, Kyoto, Japan."},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"69","DOI":"10.1145\/1355734.1355746","article-title":"OpenFlow: Enabling innovation in campus networks","volume":"38","author":"McKeown","year":"2008","journal-title":"ACM SIGCOMM Comput. Commun. Rev."},{"key":"ref_3","unstructured":"Open Networking Group (2025, April 05). OpenFlow Switch Specification (v 1.5.1). Available online: https:\/\/opennetworking.org\/wp-content\/uploads\/2014\/10\/openflow-switch-v1.5.1.pdf."},{"key":"ref_4","doi-asserted-by":"crossref","first-page":"87","DOI":"10.1145\/2656877.2656890","article-title":"P4: Programming protocol-independent packet processors","volume":"44","author":"Bosshart","year":"2014","journal-title":"ACM SIGCOMM Comput. Commun. Rev."},{"key":"ref_5","unstructured":"P4 Language Consortium (2025, April 05). P4 Open Source Programming Language. Available online: https:\/\/p4.org\/."},{"key":"ref_6","doi-asserted-by":"crossref","first-page":"45820","DOI":"10.1109\/ACCESS.2022.3168972","article-title":"SDN security review: Threat taxonomy, implications and open challenges","volume":"10","author":"Rahouti","year":"2022","journal-title":"IEEE Access"},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"108","DOI":"10.1109\/MNET.2018.1700283","article-title":"Security threats in the data plane of software-defined networks","volume":"32","author":"Gao","year":"2018","journal-title":"IEEE Netw."},{"key":"ref_8","doi-asserted-by":"crossref","first-page":"97058","DOI":"10.1109\/ACCESS.2025.3575494","article-title":"A survey on data plane security in software-defined networks: Twoard adaptive security of data planes","volume":"13","author":"Tankovic","year":"2025","journal-title":"IEEE Access"},{"key":"ref_9","doi-asserted-by":"crossref","first-page":"1701","DOI":"10.1109\/COMST.2017.2689819","article-title":"A survey on the security of stateful SDN data planes","volume":"19","author":"Dargahi","year":"2017","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_10","doi-asserted-by":"crossref","unstructured":"Gupta, B., Perez, G., Agrawal, D., and Gupta, D. (2020). Software-defined network (SDN) data plane security: Issues, solutions and future directions. Handbook of Computer Networks and Cyber Security, Springer.","DOI":"10.1007\/978-3-030-22277-2"},{"key":"ref_11","doi-asserted-by":"crossref","first-page":"107597","DOI":"10.1016\/j.comnet.2020.107597","article-title":"A survey on stateful data plane in software defined networks","volume":"184","author":"Zhang","year":"2021","journal-title":"Comput. Netw."},{"key":"ref_12","first-page":"1257046","article-title":"A review of P4 programmable data planes for network security","volume":"2021","author":"Gao","year":"2021","journal-title":"Mob. Inf. Syst."},{"key":"ref_13","doi-asserted-by":"crossref","first-page":"108800","DOI":"10.1016\/j.comnet.2022.108800","article-title":"A survey on security applications of P4 programmable switches and a STRIDE-based vulnerability assessment","volume":"207","author":"AlSabeh","year":"2022","journal-title":"Comput. Netw."},{"key":"ref_14","doi-asserted-by":"crossref","first-page":"54373","DOI":"10.1109\/ACCESS.2023.3275756","article-title":"A survey on P4 challenges in software defined networks: P4 programming","volume":"11","author":"Goswami","year":"2023","journal-title":"IEEE Access"},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"47804","DOI":"10.1109\/ACCESS.2019.2910140","article-title":"A survey on data plane flexibility and programmability in software-defined networking","volume":"7","author":"Kaljic","year":"2019","journal-title":"IEEE Access"},{"key":"ref_16","first-page":"82","article-title":"The programmable data plane: Abstractions, architectures, algorithms, and applications","volume":"54","author":"Michel","year":"2021","journal-title":"ACM Comput. Surv."},{"key":"ref_17","doi-asserted-by":"crossref","first-page":"87094","DOI":"10.1109\/ACCESS.2021.3086704","article-title":"An exhaustive survey on P4 programmable data plane switches: Taxonomy, applications, challenges, and future trends","volume":"9","author":"Kfoury","year":"2021","journal-title":"IEEE Access"},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"103561","DOI":"10.1016\/j.jnca.2022.103561","article-title":"A survey on data plane programming with P4: Fundamentals, advances, and applied research","volume":"212","author":"Hauser","year":"2023","journal-title":"J. Netw. Comput. Appl."},{"key":"ref_19","doi-asserted-by":"crossref","first-page":"2317","DOI":"10.1109\/COMST.2015.2474118","article-title":"Security in software defined networks: A survey","volume":"17","author":"Ahmad","year":"2015","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_20","doi-asserted-by":"crossref","first-page":"73","DOI":"10.1109\/MCOM.2015.7120048","article-title":"Software-defined networking security: Pros and cons","volume":"53","author":"Dabbagh","year":"2015","journal-title":"IEEE Commun. Mag."},{"key":"ref_21","doi-asserted-by":"crossref","first-page":"79","DOI":"10.1016\/j.cose.2015.05.006","article-title":"Security of software defined networks: A survey","volume":"53","author":"Alsmadi","year":"2015","journal-title":"Comput. Secur."},{"key":"ref_22","doi-asserted-by":"crossref","first-page":"623","DOI":"10.1109\/COMST.2015.2453114","article-title":"A survey of security in software defined networks","volume":"18","author":"Natarajan","year":"2016","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_23","doi-asserted-by":"crossref","first-page":"6386","DOI":"10.1002\/sec.1759","article-title":"Research trends in security and DDoS in SDN","volume":"9","author":"Dayal","year":"2016","journal-title":"Secur. Commun. Netw."},{"key":"ref_24","first-page":"389","article-title":"A review of security, threats and mitigation approaches for SDN","volume":"8","author":"Krishnan","year":"2019","journal-title":"Int. J. Innov. Technol. Explor. Eng."},{"key":"ref_25","first-page":"298","article-title":"Security issues in software defined networking (SDN): Risks, challenges and potential solutions","volume":"10","author":"Iqbal","year":"2019","journal-title":"Int. J. Adv. Comput. Sci. Appl."},{"key":"ref_26","doi-asserted-by":"crossref","unstructured":"Isyaku, B., Zahid, M.S.M., Kamat, M.B., Abu Bakar, K., and Ghaleb, F.A. (2020). Software defined networking flow table management of OpenFlow switches performance and security challenges: A survey. Futur. Internet, 12.","DOI":"10.3390\/fi12090147"},{"key":"ref_27","doi-asserted-by":"crossref","first-page":"102595","DOI":"10.1016\/j.jnca.2020.102595","article-title":"Security in SDN: A comprehensive survey","volume":"159","author":"Chica","year":"2020","journal-title":"J. Netw. Comput. Appl."},{"key":"ref_28","doi-asserted-by":"crossref","unstructured":"Alhaj, A.N., and Dutta, N. (2021). Analysis of security attacks in SDN network: A comprehensive survey. Contemporary Issues in Communication, Cloud and Big Data Analytics, Springer.","DOI":"10.1007\/978-981-16-4244-9_3"},{"key":"ref_29","doi-asserted-by":"crossref","first-page":"122016","DOI":"10.1109\/ACCESS.2021.3109564","article-title":"A survey of the main security issues and solutions for the SDN architecture","volume":"9","author":"Jimenez","year":"2021","journal-title":"IEEE Access"},{"key":"ref_30","doi-asserted-by":"crossref","first-page":"108802","DOI":"10.1016\/j.comnet.2022.108802","article-title":"A comprehensive survey of vulnerability and information security in SDN","volume":"206","author":"Deb","year":"2022","journal-title":"Comput. Netw."},{"key":"ref_31","doi-asserted-by":"crossref","first-page":"69941","DOI":"10.1109\/ACCESS.2024.3393548","article-title":"Security control and data planes of SDN: A comprehensive review of traditional, AI, and MTD approaches to security solutions","volume":"12","author":"Audah","year":"2024","journal-title":"IEEE Access"},{"key":"ref_32","doi-asserted-by":"crossref","first-page":"91550","DOI":"10.1109\/ACCESS.2023.3307467","article-title":"On the (in)security of the control plane of SDN architecture: A survey","volume":"11","author":"Bhuiyan","year":"2023","journal-title":"IEEE Access"},{"key":"ref_33","doi-asserted-by":"crossref","unstructured":"Mahar, I.A., Libing, W., Maher, Z.A., and Rahu, G.A. (2024, January 8\u20139). A comprehensive survey of software defined networking and its security threats. Proceedings of the IEEE 1st Karachi Section Humanitarian Technology Conference (Khi-HTC), Tandojam, Pakistan.","DOI":"10.1109\/KHI-HTC60760.2024.10482096"},{"key":"ref_34","doi-asserted-by":"crossref","unstructured":"Farooq, M.S., Riaz, S., and Alvi, A. (2023). Security and privacy issues in software-defined networking (SDN): A systematic literature review. Electronics, 12.","DOI":"10.3390\/electronics12143077"},{"key":"ref_35","doi-asserted-by":"crossref","first-page":"3514","DOI":"10.1109\/TNET.2017.2748159","article-title":"Flow wars: Systemizing the attack surface and defenses in software-defined networks","volume":"25","author":"Yoon","year":"2017","journal-title":"IEEE Trans. Netw."},{"key":"ref_36","doi-asserted-by":"crossref","unstructured":"Raghunath, K., and Krishnan, P. (2018, January 10\u201312). Towards a secure SDN architecture. Proceedings of the 9th International Conference on Computing and Networking Technology (ICCNT), Amsterdam, The Netherlands.","DOI":"10.1109\/ICCCNT.2018.8494043"},{"key":"ref_37","doi-asserted-by":"crossref","first-page":"100289","DOI":"10.1016\/j.iot.2020.100289","article-title":"A survey on the architecture, application, and security of software defined networking: Challenges and open issues","volume":"12","author":"Nisar","year":"2020","journal-title":"Internet Things"},{"key":"ref_38","unstructured":"Gaur, K., Choudhary, P., Yadav, P., Jain, A., and Kumar, P. (2020, January 22\u201323). Software defined networking: A review on architecture, security and applications. Proceedings of the International Conference on Applied Scientific Computational Intelligence Using Data Science (ASCI 2020), Jaipur, India."},{"key":"ref_39","doi-asserted-by":"crossref","first-page":"36","DOI":"10.1109\/MCOM.2013.6553676","article-title":"Are we ready for SDN? Implementation challenges for software-defined networks","volume":"51","author":"Sezer","year":"2013","journal-title":"IEEE Commun. Mag."},{"key":"ref_40","doi-asserted-by":"crossref","first-page":"100289","DOI":"10.1145\/2602204.2602219","article-title":"The road to SDN: An intellectual history of programmable networks","volume":"44","author":"Feamster","year":"2014","journal-title":"ACM SIGCOMM Comput. Commun. Rev."},{"key":"ref_41","doi-asserted-by":"crossref","first-page":"302","DOI":"10.3390\/fi6020302","article-title":"Software-defined networking using OpenFlow: Protocols, applications and architectural design choices","volume":"6","author":"Braun","year":"2014","journal-title":"Futur. Internet"},{"key":"ref_42","doi-asserted-by":"crossref","first-page":"27","DOI":"10.1109\/COMST.2014.2330903","article-title":"A survey on software-defined networking","volume":"17","author":"Xia","year":"2015","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_43","doi-asserted-by":"crossref","first-page":"14","DOI":"10.1109\/JPROC.2014.2371999","article-title":"Software-defined networking: A comprehensive survey","volume":"103","author":"Kreutz","year":"2015","journal-title":"Proc. IEEE"},{"key":"ref_44","doi-asserted-by":"crossref","first-page":"5803","DOI":"10.1002\/sec.1737","article-title":"Software-defined networking (SDN): A survey","volume":"9","author":"Benzekki","year":"2016","journal-title":"Secur. Commun. Netw."},{"key":"ref_45","doi-asserted-by":"crossref","unstructured":"Ali, J., Lee, G.-M., Roh, B.