A security architecture proposal for detection and response to threats in SDN networks

The Software Defined Networks (SDN) paradigm decouples control and data routing, offering high programmability and a global view of the network. The adoption of this approach is growing in enterprise networks, data centers and critical infrastructure such as smart grids. However, it is a challenge not only provide security in these next generation networks as well as allow a network attack is susceptible to an incident and forensic treatment procedure. Thus, this paper proposes a network architecture exploring new paradigms of SDN networks with detection and protection mechanisms, providing resources to perform intrusion analysis and attacks.