ONS2016

SDN controller is identified as the single most important point of failure that can affect the entire network, hence securing the controller from external sources of attack is of importance. The attack could be from the application, network or the peer controllers. The rationale behind a unified controller security plugin is to devise a security information repository for the applications and is developed for SDN controllers as an infrastructure that provides a single pane of visibility related to controller security. The security information could be for collating source of different attacks reported in SB plugins/suspected controller intrusions or information about trusted controllers in the network. It also opens the possibility of mitigating persistent attack(s)on the controller by blocking(quarantining)the offending switches/ports or locking them down temporarily/permanently.