-H., Ryu, D.K., and Park, G. (2020). Software-defined networking approaches for link failure recovery: A survey. Sustainability, 12.","DOI":"10.3390\/su12104255"},{"key":"ref_46","doi-asserted-by":"crossref","first-page":"121791","DOI":"10.1109\/ACCESS.2022.3222849","article-title":"Dynamic routing and failure recovery approaches for efficient resource utilization in OpenFlow-SDN: A survey","volume":"10","author":"Isyaku","year":"2022","journal-title":"IEEE Access"},{"key":"ref_47","doi-asserted-by":"crossref","first-page":"1872","DOI":"10.1109\/ACCESS.2017.2666200","article-title":"A survey on software-defined wireless sensor networks: Challenges and design requirements","volume":"5","author":"Kobo","year":"2017","journal-title":"IEEE Access"},{"key":"ref_48","doi-asserted-by":"crossref","first-page":"1761","DOI":"10.1109\/COMST.2020.2997475","article-title":"Complementing IoT services through software defined networking and edge computing: A comprehensive survey","volume":"22","author":"Rafique","year":"2020","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_49","doi-asserted-by":"crossref","first-page":"95397","DOI":"10.1109\/ACCESS.2019.2928564","article-title":"A survey of networking applications applying the software defined networking concept based on machine learning","volume":"7","author":"Zhao","year":"2019","journal-title":"IEEE Access"},{"key":"ref_50","doi-asserted-by":"crossref","first-page":"393","DOI":"10.1109\/COMST.2018.2866942","article-title":"A Survey of Machine Learning Techniques Applied to Software Defined Networking (SDN): Research Issues and Challenges","volume":"21","author":"Xie","year":"2019","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_51","doi-asserted-by":"crossref","first-page":"3089","DOI":"10.1007\/s10586-023-04069-9","article-title":"Deep learning for the security of software-defined networks: A review","volume":"26","author":"Taheri","year":"2023","journal-title":"Clust. Comput."},{"key":"ref_52","doi-asserted-by":"crossref","first-page":"12","DOI":"10.1007\/s44227-024-00055-8","article-title":"An exhaustive parametric analysis for securing SDN through traditional, AI\/ML, and blockchain approaches: A systematic review","volume":"13","author":"Shahzad","year":"2025","journal-title":"Int. J. Networked Distrib. Comput."},{"key":"ref_53","doi-asserted-by":"crossref","first-page":"146","DOI":"10.1109\/MNET.2024.3451330","article-title":"Is AI a trick or t(h)reat for securing programmable data planes?","volume":"38","author":"Bardhi","year":"2024","journal-title":"IEEE Netw."},{"key":"ref_54","doi-asserted-by":"crossref","first-page":"2542","DOI":"10.1109\/ACCESS.2015.2499271","article-title":"Software-defined network function virtualization: A survey","volume":"3","author":"Li","year":"2015","journal-title":"IEEE Access"},{"key":"ref_55","doi-asserted-by":"crossref","first-page":"833","DOI":"10.35378\/gujs.422000","article-title":"Virtual security functions and their placement in software defined networks: A survey","volume":"32","author":"Demirci","year":"2019","journal-title":"GAZI Univ. J. Sci."},{"key":"ref_56","doi-asserted-by":"crossref","first-page":"102424","DOI":"10.1016\/j.jnca.2019.102424","article-title":"Optimal placement of virtual network functions in software defined networks: A survey","volume":"147","author":"Demirci","year":"2019","journal-title":"J. Netw. Comput. Appl."},{"key":"ref_57","doi-asserted-by":"crossref","first-page":"1909","DOI":"10.1109\/COMST.2020.2982955","article-title":"A Survey of Moving Target Defenses for network security","volume":"22","author":"Sengupta","year":"2020","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_58","doi-asserted-by":"crossref","first-page":"1102","DOI":"10.1109\/COMST.2015.2402617","article-title":"Programmable networks-from software-defined radio to software-defined networking","volume":"17","author":"Macedo","year":"2015","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_59","first-page":"101065","article-title":"A survey on DoS\/DDoS attacks mathematical modelling for traditional, SDN and virtual networks","volume":"31","author":"Balarezo","year":"2022","journal-title":"Eng. Sci. Technol. Int. J."},{"key":"ref_60","doi-asserted-by":"crossref","unstructured":"Carrascal, D., Rojas, E., Arco, J.M., Lopez-Pajares, D., Alvarez-Horcajo, J., and Carral, J.A. (2023). A comprehensive survey of in-band control in SDN: Challenges and opportunities. Electronics, 12.","DOI":"10.3390\/electronics12061265"},{"key":"ref_61","unstructured":"Diouf, M., Ouya, S., Klein, J., and Bissyand\u00e9, T. (2025). Software security in software-defined networking: A systematic literature review. arXiv."},{"key":"ref_62","doi-asserted-by":"crossref","unstructured":"Moshref, M., Bhargava, A., Gupta, A., Yu, M., and Govindan, R. (2014, January 17\u201322). Flow-level state transition as a new switch primitive for SDN. Proceedings of the 2014 ACM conference on SIGCOMM (SIGCOMM14), Chicago, IL, USA.","DOI":"10.1145\/2619239.2631439"},{"key":"ref_63","doi-asserted-by":"crossref","first-page":"44","DOI":"10.1145\/2602204.2602211","article-title":"OpenState: Programming platform-independent stateful OpenFlow applications inside the switch","volume":"44","author":"Bianchi","year":"2014","journal-title":"ACM SIGCOMM Comput. Commun. Rev."},{"key":"ref_64","doi-asserted-by":"crossref","first-page":"3294","DOI":"10.1109\/TNET.2017.2726550","article-title":"SDPA: Toward a stateful data plane in software-defined networking","volume":"25","author":"Sun","year":"2017","journal-title":"IEEE\/ACM Trans. Netw."},{"key":"ref_65","doi-asserted-by":"crossref","unstructured":"Scholz, D., Gallenmuller, S., Stubbe, H., and Carle, G. (2020, January 1\u20134). SYN flood defense in programmable data planes. Proceedings of the 3rd P4 Workshop in Europe (EuroP4 2020), Part of CoNEXT 2020, New York, NY, USA.","DOI":"10.1145\/3426744.3431323"},{"key":"ref_66","unstructured":"Scholz, D., Gallenmuller, S., Stubbe, H., Jaber, B., Rouhi, M., and Carle, G. (2025, January 18). Me Love (SYN-) Cookies: SYN Flood Mitigation in Programmable Data Planes. Available online: https:\/\/arxiv.org\/pdf\/2003.03221."},{"key":"ref_67","doi-asserted-by":"crossref","unstructured":"Lin, T.-Y., Wu, J.-P., Hung, P.-H., Shao, C.-H., Wang, Y.-T., Cai, Y.-Z., and Tsai, M.-H. (2020, January 22\u201325). Mitigating SYN flooding Attack and ARP Spoofing in SDN Data Plane. Proceedings of the 21st Asia-Pacific Network Operations and Management Symposium (APNOMS), Daegu, Republic of Korea.","DOI":"10.23919\/APNOMS50412.2020.9236951"},{"key":"ref_68","unstructured":"Khooi, X.Z., Csikor, L., Divakaran, D.M., and Kang, M.S. (July, January 29). DIDA: Distributed in-network defense architecture against amplified reflection DDoS attacks. Proceedings of the 6th IEEE International Conference on Network Softwarization (NetSoft), Ghent, Belgium."},{"key":"ref_69","unstructured":"Friday, K., Kfoury, E., Bou-Harb, E., and Crichigno, J. (July, January 29). Towards a Unified In-Network DDoS Detection and Mitigation Strategy. Proceedings of the 6th IEEE International Conference on Network Softwarization (NetSoft), Ghent, Belgium."},{"key":"ref_70","doi-asserted-by":"crossref","unstructured":"Simsek, G., Bostan, H., Sarica, A.K., Sarikaya, E., Keles, A., Angin, P., Alemdar, H., and Onur, E. (2020, January 26\u201328). DroPPPP: A P4 Approach to Mitigating DoS Attacks in SDN. Proceedings of the International Workshop on Information Security Applications, Jeju Island, Republic of Korea.","DOI":"10.1007\/978-3-030-39303-8_5"},{"key":"ref_71","doi-asserted-by":"crossref","unstructured":"Dimolianis, M., Pavlidis, A., and Maglaris, V. (2020, January 24\u201327). A multi-feature DDoS detection schema on P4 network hardware. Proceedings of the 1st Workshop on Flexible Network Data Plane Processing (NETPROC@ICIN2020), Paris, France.","DOI":"10.1109\/ICIN48450.2020.9059327"},{"key":"ref_72","doi-asserted-by":"crossref","unstructured":"Zhang, M., Li, G., Wang, S., Liu, C., Chen, A., Hu, H., Gu, G., Li, Q., Xu, M., and Wu, J. (2020, January 23\u201326). Poseidon: Mitigating volumetric DDoS attacks with programmable switches. Proceedings of the Network and Distributed Systems Security (NDSS) Symposium, San Diego, CA, USA.","DOI":"10.14722\/ndss.2020.24007"},{"key":"ref_73","unstructured":"Liu, Z., Namkung, H., Nikolaidis, G., Lee, J., Kim, C., Jin, X., Braverman, V., Yu, M., and Sekar, V. (2021, January 11\u201313). Jaqen: A High-Performance Switch-Native Approach for Detecting and Mitigating Volumetric DDoS Attacks with Programmable Switches. Proceedings of the 30th USENIX Security Symposium, Online."},{"key":"ref_74","unstructured":"Xing, J., Wu, W., and Chen, A. (2021, January 11\u201313). Ripple: A programmable, decentralized link-flooding defense against adaptive adversaries. Proceedings of the 30th USENIX Security Symposium, Online."},{"key":"ref_75","doi-asserted-by":"crossref","unstructured":"Kuka, M., Vojanec, K., Kucera, J., and Benacek, P. (2019, January 24\u201325). Accelerated DDoS attacks mitigation using programmable data plane. Proceedings of the ACM\/IEEE Symposium on Architectures for Networking and Communications Systems (ANCS), Cambridge, UK.","DOI":"10.1109\/ANCS.2019.8901882"},{"key":"ref_76","unstructured":"Lapolli, A.C., Marques, J.A., and Gaspary, L.P. (2019, January 8\u201312). Offloading real-time DDoS attack detection to programmable data planes. Proceedings of the IFIP\/IEEE Symposium on Integrated Network and Service Management (IM), Arlington, WA, USA."},{"key":"ref_77","doi-asserted-by":"crossref","first-page":"1191","DOI":"10.1109\/TNSM.2021.3073597","article-title":"In-network volumetric DDoS victim identification using programmable commodity switches","volume":"18","author":"Ding","year":"2021","journal-title":"IEEE Trans. Netw. Serv. Manag."},{"key":"ref_78","doi-asserted-by":"crossref","first-page":"4019","DOI":"10.1109\/TDSC.2021.3116345","article-title":"Tracking normalized network traffic entropy to detect DDoS attacks in P4","volume":"19","author":"Ding","year":"2022","journal-title":"IEEE Trans. Dependable Secur. Comput."},{"key":"ref_79","doi-asserted-by":"crossref","unstructured":"Sivaraman, V., Narayana, S., Rottenstreich, O., Muthukrishnan, S., and Rexford, J. (2017, January 3\u20134). Heavy-hitter detection entirely in the data plane. Proceedings of the Symposium on SDN Research (SOSR17), Santa Clara, CA, USA.","DOI":"10.1145\/3050220.3063772"},{"key":"ref_80","doi-asserted-by":"crossref","unstructured":"Febro, A., Xiao, H., and Spring, J. (2018, January 23\u201327). Telephony denial of service defense at data plane (TDoSD@DP). Proceedings of the 2018 IEEE\/IFIP Network Operations and Management Symposium, Taipei, Taiwan.","DOI":"10.1109\/NOMS.2018.8406281"},{"key":"ref_81","doi-asserted-by":"crossref","unstructured":"Febro, A., Xiao, H., and Spring, J. (2019, January 15\u201318). Distributed SIP DDoS defense with P4. Proceedings of the IEEE Wireless Communications and Networking Conference (WCNC), Marrakesh, Morocco.","DOI":"10.1109\/WCNC.2019.8885926"},{"key":"ref_82","doi-asserted-by":"crossref","unstructured":"Mi, Y., and Wang, A. (2019, January 9\u201312). ML-Pushback: Machine learning based pushback defense against DDoS. Proceedings of the 15th International Conference on Emerging Networking EXperiments and Technologies (CoNEXT19), Orlando, FL, USA.","DOI":"10.1145\/3360468.3368188"},{"key":"ref_83","unstructured":"Gonz\u00e1lez, L.A.Q., Castanheira, L., Marques, J.A., and Schaeffer-Filho, A. (2021, January 16\u201321). BUNGEE: An adaptive pushback mechanism for DDoS detection and mitigation in P4 data planes. Proceedings of the IFIP\/IEEE International Symposium on Integrated Network Management (IM), Bordeaux, France."},{"key":"ref_84","doi-asserted-by":"crossref","first-page":"104688","DOI":"10.1109\/ACCESS.2020.2999668","article-title":"Detecting DoS attacks based on multi-features in SDN","volume":"8","author":"Yue","year":"2020","journal-title":"IEEE Access"},{"key":"ref_85","doi-asserted-by":"crossref","unstructured":"Musumeci, F., Ionata, V., Paolucci, F., Cugini, F., and Tornatore, M. (2020, January 7\u201311). Machine-learning-assisted DDoS attack detection with P4 language. Proceedings of the IEEE International Conference on Communications (ICC) (ICC2020), Dublin, Ireland.","DOI":"10.1109\/ICC40277.2020.9149043"},{"key":"ref_86","doi-asserted-by":"crossref","unstructured":"Zhang, W., Jing, S., and Zhao, C. (2023, January 17\u201321). Anti-DDoS attacks strategy of SDN data plane with data augmentation based on P4. Proceedings of the International Conference on High Performance Computing & Communications, Data Science & Systems, Smart City & Dependability in Sensor, Cloud & Big Data Systems & Application (HPCC\/DSS\/SmartCity\/DependSys), Melbourne, Australia.","DOI":"10.1109\/HPCC-DSS-SmartCity-DependSys60770.2023.00055"},{"key":"ref_87","doi-asserted-by":"crossref","unstructured":"Ndonda, G.K., and Sadre, R. (2018, January 29\u201330). A two-level intrusion detection system for industrial control system networks using P4. Proceedings of the 5th International Symposium for ICS & SCADA Cyber Security Research 2018 (ICS-CSR 2018), Hamburg, Germany.","DOI":"10.14236\/ewic\/ICS2018.4"},{"key":"ref_88","doi-asserted-by":"crossref","unstructured":"Lewis, B., Broadbent, M., and Race, N. (2019, January 12\u201314). P4ID: P4 enhanced intrusion detection. Proceedings of the IEEE Conference on Network Function Virtualization and Software Defined Networks (NFV-SDN), Dallas, TX, USA.","DOI":"10.1109\/NFV-SDN47374.2019.9040044"},{"key":"ref_89","doi-asserted-by":"crossref","first-page":"e2162","DOI":"10.1002\/nem.2162","article-title":"E-Replacement: Efficient scanner data collection method in P4-based software-defined networks","volume":"31","author":"Cai","year":"2021","journal-title":"Int. J. Netw. Manag."