A Study on SDN security enhancement using open source IDS/IPS Suricata

Abstract

Software Defined Network (SDN) is a next-generation networking technology that transforms existing closed network environments based on individual network vendors technology into a software-based, flexible, centralized management environment that is programmable based on simplification through network abstraction. For this reason, unlike traditional networks, SDN has some strengths over some security issues. However, most of the existing network security problems and vulnerabilities exist in the SDN environment. And various attacks targeting this are occurring. This paper examines how to implement network security functions using SDN technology for these security problems. In addition, this paper proposes a structure for enhancing the security function of SDN by using existing open source IDS / IPS software Suricata.