Patterns for the design of secure and dependable software defined networks

• Published in: Computer networks (Amsterdam, Netherlands : 1999) Vol. 109; pp. 39 - 49
• Main Authors: Petroulakis, Nikolaos E., Spanoudakis, George, Askoxylakis, Ioannis G.
• Format: Journal Article
• Language: English
• Published: Amsterdam Elsevier B.V 09-11-2016; Elsevier Sequoia S.A
• Subjects: Architecture (computers); Availability; Complexity; Computer information security; Computer programs; Confidentiality; Cybersecurity; Data integrity; Dependability; Design analysis; Design engineering; Design patterns; Drools; Networks; Properties (attributes); Security; Software; Software Defined Networks (SDN); Studies; Wireless networks; Software Defined Networks (SDN); Drools; Design patterns; Wireless networks; Dependability; Security
• ISSN: 1389-1286; 1872-7069
• DOI: 10.1016/j.comnet.2016.06.028

In an interconnected world, cyber and physical networks face a number of challenges that need to be resolved. These challenges are mainly due to the nature and complexity of interconnected systems and networks and their ability to support heterogeneous physical and cyber components simultaneously. The construction of complex networks preserving Security and Dependability (S&D) properties is necessary to avoid system vulnerabilities, which may occur in all the different layers of Software Defined Networking (SDN) architectures. In this paper, we present a model based approach to support the design of secure and dependable SDN. This approach is based on executable patterns for designing networks able to guarantee S&D properties and can be used in SDN networks. The design patterns express conditions that can guarantee specific S&D properties and can be used to design networks that have these properties and manage them during their deployment. To evaluate our pattern approach, we have implemented executable pattern instances, in a rule-based reasoning system, and used them to design and verify wireless SDN networks with respect to availability and confidentiality. To complete this work, we propose and evaluate an implementation framework in which S&D patterns can be applied for the design and verification of SDN networks.