},{"key":"ref_90","doi-asserted-by":"crossref","unstructured":"Golchin, P., Zhou, C., Agnihotri, P., Agnihotri, P., Hajizadeh, M., Kundel, R., and Steinmetz, R. (November, January 30). CML-IDS: Enhancing intrusion detection in SDN through collaborative machine learning. Proceedings of the 19th International Conference on Network and Service Management (CNSM 2023), Niagara Falls, ON, Canada.","DOI":"10.23919\/CNSM59352.2023.10327863"},{"key":"ref_91","doi-asserted-by":"crossref","first-page":"110162","DOI":"10.1016\/j.comnet.2023.110162","article-title":"Introducing packet-level analysis in programmable data planes to advance network intrusion detection","volume":"239","author":"Knob","year":"2024","journal-title":"Comput. Netw."},{"key":"ref_92","doi-asserted-by":"crossref","unstructured":"Sanghi, A., Kadiyala, K.P., Tammana, P., and Joshi, S. (2021, January 27). Anomaly detection in data plane systems using packet execution paths. Proceedings of the ACM SIGCOMM 2021 Workshop on Secure Programmable Network Infrastructure, New York, NY, USA.","DOI":"10.1145\/3472873.3472880"},{"key":"ref_93","unstructured":"Qin, Q., Poularakis, K., Leung, K.K., and Tassiulas, L. (2020, January 22\u201325). Line-speed and scalable intrusion detection at the network edge via federated learning. Proceedings of the IFIP Networking Conference (Networking), Paris, France."},{"key":"ref_94","unstructured":"Gutierrez, S.A., Branch, J.W., Gaspary, L.P., and Botero, J.F. (2025, January 18). Watching Smartly from the Bottom: Intrusion Detection Revamped Through Programmable Networks and Artificial Intelligence. Available online: https:\/\/arxiv.org\/pdf\/2106.00239."},{"key":"ref_95","doi-asserted-by":"crossref","unstructured":"Brandino, B., Casas, P., and Gramp\u00edn, E. (2024, January 28\u201331). Detecting attacks at switching speed: AI\/ML and active learning for in-network monitoring in data planes. Proceedings of the IEEE 32nd International Conference on Network Protocols (ICNP 2024), Charleroi, Belgium.","DOI":"10.1109\/ICNP61940.2024.10858538"},{"key":"ref_96","doi-asserted-by":"crossref","unstructured":"Brandino, B., Grampin, E., Dietz, K., Wehner, N., Seufert, M., Ho\u00dffeld, T., and Casas, P. (2024, January 21\u201324). HALIDS: A hardware-assisted machine learning IDS for in-network monitoring. Proceedings of the 8th Network Traffic Measurement and Analysis Conference (TMA 2024), Dresden, Germany.","DOI":"10.23919\/TMA62044.2024.10559083"},{"key":"ref_97","unstructured":"Maheswaran, N., Bose, S., Gokulraj, G., Anitha, T., Shruthi, T., and Vijayaraj, G. (2025, January 7\u20138). Intrusion prevention system in SDN environment for 6G networks using deep learning. Proceedings of the 6th International Conference on Mobile Computing and Sustainable Informatics (ICMCSI-2025), Lalitpur, Nepal."},{"key":"ref_98","doi-asserted-by":"crossref","first-page":"319","DOI":"10.1109\/MNET.2025.3544828","article-title":"Distributing intelligence in 6G programmable data planes for effective in-network intrusion prevention","volume":"39","author":"Spina","year":"2025","journal-title":"IEEE Netw."},{"key":"ref_99","doi-asserted-by":"crossref","first-page":"2773","DOI":"10.1109\/TNSM.2024.3382393","article-title":"Marina: Realizing ML-driven real-time network traffic monitoring at terabit scale","volume":"21","author":"Seufert","year":"2024","journal-title":"IEEE Trans. Netw. Serv. Manag."},{"key":"ref_100","unstructured":"Wang, H., Tan, X., Yuan, S., Li, M., Wu, J., and Zheng, Q. (November, January 30). A two-phase encrypted traffic classification scheme in programmable data plane. Proceedings of the IEEE International Symposium on Parallel and Distributed Processing with Applications (ISPA), Kaifeng, China."},{"key":"ref_101","doi-asserted-by":"crossref","unstructured":"Sanvito, D., Moro, D., and Capone, A. (2017, January 3\u20137). Towards traffic classification offloading to stateful SDN data planes. Proceedings of the IEEE Conference on Network Softwarization (NetSoft 2017), Bologna, Italy.","DOI":"10.1109\/NETSOFT.2017.8004227"},{"key":"ref_102","doi-asserted-by":"crossref","unstructured":"Hypolite, J., Sonchack, J., Hershkop, S., Dautenhahn, N., DeHon, A., and Smith, J.M. (2020, January 1\u20134). DeepMatch: Practical deep packet inspection in the data plane using network processors. Proceedings of the 16th International Conference on Emerging Networking EXperiments and Technologies (CoNEXT20), Barcelona, Spain.","DOI":"10.1145\/3386367.3431290"},{"key":"ref_103","doi-asserted-by":"crossref","unstructured":"AlSabeh, A., Kfoury, E., Crichigno, J., and Bou-Harb, E. (2022, January 28). P4DDPI: Securing P4-programmable data plane networks via DNS deep packet inspection. Proceedings of the Workshop on Measurements, Attacks, and Defenses for the Web (MADWeb), San Diego, CA, USA.","DOI":"10.14722\/madweb.2022.23012"},{"key":"ref_104","doi-asserted-by":"crossref","unstructured":"Gupta, S., Gosain, D., Kwon, M., and Acharya, H.B. (2023, January 17\u201320). DeeP4R: Deep packet inspection in P4 using packet recirculation. Proceedings of the IEEE Conference on Computer Communications (INFOCOM 2023), New York, NY, USA.","DOI":"10.1109\/INFOCOM53939.2023.10228996"},{"key":"ref_105","unstructured":"Tryfonas, T. (2016). Security middleware programming using P4. International Conference on Human Aspects of Information Security, Privacy, and Trust, Springer."},{"key":"ref_106","doi-asserted-by":"crossref","unstructured":"Cao, J., Bi, J., Zhou, Y., and Zhang, C. (2018, January 20\u201325). CoFilter: A high-performance switch-assisted stateful packet filter. Proceedings of the ACM SIGCOMM 2018 Conference on Posters and Demos, Budapest, Hungary.","DOI":"10.1145\/3234200.3234251"},{"key":"ref_107","doi-asserted-by":"crossref","unstructured":"Datta, R., Choi, S., Chowdhary, A., and Park, Y. (2018, January 29\u201331). P4Guard: Designing P4 based firewall. Proceedings of the 2018 IEEE Military Communications Conference (MILCOM), Los Angeles, CA, USA.","DOI":"10.1109\/MILCOM.2018.8599726"},{"key":"ref_108","doi-asserted-by":"crossref","unstructured":"Ricart-Sanchez, R., Malagon, P., Alcarez-Calero, J.M., and Wang, Q. (2019, January 8\u201313). NetFPGA-based firewall solution for 5G multi-tenant architectures. Proceedings of the 2019 IEEE International Conference on Edge Computing (EDGE), Milan, Italy.","DOI":"10.1109\/EDGE.2019.00037"},{"key":"ref_109","doi-asserted-by":"crossref","unstructured":"Afek, Y., Bremler-Barr, A., and Shafir, L. (2017, January 1\u20134). Network anti-spoofing with SDN data plane. Proceedings of the IEEE Conference on Computer Communications (INFOCOM 2017), Atlanta, CA, USA.","DOI":"10.1109\/INFOCOM.2017.8057008"},{"key":"ref_110","doi-asserted-by":"crossref","unstructured":"Gondaliya, H., Sankaran, G.C., and Sivalingam, K.M. (2020, January 1). Comparative Evaluation of IP Address Anti-Spoofing Mechanisms Using a P4\/NetFPGA-Based Switch. Proceedings of the 3rd P4 Workshop in Europe (EuroP4 2020), Part of CoNEXT 2020, Barcelona, Spain.","DOI":"10.1145\/3426744.3431320"},{"key":"ref_111","doi-asserted-by":"crossref","unstructured":"Kuang, P., Liu, Y., and He, L. (2020, January 7\u201311). P4DAD: Securing duplicate address detection using P4. Proceedings of the IEEE International Conference on Communications (ICC), Dublin, Ireland.","DOI":"10.1109\/ICC40277.2020.9149310"},{"key":"ref_112","doi-asserted-by":"crossref","unstructured":"Li, G., Zhang, M., Liu, C., Kong, X., Chen, A., Gu, G., and Duan, H. (2019, January 8\u201310). NetHCF: Enabling Line-Rate and Adaptive Spoofed IP Traffic Filtering. Proceedings of the IEEE 27th International Conference on Network Protocols (ICNP), Chicago, IL, USA.","DOI":"10.1109\/ICNP.2019.8888057"},{"key":"ref_113","unstructured":"Datta, T., Feamster, N., Rexford, J., and Wang, L. (2019, January 13). SPINE: Surveillance protection in the network elements. Proceedings of the 9th USENIX Workshop on Free and Open Communications on the Internet (FOCI 19), Santa Clara, CA, USA."},{"key":"ref_114","doi-asserted-by":"crossref","unstructured":"Chang, D., Sun, W., and Yang, Y. (2019, January 28\u201330). A SDN proactive defense mechanism based on IP transformation. Proceedings of the 2nd International Conference on Safety Produce Informatization (IICSPI), Chongqing, China.","DOI":"10.1109\/IICSPI48186.2019.9095944"},{"key":"ref_115","unstructured":"Govil, Y., Wang, L., and Rexford, J. (2020, January 11). MIMIQ: Masking IPs with migration in QUIC. Proceedings of the USENIX Workshop on Free and Open Communications on the Internet (FOCI), Austin, TX, USA."},{"key":"ref_116","doi-asserted-by":"crossref","unstructured":"Liu, G., Quan, W., Cheng, N., Lu, N., Zhang, H., and Shen, X. (2020, January 20). P4NIS: Improving network immunity against eavesdropping with programmable data planes. Proceedings of the IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS), Vancouver, BC, Canada.","DOI":"10.1109\/INFOCOMWKSHPS50562.2020.9162975"},{"key":"ref_117","doi-asserted-by":"crossref","first-page":"6578","DOI":"10.1109\/JIOT.2020.3048842","article-title":"Softwarized IoT network immunity against eavesdropping with programmable data planes","volume":"8","author":"Liu","year":"2021","journal-title":"IEEE Internet Things"},{"key":"ref_118","unstructured":"Meier, R., Tsankov, P., Lenders, V., Vanbever, L., and Vechev, M. (2018, January 15\u201317). NetHide: Secure and practical network topology obfuscation. Proceedings of the 27th USENIX Security Symposium, Baltimore, MD, USA."},{"key":"ref_119","unstructured":"Moghaddam, H.M., and Mosenia, A. (2025, January 17). Anonymizing Masses: Practical Light-Weight Anonymity at the Network Level. Available online: https:\/\/arxiv.org\/abs\/1911.09642."},{"key":"ref_120","doi-asserted-by":"crossref","unstructured":"Kim, H., and Gupta, A. (2019, January 23). ONTAS: Flexible and scalable online network traffic anonymization system. Proceedings of the 2019 Workshop on Network Meets AI & ML (NetAI19), Beijing, China.","DOI":"10.1145\/3341216.3342208"},{"key":"ref_121","doi-asserted-by":"crossref","unstructured":"Almaini, A., Al-Dubai, A., Romdhani, I., and Schramm, M. (2019, January 21\u201323). Delegation of authentication to the data plane in software-defined networks. Proceedings of the 2019 IEEE International Conferences on Ubiquitous Computing & Communications (IUCC) and Data Science and Computational Intelligence (DSCI) and Smart Computing, Networking and Services (SmartCNS), Shenyang, China.","DOI":"10.1109\/IUCC\/DSCI\/SmartCNS.2019.00038"},{"key":"ref_122","doi-asserted-by":"crossref","first-page":"291","DOI":"10.1007\/s00607-020-00835-4","article-title":"Lightweight edge authentication for software defined networks","volume":"103","author":"Almaini","year":"2021","journal-title":"Computing"},{"key":"ref_123","doi-asserted-by":"crossref","unstructured":"Zaballa, E.O., Franco, D., Zhou, Z., and Berger, M.S. (2020, January 24\u201327). P4Knocking: Offloading host-based firewall functionalities to the network. Proceedings of the 1st Workshop on Flexible Network Data Plane Processing (NETPROC@ICIN2020), Paris, France.","DOI":"10.1109\/ICIN48450.2020.9059298"},{"key":"ref_124","doi-asserted-by":"crossref","unstructured":"Qin, Y., Quan, W., Song, F., Zhang, L., Liu, G., and Liu, M. (2020, January 29\u201331). Flexible encryption for reliable transmission based on the P4 programmable platform. Proceedings of the Information Communication Technologies Conference, Nanjing, China.","DOI":"10.1109\/ICTC49638.2020.9123251"},{"key":"ref_125","doi-asserted-by":"crossref","unstructured":"Chen, X. (2020, January 10). Implementing AES encryption on programmable switches via scrambled lookup tables. Proceedings of the 2020 ACM SIGCOMM Workshop on Secure Programmable Network Infrastructure (SPIN20), Online.","DOI":"10.1145\/3405669.3405819"},{"key":"ref_126","doi-asserted-by":"crossref","unstructured":"Oliveira, I., Neto, E., Immich, R., Fontes, R., Neto, A., Rodriguez, F., and Rothenberg, C.E. (2021, January 9). Dh-aes-p4: On-premise encryption and in-band key-exchange in P4 fully programmable data planes. Proceedings of the 4th Workshop on Mobility Support in Slice-Based Network Control for Heterogeneous Environments (IEEE NFV-SDN 2021), Heraklion, Greece.","DOI":"10.1109\/NFV-SDN53031.2021.9665012"},{"key":"ref_127","doi-asserted-by":"crossref","first-page":"58845","DOI":"10.1109\/ACCESS.2020.2982859","article-title":"P4-MACsec: Dynamic topology monitoring and data layer protection with MACsec in P4-based SDN","volume":"8","author":"Hauser","year":"2020","journal-title":"IEEE Access"},{"key":"ref_128","doi-asserted-by":"crossref","first-page":"139567","DOI":"10.1109\/ACCESS.2020.3012738","article-title":"P4-IPsec: Site-to-site and host-to-site VPN with IPsec in P4-based SDN","volume":"8","author":"Hauser","year":"2020","journal-title":"IEEE Access"},{"key":"ref_129","doi-asserted-by":"crossref","unstructured":"Scholz, D., Oeldemann, A., Geyer, F., Gallenm\u00fcller, S., Stubbe, H., Wild, T., Herkersdorf, A., and Carle, G. (2019, January 24\u201325). Cryptographic hashing in P4 data planes. Proceedings of the ACM\/IEEE Symposium on Architectures for Networking and Communications Systems (ANCS 2019), Cambridge, UK.","DOI":"10.1109\/ANCS.2019.8901886"},{"key":"ref_130","doi-asserted-by":"crossref","unstructured":"Narayanan, N., Sankaran, G., and Sivalingam, K. (2019, January 16\u201319). Mitigation of security attacks in the SDN data plane using P4-enabled switches. Proceedings of the 2019 IEEE International Conference on Advanced Networks and Telecommunications Systems (ANTS), Goa, India.","DOI":"10.1109\/ANTS47819.2019.9118071"},{"key":"ref_131","doi-asserted-by":"crossref","first-page":"182814","DOI":"10.1109\/ACCESS.2019.2956805","article-title":"Learning based adaptive network immune mechanism to defense eavesdropping attacks","volume":"7","author":"Liu","year":"2019","journal-title":"IEEE Access"},{"key":"ref_132","doi-asserted-by":"crossref","unstructured":"Xing, J., Wu, W., and Chen, A. (2019, January 13\u201315). Architecting programmable data plane defenses into the network with FastFlex. Proceedings of the 18th ACM Workshop on Hot Topics in Networks (HotNets 2019), Princeton, NJ, USA.","DOI":"10.1145\/3365609.3365860"},{"key":"ref_133","doi-asserted-by":"crossref","unstructured":"Castanheira, L., Parizotto, R., and Schaeffer-Filho, A.E. (2019, January 20\u201324). FlowStalker: Comprehensive traffic flow monitoring on the data plane using P4. Proceedings of the 2019 IEEE International Conference on Communications (ICC 2019), Shanghai, China.","DOI":"10.1109\/ICC.2019.8761197"},{"key":"ref_134","doi-asserted-by":"crossref","unstructured":"Gori, G., Rinieri, L., Sadi, A.A., Melis, A., Callegati, F., and Prandini, M. (2023). GRAPH4: A security monitoring architecture based on data plane anomaly detection metrics calculated over attack graphs. Future Internet, 15.","DOI":"10.3390\/fi15110368"},{"key":"ref_135","doi-asserted-by":"crossref","unstructured":"Ganesan, A., and Sarac, K. (2022, January 4\u20138). Attack detection and mitigation using intelligent data planes in SDNs. Proceedings of the IEEE Global Communications Conference: Communication & Information Systems Security (GLOBECOM 2022), Rio de Janeiro, Brazil.","DOI":"10.1109\/GLOBECOM48099.2022.10000925"},{"key":"ref_136","doi-asserted-by":"crossref","first-page":"28","DOI":"10.1007\/s10922-022-09714-z","article-title":"SECAP switch\u2013defeating topology poisoning attacks using P4 data planes","volume":"31","author":"Smyth","year":"2023","journal-title":"J. Netw. Syst. Manag."},{"key":"ref_137","unstructured":"Zhou, G., Liu, Z., Fu, C., Li, Q., and Xu, K. (2023, January 9\u201311). An efficient design of intelligent network data plane. Proceedings of the 32nd USENIX Security Symposium, Anaheim, CA, USA."},{"key":"ref_138","doi-asserted-by":"crossref","unstructured":"Nascimento, A., Abreu, D., Riker, A., and Abel\u00e9m, A. (2023, January 15\u201317). AID-SDN: Advanced intelligent defense for SDN using P4 and machine learning. Proceedings of the IEEE Latin-American Conference on Communications (LATINCOM), Panama City, Panama.","DOI":"10.1109\/LATINCOM59467.2023.10361883"},{"key":"ref_139","doi-asserted-by":"crossref","first-page":"A84","DOI":"10.1364\/JOCN.11.000A84","article-title":"P4 edge node enabling stateful traffic engineering and cyber security","volume":"11","author":"Paolucci","year":"2019","journal-title":"J. Opt. Commun. Netw."},{"key":"ref_140","doi-asserted-by":"crossref","unstructured":"Hwang, R.-H., Nguyen, V.-L., and Lin, P.-C. (2018, January 16\u201318). StateFit: A security framework for SDN programmable data plane model. Proceedings of the 15th International Symposium on Pervasive Systems, Algorithms and Networks, Yichang, China.","DOI":"10.1109\/I-SPAN.2018.00035"},{"key":"ref_141","doi-asserted-by":"crossref","unstructured":"Grigoryan, G., and Liu, Y. (2018, January 1\u20133). LAMP: Prompt Layer 7 attack mitigation with programmable data planes. Proceedings of the IEEE 17th International Symposium on Network Computing and Applications (NCA), Cambridge, MA, USA.","DOI":"10.1109\/NCA.2018.8548136"},{"key":"ref_142","unstructured":"Kang, Q., Xue, L., Morrison, A., Tang, Y., Chen, A., and Luo, X. (2020, January 12\u201314). Programmable in-network security for context-aware BYOD policies. Proceedings of the 29th USENIX Security Symposium, Boston, MA, USA."},{"key":"ref_143","doi-asserted-by":"crossref","first-page":"102806","DOI":"10.1016\/j.jnca.2020.102806","article-title":"An efficient pipeline processing scheme for programming Protocol-independent Packet Processors","volume":"171","author":"Yang","year":"2020","journal-title":"J. Netw. Comput. Appl."},{"key":"ref_144","unstructured":"Xing, J., Kang, Q., and Chen, A. (2020, January 12\u201314). NetWarden: Mitigating network covert channels while preserving performance. Proceedings of the 29th USENIX Security Symposium, San Diego, CA, USA."},{"key":"ref_145","unstructured":"Laraba, A., Francois, J., Chrisment, I., Chowdhury, S.R., and Boutaba, R. (2020, January 22\u201326). Defeating protocol abuse with P4: Application to explicit congestion notification. Proceedings of the IFIP Networking Conference (Networking), Paris, France."},{"key":"ref_146","doi-asserted-by":"crossref","unstructured":"Barradas, D., Santos, N., Rodrigues, L., Signorello, S., Ramos, F.M.V., and Madeira, A. (2021, January 21\u201325). FlowLens: Enabling Efficient Flow Classification for ML-based Network Security Applications. Proceedings of the Network and Distributed Systems Security (NDSS) Symposium, Online.","DOI":"10.14722\/ndss.2021.24067"},{"key":"ref_147","unstructured":"Bai, S., Kim, H., and Rexford, J. (July, January 27). Passive OS Fingerprinting on Commodity Switches. Proceedings of the IEEE 8th International Conference on Network Softwarization (NetSoft), Milan, Italy."},{"key":"ref_148","doi-asserted-by":"crossref","first-page":"101629","DOI":"10.1016\/j.cose.2019.101629","article-title":"P4 to-blockchain: A secure blockchain-enabled packet parser for software defined networking","volume":"88","author":"Yazdinejad","year":"2020","journal-title":"Comput. Secur."},{"key":"ref_149","doi-asserted-by":"crossref","first-page":"1874","DOI":"10.1109\/OJCOMS.2021.3101366","article-title":"Network function decomposition and offloading on heterogeneous networks with programmable data planes","volume":"2","author":"Moro","year":"2021","journal-title":"IEEE Open J. Commun. Soc."},{"key":"ref_150","unstructured":"Internet Engineering Task Force (2021). Request for Comments (RFC) 9000 QUIC: A UDP-Based Multiplexed and Secure Transport, RFC Editor."},{"key":"ref_151","doi-asserted-by":"crossref","unstructured":"Bouet, M., Leguay, J., and Conan, V. (2013, January 18\u201320). Cost-based placement of virtualized deep packet inspection functions in SDN. Proceedings of the IEEE Military Communications Conference (MILCOM-IEEE 2013), San Diego, CA, USA.","DOI":"10.1109\/MILCOM.2013.172"},{"key":"ref_152","doi-asserted-by":"crossref","unstructured":"Cerrato, I., Jungel, T., Palesandro, A., Risso, F., Sune, M., and Woesner, H. (2014, January 1\u20133). User-specific network service functions in an SDN-enabled network node. Proceedings of the Third European Workshop on Software-Defined Networks, Budapest, Hungary.","DOI":"10.1109\/EWSDN.2014.26"},{"key":"ref_153","doi-asserted-by":"crossref","first-page":"48","DOI":"10.1109\/MNET.2015.7113225","article-title":"An extended SDN architecture for network function virtualization with a case study on intrusion prevention","volume":"29","author":"Lin","year":"2015","journal-title":"IEEE Netw."},{"key":"ref_154","doi-asserted-by":"crossref","first-page":"123","DOI":"10.1016\/j.jnca.2017.05.010","article-title":"Enabling adaptive routing service customization via the integration of SDN and NFV","volume":"93","author":"Bu","year":"2017","journal-title":"J. Netw. Comput. Appl."},{"key":"ref_155","first-page":"1046","article-title":"Unified programmability of virtualized network functions and software-defined wireless networks","volume":"14","author":"Mayer","year":"2017","journal-title":"IEEE\/ACM Trans. Netw."},{"key":"ref_156","doi-asserted-by":"crossref","first-page":"1488","DOI":"10.1109\/TNET.2018.2829882","article-title":"OpenFunction: An extensible data plane abstraction protocol for platform-independent software-defined middleboxes","volume":"26","author":"Tian","year":"2018","journal-title":"IEEE\/ACM Trans. Netw."},{"key":"ref_157","doi-asserted-by":"crossref","unstructured":"Park, T., Kim, Y., Yegneswaran, V., Porras, P., Xu, Z., Park, K., and Shin, S. (2019, January 19\u201320). DPX: Data-plane extensions for SDN security service instantiation. Proceedings of the International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment, Gothenburg, Sweden.","DOI":"10.1007\/978-3-030-22038-9_20"},{"key":"ref_158","doi-asserted-by":"crossref","first-page":"102976","DOI":"10.1016\/j.cose.2022.102976","article-title":"Extended data plane architecture for in-network security services in software-defined networks","volume":"124","author":"Kim","year":"2023","journal-title":"Comput. Secur."},{"key":"ref_159","unstructured":"Deng, J., Hu, H., Li, H., Pan, Z., Wang, K.-C., Ahn, G.-J., Bi, J., and Park, Y. (2015, January 18\u201321). VNGuard: An NFV\/SDN combination framework for provisioning and managing virtual Firewalls. Proceedings of the IEEE Conference on Network Function Virtualization and Software Defined Network (NFV-SDN), San Francisco, CA, USA."},{"key":"ref_160","first-page":"295","article-title":"Elastic Virtual Honeypot System for SDNFV-based networks","volume":"12","author":"Thang","year":"2020","journal-title":"Int. J. Commun. Netw. Inf. Secur."},{"key":"ref_161","doi-asserted-by":"crossref","first-page":"154","DOI":"10.1109\/MNET.021.1900599","article-title":"Enhancing 5G SDN\/NFV edge with P4 data plane programmability","volume":"35","author":"Paolucci","year":"2021","journal-title":"IEEE Netw."},{"key":"ref_162","doi-asserted-by":"crossref","unstructured":"Das, D., Banerjee, S., Dasgupta, K., Chatterjee, P., Ghosh, U., and Biswas, U. (2023, January 4\u20137). Blockchain enabled SDN framework for security management in 5G applications. Proceedings of the 24th International Conference on Distributed Computing and Networking, Kharagpur, India.","DOI":"10.1145\/3571306.3571445"},{"key":"ref_163","unstructured":"Aguado, A., Hugues-Salas, E., Haigh, P.A., Marhuenda, J., Price, A.B., Sibson, P., Kennard, J.E., Erven, C., Rarity, J.G., and Thompson, M.G. (2016, January 18\u201322). First experimental demonstration of secure NFV orchestration over an SDN-controlled optical network with time-shared quantum key distribution. Proceedings of the 42nd European Conference and Exhibition on Optical Communications, D\u00fcsseldorf, Germany."},{"key":"ref_164","doi-asserted-by":"crossref","first-page":"1357","DOI":"10.1109\/JLT.2016.2646921","article-title":"Secure NFV orchestration over an SDN-controlled optical network with time-shared quantum key distribution resources","volume":"35","author":"Aguado","year":"2017","journal-title":"J. Lightwave Technol."},{"key":"ref_165","doi-asserted-by":"crossref","first-page":"20","DOI":"10.1109\/MCOM.2019.1800763","article-title":"The engineering of software-defined quantum key distribution networks","volume":"57","author":"Aguado","year":"2019","journal-title":"IEEE Commun. Mag."},{"key":"ref_166","unstructured":"Peng, Y., Wu, C., Zhao, B., Yu, W., Liu, B., and Qiao, S. (, January 18\u201320). QKDFlow: QKD based secure communication towards the OpenFlow interface in SDN. Proceedings of the 4th International Conference on Geo-Informatics in Resource Management and Sustainable Ecosystem (GRMSE2016), Hong Kong, China."},{"key":"ref_167","doi-asserted-by":"crossref","first-page":"453","DOI":"10.3390\/quantum2030032","article-title":"Demonstration of software defined network services utilizing quantum key distribution fully integrated with standard telecommunication network","volume":"2","author":"Lopez","year":"2020","journal-title":"Quantum Rep."},{"key":"ref_168","unstructured":"Lopez, V., Pastor, A., Lopez, D., Aguado, A., and Martin, V. (2023). MadQCI: A heterogeneous and scalable SDN QKD network deployed in production facilities. arXiv."},{"key":"ref_169","doi-asserted-by":"crossref","unstructured":"Tessinari, R.S., Arabul, E., Alia, O., Muqaddas, A.S., Kanellos, G.T., Nejabati, R., and Simeonidou, D. (2021, January 6\u201311). Demonstration of a dynamic QKD network control using a QKD-aware SDN application over a programmable hardware encryptor. Proceedings of the Optical Fiber Communication Conference (OFC2021), Washington, DC, USA.","DOI":"10.1364\/OFC.2021.M2B.3"},{"key":"ref_170","doi-asserted-by":"crossref","unstructured":"Arabul, E., Tessinari, R.S., Alia, O., Hugues-Salas, E., Kanellos, G.T., Nejabati, R., and Simeonidou, D. (2021, January 6\u201311). Experimental demonstration of programmable 100 Gb\/s SDN-enabled encryptors\/decryptors for QKD networks. Proceedings of the Optical Fiber Communication Conference (OFC 2021), Washington, DC, USA.","DOI":"10.1364\/OFC.2021.Tu1I.2"},{"key":"ref_171","doi-asserted-by":"crossref","first-page":"A50","DOI":"10.1364\/JOCN.439677","article-title":"100 Gb\/s dynamically programmable SDN-enabled hardware encryptor for optical networks","volume":"14","author":"Arabul","year":"2022","journal-title":"J. Opt. Commun. Netw."},{"key":"ref_172","doi-asserted-by":"crossref","first-page":"9","DOI":"10.36244\/ICJ.2022.3.2","article-title":"Enhanced security of software-defined network and network slice through hybrid quantum key distribution protocol","volume":"14","author":"Mahdi","year":"2022","journal-title":"Infocommun. J."},{"key":"ref_173","doi-asserted-by":"crossref","unstructured":"Tessinari, R.S., Woodward, R.I., and Shields, A.J. (2023, January 5\u20139). Software-defined quantum network using a QKD-secured SDN controller and encrypted messages. Proceedings of the Optical Fiber Communication Conference (OFC 2023), San Diego, CA, USA.","DOI":"10.1364\/OFC.2023.W2A.38"},{"key":"ref_174","doi-asserted-by":"crossref","unstructured":"Garc\u00eda, C.R., Rommel, S., Olmos, J.J.V., and Monroy, I.T. (2023, January 12\u201314). Enhancing the security of software defined networks via quantum key distribution and post-quantum cryptography. Proceedings of the Distributed Computing and Artificial Intelligence, Special Sessions I, 20th International Conference (DCAI2023), Guimar\u00e3es, Portugal.","DOI":"10.1007\/978-3-031-38318-2_42"},{"key":"ref_175","unstructured":"Rempola, M.H., Smith, A., Li, Y., and Du, L. (2023, January 12\u201314). Securing SDN communication through quantum key distribution. Proceedings of the Distributed Computing and Artificial Intelligence, Special Sessions I, 20th International Conference (DCAI2023), Guimar\u00e3es, Portugal."},{"key":"ref_176","doi-asserted-by":"crossref","unstructured":"Satasiya, D., and Rupal, D.R. (2016, January 23\u201325). Analysis of software defined network firewall (SDF). Proceedings of the International Conference on Wireless Communications, Signal Processing and Networking (WiSPNET), Chennai, India.","DOI":"10.1109\/WiSPNET.2016.7566125"},{"key":"ref_177","doi-asserted-by":"crossref","first-page":"605","DOI":"10.1007\/s10922-020-09518-z","article-title":"Application\u2014Aware firewall mechanism for software defined networks","volume":"28","author":"Nife","year":"2020","journal-title":"J. Netw. Syst. Manag."},{"key":"ref_178","doi-asserted-by":"crossref","first-page":"e3967","DOI":"10.1002\/cpe.3967","article-title":"Traffic scheduling for deep packet inspection in software-defined networks","volume":"29","author":"Huang","year":"2017","journal-title":"Concurr. Comput. Pract. Exp."},{"key":"ref_179","unstructured":"Yu, C., Lan, J., Xie, J., and Hu, Y. (2018, January 23\u201325). QoS-aware traffic classification architecture using machine learning and deep packet inspection in SDNs. Proceedings of the 8th International Congress of Information and Communication Technology (ICICT 2018), Xiamen, China."},{"key":"ref_180","doi-asserted-by":"crossref","first-page":"103186","DOI":"10.1016\/j.jnca.2021.103186","article-title":"Machine learning based malicious payload identification in software defined networking","volume":"192","author":"Cheng","year":"2021","journal-title":"J. Netw. Comput. Appl."},{"key":"ref_181","doi-asserted-by":"crossref","first-page":"461","DOI":"10.1093\/jigpal\/jzz060","article-title":"Deep packet inspection for intelligent intrusion detection in software-defined industrial networks: A proof of concept","volume":"28","author":"Sainz","year":"2020","journal-title":"Log. J. IGPL"},{"key":"ref_182","doi-asserted-by":"crossref","first-page":"5444","DOI":"10.1002\/sec.1709","article-title":"DDoS attacks on data plane of software-defined network: Are they possible?","volume":"9","author":"Wu","year":"2016","journal-title":"Secur. Commun. Netw."},{"key":"ref_183","doi-asserted-by":"crossref","unstructured":"Durner, R., Lorenz, C., Wiedemann, M., and Kellerer, W. (2017, January 3\u20137). Detecting and mitigating denial of service attacks against the data plane in software defined networks. Proceedings of the IEEE Conference on Network Softwarization (NetSoft 2017), Bologna, Italy.","DOI":"10.1109\/NETSOFT.2017.8004229"},{"key":"ref_184","doi-asserted-by":"crossref","unstructured":"Shang, G., Zhe, P., Bin, X., Aiqun, H., and Kui, R. (2017, January 1\u20134). FloodDefender: Protecting data and control plane resources under SDN-aimed DoS attacks. Proceedings of the IEEE Conference on Computer Communications (IEEE INFOCOM 2017), Atlanta, GA, USA.","DOI":"10.1109\/INFOCOM.2017.8057009"},{"key":"ref_185","doi-asserted-by":"crossref","first-page":"1206","DOI":"10.1109\/TNET.2016.2626287","article-title":"LineSwitch: Tackling control plane saturation attacks in software-defined networking","volume":"25","author":"Ambrosin","year":"2017","journal-title":"IEEE\/ACM Trans. Netw."},{"key":"ref_186","first-page":"98","article-title":"SDN-assisted DDoS defense framework for the Internet of Multimedia Things","volume":"98","author":"Sahoo","year":"2020","journal-title":"ACM Trans. Multimed. Comput. Commun. Appl."},{"key":"ref_187","doi-asserted-by":"crossref","unstructured":"Ujjan, R., Pervez, Z., Dahal, K., Khan, W., Khattak, A., and Hayat, B. (2021). Entropy Based Features Distribution for Anti-DDoS Model in SDN. Sustainability, 13.","DOI":"10.3390\/su13031522"},{"key":"ref_188","doi-asserted-by":"crossref","unstructured":"Sumantra, I., and Ghandi, S. (2020, January 3\u20134). DDoS attack detection and mitigation in software defined networks. Proceedings of the International Conference on System, Computation, Automation and Networking (ICSCAN), Pondicherry, India.","DOI":"10.1109\/ICSCAN49426.2020.9262408"},{"key":"ref_189","unstructured":"Carvalho, R.N., Bordim, J.L., and Alchieri, E.A.P. (2019, January 20\u201324). Entropy-based DoS attack identification in SDN. Proceedings of the IEEE International Parallel and Distributed Processing Symposium Workshops (IPDPSW 2019), Rio de Janeiro, Brazil."},{"key":"ref_190","doi-asserted-by":"crossref","unstructured":"Wang, S., Chandrasekharan, S., Gomez, K., Kandeepan, S., Al-Hourani, A., Asghar, M.R., Russello, G., and Zanna, P. (2018, January 23\u201327). SECOD: SDN sEcure control and data plane algorithm for detecting and defending against DoS attacks. Proceedings of the IEEE\/IFIP Network Operations and Management Symposium (NOMS 2018), Taipei, Taiwan.","DOI":"10.1109\/NOMS.2018.8406196"},{"key":"ref_191","doi-asserted-by":"crossref","unstructured":"Kaljic, E., Maric, A., and Njemcevic, P. (2019, January 20\u201323). DoS attack mitigation in SDN networks using a deeply programmable packet-switching node based on a hybrid FPGA\/CPU data plane architecture. Proceedings of the XXVII International Conference on Information, Communication and Automation Technologies (ICAT 2019), Sarajevo, Bosnia and Herzegovina.","DOI":"10.1109\/ICAT47117.2019.8938862"},{"key":"ref_192","first-page":"693","article-title":"DDoS flooding attack mitigation in software defined networks","volume":"11","author":"Mahrach","year":"2020","journal-title":"Int. J. Adv. Comput. Sci. Appl."},{"key":"ref_193","doi-asserted-by":"crossref","first-page":"215","DOI":"10.25046\/aj050228","article-title":"Enhancing an SDN architecture with DoS attack detection mechanisms","volume":"5","author":"Carvalho","year":"2020","journal-title":"Adv. Sci. Technol. Eng. Syst."},{"key":"ref_194","doi-asserted-by":"crossref","first-page":"123659","DOI":"10.1109\/ACCESS.2023.3330224","article-title":"POAGuard: A defense mechanism against preemptive table overflow attack in software-defined networks","volume":"11","author":"Liu","year":"2023","journal-title":"IEEE Access"},{"key":"ref_195","doi-asserted-by":"crossref","unstructured":"Niyaz, Q., Sun, W., and Javaid, A.Y. (2016). A deep learning based DDoS detection system in software-defined networking (SDN). arXiv.","DOI":"10.4108\/eai.28-12-2017.153515"},{"key":"ref_196","doi-asserted-by":"crossref","unstructured":"Alshamrani, A., Chowdhary, A., Pisharody, S., Lu, D., and Huang, D. (2017, January 21\u201325). A defense system for defeating DDoS attacks in SDN based networks. Proceedings of the 15th ACM International Symposium on Mobility Management and Wireless Access (MobiWac 2017), Miami, FL, USA.","DOI":"10.1145\/3132062.3132074"},{"key":"ref_197","doi-asserted-by":"crossref","unstructured":"Prakash, A., and Priyadarshini, R. (2018, January 20\u201321). An intelligent software defined network controller for preventing Distributed Denial of Service (DDoS) attacks. Proceedings of the Second International Conference on Inventive Communication and Computational Technologies (ICICCT 2018), Coimbatore, India.","DOI":"10.1109\/ICICCT.2018.8473340"},{"key":"ref_198","doi-asserted-by":"crossref","first-page":"215","DOI":"10.1016\/j.comcom.2019.09.014","article-title":"VARMAN: Multi-plane security framework for software defined networks","volume":"148","author":"Krishnan","year":"2019","journal-title":"Comput. Commun."},{"key":"ref_199","first-page":"28","article-title":"Software-defined networking-based DDoS defense mechanisms","volume":"52","author":"Swami","year":"2019","journal-title":"ACM Comput. Surv."},{"key":"ref_200","doi-asserted-by":"crossref","unstructured":"Abhiroop, T., Babu, S., and Manoj, B.S. (2018, January 25\u201328). A machine learning approach for detecting DoS attacks in SDN switches. Proceedings of the 24th National Conference on Communications (NCC), Hyderabad, India.","DOI":"10.1109\/NCC.2018.8600196"},{"key":"ref_201","doi-asserted-by":"crossref","unstructured":"Ahmad, A., Harjula, E., Ylianttila, M., and Ahmad, I. (2020, January 7\u201311). Evaluation of machine learning techniques for security in SDN. Proceedings of the IEEE Globecom Workshops (GC Workshops 2020), Taipei, Taiwan.","DOI":"10.1109\/GCWkshps50303.2020.9367477"},{"key":"ref_202","unstructured":"Elsayed, M.S., Le-Khac, N.-A., Dev, S., and Jurcut, A.D. (September, January 31). DDoSNet: A deep-learning model for detecting network attacks. Proceedings of the IEEE 21st International Symposium on \u201cA World of Wireless, Mobile and Multimedia Networks\u201d (WoWMoM), Cork, Ireland."},{"key":"ref_203","doi-asserted-by":"crossref","unstructured":"Ahuja, N., Singal, G., and Mukhopadhyay, D. (2021, January 28\u201329). DLSDN: Deep learning for DDOS attack detection in software defined networking. Proceedings of the 11th International Conference on Cloud Computing, Data Science & Engineering (Confluence 2021), Noida, India.","DOI":"10.1109\/Confluence51648.2021.9376879"},{"key":"ref_204","doi-asserted-by":"crossref","first-page":"113061","DOI":"10.1109\/ACCESS.2021.3104115","article-title":"Signature-based traffic classification and mitigation for DDoS attacks using programmable network data planes","volume":"9","author":"Dimolianis","year":"2021","journal-title":"IEEE Access"},{"key":"ref_205","doi-asserted-by":"crossref","first-page":"90","DOI":"10.1186\/s13638-021-01957-9","article-title":"A cooperative DDoS attack detection scheme based on entropy and ensemble learning in SDN","volume":"90","author":"Yu","year":"2021","journal-title":"Wirel. Commun. Netw."},{"key":"ref_206","doi-asserted-by":"crossref","first-page":"1","DOI":"10.52547\/mjee.15.1.1","article-title":"A hybrid mechanism to detect DDoS attacks in software defined networks","volume":"15","author":"Dehkordi","year":"2021","journal-title":"Majlesi J. Electr. Eng."},{"key":"ref_207","doi-asserted-by":"crossref","first-page":"99","DOI":"10.1016\/j.future.2021.11.009","article-title":"Software-defined DDoS detection with information entropy analysis and optimized deep learning","volume":"129","author":"Liu","year":"2022","journal-title":"Future Gener. Comput. Syst."},{"key":"ref_208","doi-asserted-by":"crossref","first-page":"103588","DOI":"10.1016\/j.cose.2023.103588","article-title":"A deep learning technique to detect distributed denial of service attacks in software defined networks","volume":"137","author":"Gadallah","year":"2024","journal-title":"Comput. Secur."},{"key":"ref_209","unstructured":"Cao, J., Xu, M., Li, Q., Sun, K., Yang, Y., and Zheng, J. (2017, January 22\u201325). Disrupting SDN via the data plane: A low-rate flow table overflow attack. Proceedings of the 13th International Conference on Security and Privacy in Communications Networks (SECURECOMM17), Niagara Falls, ON, Canada."},{"key":"ref_210","doi-asserted-by":"crossref","first-page":"1416","DOI":"10.1109\/TNET.2022.3225211","article-title":"The LOFT attack: Overflowing SDN flow tables at a low rate","volume":"31","author":"Cao","year":"2023","journal-title":"IEEE\/ACM Trans. Netw."},{"key":"ref_211","doi-asserted-by":"crossref","first-page":"3143","DOI":"10.1109\/TIFS.2023.3275768","article-title":"LtRFT: Mitigate the low-rate data plane DDoS attack with learning-to-rank enabled flow tables","volume":"18","author":"Tang","year":"2023","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"ref_212","doi-asserted-by":"crossref","first-page":"5073","DOI":"10.1109\/TNSM.2023.3270339","article-title":"FTMaster: A detection and mitigation system of low-rate flow table overflow attacks via SDN","volume":"20","author":"Tang","year":"2023","journal-title":"IEEE Trans. Netw. Serv. Manag."},{"key":"ref_213","doi-asserted-by":"crossref","first-page":"103597","DOI":"10.1016\/j.jnca.2023.103597","article-title":"SFTO-guard: Real time detection and mitigation system for slow-rate flow table overflow attacks","volume":"213","author":"Tang","year":"2023","journal-title":"J. Netw. Comput. Appl."},{"key":"ref_214","doi-asserted-by":"crossref","first-page":"2524","DOI":"10.1109\/TNSE.2023.3297650","article-title":"FTOP: An efficient flow table overflow preventing system for switches in SDN","volume":"11","author":"Tang","year":"2024","journal-title":"IEEE Trans. Netw. Sci. Eng."},{"key":"ref_215","doi-asserted-by":"crossref","first-page":"12146","DOI":"10.1016\/j.eswa.2023.121460","article-title":"FTODefender: An efficient flow table overflow attacks defending system in SDN","volume":"237","author":"Tang","year":"2024","journal-title":"Expert Syst. Appl."},{"key":"ref_216","doi-asserted-by":"crossref","first-page":"6670","DOI":"10.1109\/TNSM.2024.3446178","article-title":"FloRa: Flow table low-rate overflow reconnaissance and detection in SDN","volume":"21","author":"Mudgal","year":"2024","journal-title":"IEEE Trans. Netw. Serv. Manag."},{"key":"ref_217","doi-asserted-by":"crossref","first-page":"48830","DOI":"10.1109\/ACCESS.2024.3383877","article-title":"Research on detection and mitigation methods of adaptive flow table overflow attacks in software-defined networks","volume":"12","author":"Zeng","year":"2024","journal-title":"IEEE Access"},{"key":"ref_218","doi-asserted-by":"crossref","first-page":"125865","DOI":"10.1016\/j.eswa.2024.125865","article-title":"FTSheild: An intelligent framework for LOFT attack detection and mitigation with programmable data plane","volume":"265","author":"Jain","year":"2025","journal-title":"Expert Syst. Appl."},{"key":"ref_219","doi-asserted-by":"crossref","first-page":"146","DOI":"10.1109\/TNSM.2015.2417772","article-title":"Programming abstractions for software-defined wireless networks","volume":"12","author":"Riggio","year":"2015","journal-title":"IEEE Trans. Netw. Serv. Manag."},{"key":"ref_220","doi-asserted-by":"crossref","unstructured":"Celesova, B., Val\u2019ko, J., Grezo, R., and Helebrandt, P. (2019, January 10\u201312). Enhancing security of SDN focusing on control plane and data plane. Proceedings of the International Symposium on Digital Forensic and Security (ISDFS), Barcelos, Portugal.","DOI":"10.1109\/ISDFS.2019.8757542"},{"key":"ref_221","unstructured":"Ibrahim, O., and Bhaya, W. (2020, January 22\u201323). Intrusion detection system for cloud based software-defined networks. Proceedings of the International Conference of Modern Applications on Information and Communication Technology (ICMAICT), Hilla, Iraq."},{"key":"ref_222","doi-asserted-by":"crossref","unstructured":"Sebbar, A., Cherqi, O., Chougdali, K., and Boulmalf, M. (2023, January 4\u20138). Real time anomaly detection in SDN architecture using integrated SIEM and machine learning for enhancing network security. Proceedings of the IEEE Global Communications Conference: Communications Software and Multimedia (GLOBECOM-IEEE 2023), Kuala Lumpur, Malaysia.","DOI":"10.1109\/GLOBECOM54140.2023.10436884"},{"key":"ref_223","doi-asserted-by":"crossref","first-page":"55380","DOI":"10.1109\/ACCESS.2018.2872430","article-title":"Datanet: Deep learning based encrypted network traffic classification in SDN home gateway","volume":"6","author":"Wang","year":"2018","journal-title":"IEEE Access"},{"key":"ref_224","doi-asserted-by":"crossref","unstructured":"Malik, A., Frein, R.d., Al-Zeyadi, M., and Andreu-Perez, J. (2020, January 26\u201329). Intelligent SDN traffic classification using deep learning: Deep-SDN. Proceedings of the 2nd International Conference on Computer Communication and the Internet (ICCCI 2020), Nagoya, Japan.","DOI":"10.1109\/ICCCI49374.2020.9145971"},{"key":"ref_225","doi-asserted-by":"crossref","unstructured":"Serag, R.H., Abdalzaher, M.S., Elsayed, H.A.E.A., Sobh, M., Krichen, M., and Salim, M.M. (2024). Machine-learning-based traffic classification in software-defined networks. Electronics, 13.","DOI":"10.3390\/electronics13061108"},{"key":"ref_226","doi-asserted-by":"crossref","unstructured":"Koerner, M., and Kao, O. (2016, January 15\u201318). MAC based dynamic VLAN tagging with OpenFlow for WLAN access networks. Proceedings of the International Workshop on Applications of Software-Defined Networking in Cloud Computing (SDNCC), Montreal, QC, Canada.","DOI":"10.1016\/j.procs.2016.08.077"},{"key":"ref_227","doi-asserted-by":"crossref","first-page":"6696149","DOI":"10.1155\/2021\/6696149","article-title":"A privacy-preserving caching scheme for device-to-device communications","volume":"2021","author":"Zhong","year":"2021","journal-title":"Secur. Commun. Netw."},{"key":"ref_228","first-page":"6688489","article-title":"A lightweight SDN fingerprint attack defense mechanism based on probabilistic scrambling and controller dynamic scheduling strategies","volume":"1","author":"Wang","year":"2021","journal-title":"Secur. Commun. Netw."},{"key":"ref_229","doi-asserted-by":"crossref","unstructured":"Ye, R., Ouyang, Y., and Che, X. (2024, January 29\u201331). Security and attack prevention in software-defined network. Proceedings of the International Conference on Telecommunications and Power Electronics (TELEPE 2024), Frankfurt, Germany.","DOI":"10.1109\/TELEPE64216.2024.00154"},{"key":"ref_230","doi-asserted-by":"crossref","unstructured":"Alkhamisi, A., Katib, I., and Buhari, S.M. (2024). Federated learning-based security attack detection for multi-controller software-defined networks. Algorithms, 17.","DOI":"10.3390\/a17070290"},{"key":"ref_231","doi-asserted-by":"crossref","first-page":"21881","DOI":"10.1109\/ACCESS.2021.3055577","article-title":"Securing control and data planes from reconnaissance attacks using distributed shadow controllers, reactive and proactive approaches","volume":"9","author":"Hyder","year":"2021","journal-title":"IEEE Access"},{"key":"ref_232","unstructured":"Lam, J.H., Lee, S., Lee, H.-J., and Oktian, Y.E. (2015, January 7\u201310). Securing distributed SDN with IBC. Proceedings of the 2015 Seventh International Conference on Ubiquitous and Future Networks (ICUFN), Sapporo, Japan."},{"key":"ref_233","doi-asserted-by":"crossref","unstructured":"Adhikari, T., Kule, M., and Khan, A.K. (2022, January 3\u20135). An ECDH and AES based encryption approach for prevention of MiTM in SDN southbound communication interface. Proceedings of the 13th International Conference on Computing Communication and Networking Technologies (ICCCNT 2022), Kharagpur, India.","DOI":"10.1109\/ICCCNT54827.2022.9984509"},{"key":"ref_234","doi-asserted-by":"crossref","unstructured":"Buzura, S., Lehene, M., Iancu, B., and Dadarlat, V. (2022). An extendable software architecture for mitigating ARP spoofing-based attacks in SDN data plane layer. Electronics, 11.","DOI":"10.3390\/electronics11131965"},{"key":"ref_235","doi-asserted-by":"crossref","first-page":"523","DOI":"10.2298\/CSIS210222001G","article-title":"A novel security mechanism for software defined network based on blockchain","volume":"19","author":"Guo","year":"2022","journal-title":"Comput. Sci. Inf. Syst."},{"key":"ref_236","doi-asserted-by":"crossref","unstructured":"Chi, P.-W., Kuo, C.-T., Guo, J.-W., and Lei, C.-L. (2015, January 13\u201317). How to detect a compromised SDN switch. Proceedings of the 2015 1st IEEE Conference on Network Softwarization (NetSoft), London, UK.","DOI":"10.1109\/NETSOFT.2015.7116184"},{"key":"ref_237","doi-asserted-by":"crossref","unstructured":"Chao, T.-W., Ke, Y.-M., Chen, B.-H., Chen, J.-L., Hsieh, C.J., Lee, S.-C., and Hsiao, H.-C. (2016, January 6\u201310). Securing data planes in software-defined networks. Proceedings of the IEEE Conference on Network Softwarization (NetSoft), Seoul, Republic of Korea.","DOI":"10.1109\/NETSOFT.2016.7502486"},{"key":"ref_238","doi-asserted-by":"crossref","first-page":"2048","DOI":"10.1109\/TNET.2018.2859483","article-title":"SDN-RDCD: A real-time and reliable method for detecting compromised SDN devices","volume":"26","author":"Zhou","year":"2018","journal-title":"IEEE\/ACM Trans. Netw."},{"key":"ref_239","unstructured":"Pattanaik, A., Gupta, A., and Kanavalli, A. (2019, January 11\u201312). Early detection and diminution of DDoS attack instigated by compromised switches on the controller in software defined networks. Proceedings of the IEEE International Conference on Distributed Computing, VLSI, Electrical Circuits and Robotics (DISCOVER), Manipal, India."},{"key":"ref_240","first-page":"46","article-title":"Mitigation of DDoS attack instigated by compromised switches on SDN controller by analyzing the flow rule request traffic","volume":"7","author":"Sanjeetha","year":"2018","journal-title":"Int. J. Eng. Technol."},{"key":"ref_241","doi-asserted-by":"crossref","unstructured":"Shaghaghi, A., Kaafar, M.A., and Jha, S. (2017, January 2). WedgeTail: An intrusion prevention system for the data plane of software defined networks. Proceedings of the Asia Conference on Computer and Communications Security (ASIA CCS17), Abu Dhabi, United Arab Emirates.","DOI":"10.1145\/3052973.3053039"},{"key":"ref_242","doi-asserted-by":"crossref","unstructured":"Dinh, P.T., Lee, T., Canh, T.N., Dang, S.P., Noh, S.C., and Park, M. (2019, January 6\u20138). Abnormal SDN switches detection based on chaotic analysis of network traffic. Proceedings of the 25th Asia-Pacific Conference on Communications (APCC), Ho Chi Minh City, Vietnam.","DOI":"10.1109\/APCC47188.2019.9026485"},{"key":"ref_243","doi-asserted-by":"crossref","first-page":"119346","DOI":"10.1109\/ACCESS.2020.3004258","article-title":"ECSD: Enhanced compromised switch deteciton in an SDN-based cloud through multivariate time-series analysis","volume":"8","author":"Dinh","year":"2020","journal-title":"IEEE Access"},{"key":"ref_244","doi-asserted-by":"crossref","first-page":"341","DOI":"10.3233\/JCS-200094","article-title":"A new approach for detecting violation of data plane integrity in software defined networks","volume":"29","author":"Hessam","year":"2021","journal-title":"J. Comput. Secur."},{"key":"ref_245","doi-asserted-by":"crossref","unstructured":"Reddy, B.A., Sahoo, K.S., and Bhuyan, M. (2024, January 6\u201310). Securing P4-SDN data plane against flow table modification attack. Proceedings of the IEEE Symposium on Network Operations and Management, Seoul, Republic of Korea.","DOI":"10.1109\/NOMS59830.2024.10575461"},{"key":"ref_246","doi-asserted-by":"crossref","first-page":"695","DOI":"10.1109\/TIFS.2017.2765506","article-title":"Packet injection attack and its defense in software-defined networks","volume":"13","author":"Deng","year":"2018","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"ref_247","first-page":"1174","article-title":"Using INSPECTOR device to stop packet injection attack in SDN","volume":"33","author":"Seitz","year":"2019","journal-title":"IEEE Commun. Lett."},{"key":"ref_248","doi-asserted-by":"crossref","unstructured":"Antikainen, M., Aura, T., and S\u00e4rel\u00e4, M. (2014, January 15\u201317). Spook in your network: Attacking an SDN with a compromised OpenFlow switch. Proceedings of the Nordic Conference on Secure IT Systems (NordSec 2014), Troms\u00f8, Norway.","DOI":"10.1007\/978-3-319-11599-3_14"},{"key":"ref_249","doi-asserted-by":"crossref","first-page":"4760632","DOI":"10.1155\/2018\/4760632","article-title":"Exploiting the vulnerability of flow table overflow in software-defined network: Attack model, evaluation and defense","volume":"2018","author":"Zhou","year":"2018","journal-title":"Secur. Commun. Netw."},{"key":"ref_250","doi-asserted-by":"crossref","unstructured":"Sathya, R., and Thangarajan, R. (2015, January 26\u201327). Efficient anomaly detection and mitigation in software defined networking environment. Proceedings of the 2nd International Conference on Electronics and Communication Systems (ICECS), Coimbatore, India.","DOI":"10.1109\/ECS.2015.7124952"},{"key":"ref_251","doi-asserted-by":"crossref","unstructured":"Pang, C., Jiang, Y., and Li, Q. (2016, January 22\u201327). FADE: Detecting forwarding anomaly in software-defined networks. Proceedings of the IEEE International Conference on Communications (ICC), Kuala Lumpur, Malaysia.","DOI":"10.1109\/ICC.2016.7510990"},{"key":"ref_252","doi-asserted-by":"crossref","first-page":"2676","DOI":"10.1109\/TPDS.2021.3068135","article-title":"Efficient forwarding anomaly detection in software-defined networks","volume":"32","author":"Li","year":"2021","journal-title":"IEEE Trans. Parallel Distrib. Syst."},{"key":"ref_253","doi-asserted-by":"crossref","unstructured":"Aryan, R., Yazidi, A., Engelstad, P.E., and Kure, O. (2017, January 9\u201312). A general formalism for defining and detecting OpenFlow rule anomalies. Proceedings of the IEEE 42nd Conference on Local Computer Networks (LCN), Singapore.","DOI":"10.1109\/LCN.2017.94"},{"key":"ref_254","doi-asserted-by":"crossref","unstructured":"Aryan, R., Yazidi, A., and Engelstad, P.E. (2018, January 1\u20134). An incremental approach for swift OpenFlow anomaly detection. Proceedings of the IEEE 43rd Conference on Local Computer Networks (LCN), Chicago, IL, USA.","DOI":"10.1109\/LCN.2018.8638226"},{"key":"ref_255","doi-asserted-by":"crossref","unstructured":"Zhang, P., Xu, S., Yang, Z., Li, H., Li, Q., Wang, H., and Hu, C. (2018, January 2\u20136). FOCES: Detecting forwarding anomalies in software defined networks. Proceedings of the IEEE International Conference on Distributed Computing Systems (ICDCS 2018), Vienna, Austria.","DOI":"10.1109\/ICDCS.2018.00085"},{"key":"ref_256","doi-asserted-by":"crossref","first-page":"332","DOI":"10.1109\/TNET.2020.3033588","article-title":"Network-wide forwarding anomaly detection and localization in software-defined networks","volume":"29","author":"Zhang","year":"2021","journal-title":"IEEE\/ACM Trans. Netw."},{"key":"ref_257","doi-asserted-by":"crossref","first-page":"915","DOI":"10.1109\/TDSC.2018.2810880","article-title":"Dynamic packet forwarding verification in SDN","volume":"16","author":"Li","year":"2019","journal-title":"IEEE Trans. Dependable Secur. Comput."},{"key":"ref_258","doi-asserted-by":"crossref","unstructured":"Kausar, N., Latif, Z., Lee, C., and Iqbal, U. (2021, January 20\u201322). Towards Detection and Mitigation of Traffic Anomalies in SDN. Proceedings of the International Conference on Information and Communication Technology Convergence (ICTC), Jeju Island, Republic of Korea.","DOI":"10.1109\/ICTC52510.2021.9621029"},{"key":"ref_259","doi-asserted-by":"crossref","first-page":"395","DOI":"10.1109\/TNET.2022.3194970","article-title":"RuleOut forwarding anomalies for SDN","volume":"31","author":"Xi","year":"2022","journal-title":"IEEE\/ACM Trans. Netw."},{"key":"ref_260","first-page":"1110","article-title":"A software-defined networking packet forwarding verification mechanism based on programmable data plane","volume":"42","author":"Zhibin","year":"2020","journal-title":"J. Electron. Inf. Technol."},{"key":"ref_261","doi-asserted-by":"crossref","unstructured":"Zhang, W., Jing, S., Guo, L., and Zhao, C. (2023, January 12\u201314). P4-DVPF: Dynamic Verification of Packets Forwarding Based on P4 for SDN. Proceedings of the International Conference on Intelligent Computing and Next Generation Networks (ICNGN), Singapore.","DOI":"10.1109\/ICNGN59831.2023.10396715"},{"key":"ref_262","doi-asserted-by":"crossref","unstructured":"Dey, S.K., and Rahman, M.M. (2018, January 13\u201315). Flow based anomaly detection in software defined networking: A deep learning approach with feature selection method. Proceedings of the 4th International Conference on Electrical Engineering and Information & Communication Technology (iCEEiCT), Dhaka, Bangladesh.","DOI":"10.1109\/CEEICT.2018.8628069"},{"key":"ref_263","doi-asserted-by":"crossref","unstructured":"Sridharan, V., Gurusamy, M., and Leon-Garcia, A. (2019, January 12\u201314). Anomalous rule detection using machine learning in software defined networks. Proceedings of the IEEE Conference on Network Function Virtualization and Software Defined Networks (NFV-SDN), Dallas, TX, USA.","DOI":"10.1109\/NFV-SDN47374.2019.9039984"},{"key":"ref_264","doi-asserted-by":"crossref","unstructured":"Lai, Y.-C., Zhou, K.-Z., Lin, S.-R., and Lo, N.-W. (2019, January 20\u201324). F1ow-based anomaly detection using multilayer perceptron in software defined networks. Proceedings of the 42nd International Convention on Information and Communication Technology, Electronics and Microelectronics (MIPRO), Opatija, Croatia.","DOI":"10.23919\/MIPRO.2019.8757199"},{"key":"ref_265","doi-asserted-by":"crossref","first-page":"1349","DOI":"10.1109\/TNSM.2020.3004415","article-title":"DeepGuard: Efficient anomaly detection in SDN with fine-grained traffic flow monitoring","volume":"17","author":"Phan","year":"2020","journal-title":"IEEE Trans. Netw. Serv. Manag."},{"key":"ref_266","doi-asserted-by":"crossref","unstructured":"Khurshid, A., Zhou, W., Caesar, M., and Godfrey, B. (2012, January 13). VeriFlow: Verifying network-wide invariants in real time. Proceedings of the 1st ACM International Workshop on Hot Topics in Software Defined Networks (HotSDN12), Helsinki, Finland.","DOI":"10.1145\/2342441.2342452"},{"key":"ref_267","doi-asserted-by":"crossref","unstructured":"Dhawan, M., Poddar, R., Mahajan, K., and Mann, V. (2015, January 8\u201311). SPHINX: Detecting security attacks in software-defined networks. Proceedings of the Network and Distributed System Security Symposium, San Diego, CA, USA.","DOI":"10.14722\/ndss.2015.23064"},{"key":"ref_268","doi-asserted-by":"crossref","first-page":"12329","DOI":"10.1109\/TVT.2019.2948222","article-title":"LOADS: Load optimisation and anomaly detection scheme for software-defined networks","volume":"68","author":"Chaudhary","year":"2019","journal-title":"IEEE Trans. Veh. Technol."},{"key":"ref_269","doi-asserted-by":"crossref","unstructured":"Flauzac, O., Gonz\u00e1lez, C., Hachani, A., and Nolot, F. (2015, January 24\u201327). SDN based architecture for IoT and improvement of the security. Proceedings of the 29th International Conference on Advanced Information Networking and Applications Workshops, Gwangju, Republic of Korea.","DOI":"10.1109\/WAINA.2015.110"},{"key":"ref_270","doi-asserted-by":"crossref","unstructured":"Qin, Q., Poularakis, K., and Tassiulas, L. (December, January 29). A learning approach with programmable data plane towards IoT security. Proceedings of the IEEE 40th International Conference on Distributed Computing Systems (ICDCS 2020), Singapore.","DOI":"10.1109\/ICDCS47774.2020.00064"},{"key":"ref_271","doi-asserted-by":"crossref","first-page":"6242","DOI":"10.1109\/JIOT.2019.2960033","article-title":"Deep-reinforcement-learning based QoS-aware secure routing for SDN-IoT","volume":"7","author":"Guo","year":"2020","journal-title":"IEEE Internet Things"},{"key":"ref_272","doi-asserted-by":"crossref","first-page":"58","DOI":"10.1109\/MNET.2016.7389832","article-title":"When big data meets software-defined networking: SDN for big data and big data for SDN","volume":"30","author":"Cui","year":"2016","journal-title":"IEEE Netw."},{"key":"ref_273","doi-asserted-by":"crossref","unstructured":"Yao, J., Han, Z., Sohail, M., and Wang, L. (2019). A robust security architecture for SDN-based 5G networks. Future Internet, 11.","DOI":"10.3390\/fi11040085"},{"key":"ref_274","doi-asserted-by":"crossref","first-page":"9649643","DOI":"10.1155\/2018\/9649643","article-title":"OverWatch: A cross-plane DDoS attack defense framework with collaborative intelligence in SDN","volume":"2018","author":"Han","year":"2018","journal-title":"Secur. Commun. Netw."},{"key":"ref_275","doi-asserted-by":"crossref","first-page":"181782","DOI":"10.1109\/ACCESS.2020.3028603","article-title":"IPsec cryptographic algorithm invocation considering performance and security for SDN southbound interface communication","volume":"8","author":"Yang","year":"2020","journal-title":"IEEE Access"},{"key":"ref_276","doi-asserted-by":"crossref","unstructured":"Salman, F., and Jedidi, A. (2022, January 20\u201321). Trust-aware security system for dynamic southbound communication in software defined network. Proceedings of the International Conference on Innovation and Intelligence for Informatics, Computing, and Technologies (3ICT), Sakheer, Bahrain.","DOI":"10.1109\/3ICT56508.2022.9990839"},{"key":"ref_277","doi-asserted-by":"crossref","first-page":"5875","DOI":"10.1007\/s12652-020-02099-4","article-title":"MitM detection and defense mechanism CBNA-RF based on machine learning for large-scale SDN context","volume":"11","author":"Sebbar","year":"2022","journal-title":"J. Ambient Intell. Humaniz. Comput."},{"key":"ref_278","unstructured":"Silva, E.G.d., Knob, L.A.D., Wickboldt, J.A., Gaspary, L.P., Granville, L.Z., and Schaeffer-Filho, A. (2015, January 11\u201315). Capitalizing on SDN based SCADA systems: An anti-eavesdropping case-study. Proceedings of the IFIP\/IEEE International Symposium on Integrated Network Management (IM2015), Ottawa, ON, Canada."},{"key":"ref_279","doi-asserted-by":"crossref","first-page":"1146","DOI":"10.1109\/TNSM.2018.2846294","article-title":"Dynamic attack-resilient routing in software defined networks","volume":"15","author":"Mohan","year":"2018","journal-title":"IEEE Trans. Netw. Serv. Manag."},{"key":"ref_280","doi-asserted-by":"crossref","first-page":"982","DOI":"10.1109\/JSAC.2019.2906742","article-title":"Scalable and efficient multipath routing via redundant trees","volume":"37","author":"Tapolcai","year":"2019","journal-title":"IEEE J. Sel. Areas Commun."},{"key":"ref_281","unstructured":"Wang, Z., Lu, Z., and Li, C. (2020, January 17\u201319). Research on deep reinforcement learning multi-path routing planning in SDN. Proceedings of the 2nd International Conference on Electronic Engineering and Informatics, Lanzhou, China."},{"key":"ref_282","doi-asserted-by":"crossref","first-page":"1330993","DOI":"10.1155\/2022\/1330993","article-title":"Reinforcement learning-based service-oriented dynamic multipath routing in SDN","volume":"2022","author":"Chiu","year":"2022","journal-title":"Wirel. Commun. Mob. Comput."},{"key":"ref_283","doi-asserted-by":"crossref","unstructured":"Zhang, Y., Qiu, L., Xu, Y., Wang, X., Wang, S., Paul, A., and Wu, Z. (2023). Multi path routing algorithm based on deep reinforcement learning for SDN. Appl. Sci., 13.","DOI":"10.3390\/app132212520"},{"key":"ref_284","doi-asserted-by":"crossref","first-page":"104082","DOI":"10.1016\/j.jnca.2024.104082","article-title":"MDQ: A QoS-congestion aware deep reinforcement learning approach for multi-path routing in SDN","volume":"235","author":"Sanchez","year":"2025","journal-title":"J. Netw. Comput. Appl."},{"key":"ref_285","doi-asserted-by":"crossref","first-page":"76909","DOI":"10.1109\/ACCESS.2018.2882793","article-title":"Survivable multipath virtual network embedding against multiple failures for SDN\/NFV","volume":"6","author":"Yin","year":"2018","journal-title":"IEEE Access"},{"key":"ref_286","doi-asserted-by":"crossref","first-page":"32460","DOI":"10.1109\/ACCESS.2018.2842058","article-title":"Implementation of multipath network virtualization with SDN and NFV","volume":"6","author":"Wang","year":"2018","journal-title":"IEEE Access"},{"key":"ref_287","doi-asserted-by":"crossref","first-page":"974","DOI":"10.21629\/JSEE.2019.05.14","article-title":"MTSS: Multi-path traffic scheduling mechanism based on SDN","volume":"30","author":"Xiaolong","year":"2019","journal-title":"J. Syst. Eng. Electron."},{"key":"ref_288","doi-asserted-by":"crossref","unstructured":"Zhou, C., Quan, W., Gao, D., Liu, Z., Yu, C., Liu, M., and Xu, Z. (2021, January 12\u201314). AMS: Adaptive Multipath Scheduling Mechanism against Eavesdropping Attacks with Programmable Data Planes. Proceedings of the IEEE Advanced Information Technology, Electronic and Automation Control Conference (IAEAC), Chongqing, China.","DOI":"10.1109\/IAEAC50856.2021.9390985"},{"key":"ref_289","doi-asserted-by":"crossref","first-page":"254","DOI":"10.1016\/j.future.2022.03.012","article-title":"SDN-based dynamic multi-path routing strategy for satellite networks","volume":"133","author":"Qi","year":"2022","journal-title":"Future Gener. Comput. Syst."},{"key":"ref_290","doi-asserted-by":"crossref","first-page":"e12650","DOI":"10.1111\/coin.12650","article-title":"A SDN improvement scheme for multi-path QUIC transmission in satellite networks","volume":"40","author":"Ma","year":"2024","journal-title":"Comput. Intell."},{"key":"ref_291","doi-asserted-by":"crossref","first-page":"846","DOI":"10.1109\/TNET.2020.2971587","article-title":"NAMP: Network-aware multipathing in software-defined data center networks","volume":"28","author":"Cheng","year":"2020","journal-title":"IEEE\/ACM Trans. Netw."},{"key":"ref_292","doi-asserted-by":"crossref","first-page":"1226","DOI":"10.1109\/TNSE.2019.2915515","article-title":"Achieving correct hop-by-hop forwarding on multiple policy-based routing paths","volume":"7","author":"Amaral","year":"2020","journal-title":"IEEE Trans. Netw. Sci. Eng."},{"key":"ref_293","doi-asserted-by":"crossref","unstructured":"Betge-Brezetz, S., Kamga, G.-B., Joutei, A., and Maalmi, O. (2014, January 8\u201310). Control of sensitive traffic in the cloud based on OpenFlow. Proceedings of the IEEE Third International Conference on Cloud Networking (CloudNet), Luxembourg, Luxembourg.","DOI":"10.1109\/CloudNet.2014.6969004"},{"key":"ref_294","doi-asserted-by":"crossref","unstructured":"Betg\u00e9-Brezetz, S., Kamga, G.-B., and Tazi, M. (2015, January 13\u201317). Trust support for SDN controllers and virtualized network applications. Proceedings of the IEEE Conference on Network Softwarization (NetSoft), London, UK.","DOI":"10.1109\/NETSOFT.2015.7116153"},{"key":"ref_295","doi-asserted-by":"crossref","unstructured":"Betge-Brezetz, S., Kamga, G.-B., Balla, M., Criton, T., and Jebalia, H. (2016, January 4\u20138). SDN-based trusted path in a multi-domain network. Proceedings of the IEEE International Conference on Cloud Engineering Workshop, Berlin, Germany.","DOI":"10.1109\/IC2EW.2016.26"},{"key":"ref_296","doi-asserted-by":"crossref","unstructured":"Ermis, O., Bahtiyar, S., Caglayan, M., Bulbul, N., and Alagoz, F. (2022, January 6\u20138). Trust Enhanced Security for Routing in SDN. Proceedings of the 2022 1st International Conference on 6G Networking (6GNet), Paris, France.","DOI":"10.1109\/6GNet54646.2022.9830213"},{"key":"ref_297","doi-asserted-by":"crossref","first-page":"107328","DOI":"10.1016\/j.comnet.2020.107328","article-title":"SUTSEC: SDN utilized trust based secure clustering in IoT","volume":"178","author":"Kalkan","year":"2020","journal-title":"Comput. Netw."},{"key":"ref_298","doi-asserted-by":"crossref","first-page":"136136","DOI":"10.1109\/ACCESS.2023.3338177","article-title":"A trust-based cooperative system for efficient Wi-Fi radio access networks","volume":"11","author":"Raschella","year":"2023","journal-title":"IEEE Access"},{"key":"ref_299","doi-asserted-by":"crossref","unstructured":"Quinn, T., Shah, S.D.A., Bouhafs, F., and den Hartog, F. (2024, January 24\u201328). Towards trust-based routing for data plane security in heterogeneous Software-Defined Wireless Networks. Proceedings of the IEEE Conference on Network Softwarization (NetSoft), Saint Louis, MO, USA.","DOI":"10.1109\/NetSoft60951.2024.10588898"},{"key":"ref_300","doi-asserted-by":"crossref","unstructured":"Kreutz, D., Ramos, F.M.V., and Ver\u00edssimo, P. (2013, January 16). Towards secure and dependable software-defined networks. Proceedings of the Second ACM SIGCOMM Workshop on Hot Topics in Software Defined Networking (HotSDN \u201913), Hong Kong, China.","DOI":"10.1145\/2491185.2491199"},{"key":"ref_301","doi-asserted-by":"crossref","unstructured":"Darabseh, A., Al-Ayyoub, M., Jararweh, Y., Benkhelifa, E., Vouk, M., and Rindos, A. (2015, January 8\u201312). SDSecurity: A software defined security experimental framework. Proceedings of the Workshop on Cloud Computing Systems, Networks, and Applications (CCSNA) (IEEE ICC 2015), London, UK.","DOI":"10.1109\/ICCW.2015.7247453"},{"key":"ref_302","doi-asserted-by":"crossref","unstructured":"Chowdhary, A., Huang, D., Alshamrani, A., Kang, M., Kim, A., and Velazquez, A. (2019, January 20\u201324). TRUFL: Distributed trust management framework in SDN. Proceedings of the IEEE International Conference on Communications (ICC), Seoul, Republic of Korea.","DOI":"10.1109\/ICC.2019.8761661"},{"key":"ref_303","doi-asserted-by":"crossref","first-page":"7579","DOI":"10.1109\/TVT.2015.2495325","article-title":"A trust management system for securing data plane of ad-hoc networks","volume":"65","author":"Tan","year":"2016","journal-title":"IEEE Trans. Veh. Technol."},{"key":"ref_304","first-page":"7611619","article-title":"Hierarchical hybrid trust management scheme in SDN-enabled VANETs","volume":"2021","author":"Mao","year":"2021","journal-title":"Mob. Inf. Syst."},{"key":"ref_305","doi-asserted-by":"crossref","first-page":"3059","DOI":"10.1002\/sec.1243","article-title":"A security and trust framework for virtualized networks and software-defined networking","volume":"9","author":"Yan","year":"2016","journal-title":"Secur. Commun. Netw."},{"key":"ref_306","doi-asserted-by":"crossref","first-page":"110109","DOI":"10.1016\/j.comnet.2023.110109","article-title":"A trust-aware OpenFlow switching framework for software defined networks (SDN)","volume":"237","author":"Karmakar","year":"2023","journal-title":"Comput. Netw."},{"key":"ref_307","doi-asserted-by":"crossref","first-page":"8762","DOI":"10.1038\/s41598-022-12858-2","article-title":"A data plane security model of segmented routing based on SDP trust enhancement architecture","volume":"12","author":"Wang","year":"2022","journal-title":"Sci Rep"},{"key":"ref_308","doi-asserted-by":"crossref","first-page":"101419","DOI":"10.1016\/j.iot.2024.101419","article-title":"ZFort: A scalable zero-trust approach for trust management and traffic engineering in SDN based IoTs","volume":"28","author":"Ashraf","year":"2024","journal-title":"Internet Things"},{"key":"ref_309","doi-asserted-by":"crossref","unstructured":"Yao, G., Bi, J., and Xiao, P. (2011, January 17). Source address validation solution with OpenFlow\/NOX architecture. Proceedings of the 19th IEEE International Conference on Network Protocols, Vancouver, BC, Canada.","DOI":"10.1109\/ICNP.2011.6089085"},{"key":"ref_310","doi-asserted-by":"crossref","first-page":"1046","DOI":"10.1587\/transinf.2016EDP7377","article-title":"A defense mechanism of random routing mutation in SDN","volume":"100","author":"Liu","year":"2017","journal-title":"IEICE Trans. Inf. Syst."},{"key":"ref_311","doi-asserted-by":"crossref","first-page":"400","DOI":"10.23919\/TST.2017.7986943","article-title":"RouteGuardian: Constructing secure routing paths in software-defined networking","volume":"22","author":"Wang","year":"2017","journal-title":"Tsinghua Sci. Technol."},{"key":"ref_312","doi-asserted-by":"crossref","first-page":"361","DOI":"10.21123\/bsj.2018.15.3.0361","article-title":"Dynamic routing method over hybrid SDN for flying ad hoc networks","volume":"15","author":"Mohammed","year":"2018","journal-title":"Baghdad Sci. J."},{"key":"ref_313","doi-asserted-by":"crossref","first-page":"373","DOI":"10.1016\/j.dcan.2022.01.003","article-title":"Moving target defense of routing randomization with deep reinforcement learning against eavesdropping attack","volume":"8","author":"Xu","year":"2022","journal-title":"Digit. Commun. Netw."},{"key":"ref_314","doi-asserted-by":"crossref","first-page":"e1957","DOI":"10.1002\/nem.1957","article-title":"Fast failure detection and recovery in SDN with stateful data plane","volume":"27","author":"Cascone","year":"2017","journal-title":"Int. J. Netw. Manag."},{"key":"ref_315","doi-asserted-by":"crossref","first-page":"108896","DOI":"10.1016\/j.comnet.2022.108896","article-title":"P4Resilience: Scalable resilience for multi-failure recovery in SDN with programmable data plane","volume":"208","author":"Li","year":"2022","journal-title":"Comput. Netw."},{"key":"ref_316","doi-asserted-by":"crossref","first-page":"e12407","DOI":"10.1016\/j.heliyon.2022.e12407","article-title":"Dynamic weight routing and optical-code algorithm based on SDN","volume":"9","author":"Li","year":"2023","journal-title":"Heliyon"},{"key":"ref_317","doi-asserted-by":"crossref","unstructured":"Santana, P., and Moura, J. (2023). A Bayesian Multi-Armed Bandit algorithm for dynamic end-to-end routing in SDN-based networks with piecewise-stationary rewards. Algorithms, 16.","DOI":"10.3390\/a16050233"},{"key":"ref_318","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3645100","article-title":"On trust recommendations in the social Internet of Things\u2014A survey","volume":"56","author":"Becherer","year":"2024","journal-title":"ACM Comput. Surv."}],"container-title":["Future Internet"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1999-5903\/17\/11\/503\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,11,3]],"date-time":"2025-11-03T17:44:32Z","timestamp":1762191872000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1999-5903\/17\/11\/503"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,11,3]]},"references-count":318,"journal-issue":{"issue":"11","published-online":{"date-parts":[[2025,11]]}},"alternative-id":["fi17110503"],"URL":"https:\/\/doi.org\/10.3390\/fi17110503","relation":{},"ISSN":["1999-5903"],"issn-type":[{"value":"1999-5903","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,11,3]]}}}