By advancing technologies in both hardware and software, it is possible to support more complex applications. Wireless Sensor Networks (WSNs) comprised of tiny sensing devices with wireless radios are the key enablers for future Internet of Things(IoT) applications, where collecting measurements and delivering them to their destination is the most important task. In traditional sensor networks, sensor nodes were typically stationary and each node periodically measured and sent data to the next predefined router. However, in current applications, some nodes are expected to move. For instance, in health monitoring applications, where patients with sensors attached to their body are free to move in the hospital or their houses. Software Defined Networking (SDN) is a technique that was conventionally used in wired networks, and recently was used in some wireless networks, such as cellular and wireless local area networks. The idea of SDN is to provide more flexibility in the network by getting the advantage of re-programmability of the network devices during run-time. In networks based on SDN, the control plane is shifted from the infrastructure to a higher level in order to provide re-configuration. The controller decides on updating forwarding rules by getting some feedback from nodes in the network. In wireless sensor networks, the feedback may contain information related to the link quality and available resources such as battery level and the location of the sensor node (number of hops away from the sink). In this thesis, a study ofseveral relevant SDN-based architectures for wireless sensor networks is given, outlining the main advantages and disadvantages for each. In addition, some mobility solutions in sensor networks such as localization, routing and hand-off algorithms are explored. One of the drawbacks with SDN is that it was originally built for wired networks there experience with mobility does not exist. Thus the thesis considers the possibility to use SDN solutions in WSN were certain applications are in need of mobility. Finally, the thesis propose mobility solution for sensor networks that takes advantage of SDN and uses a handoff algorithm. In fact, the hand-off mechanism is achieved by means of control message exchanges that is supervised by the controller.

abstract: Network Management is a critical process for an enterprise to configure and monitor the network devices using cost effective methods. It is imperative for it to be robust and free from adversarial or accidental security flaws. With the advent of cloud computing and increasing demands for centralized network control, conventional management protocols like Simple Network Management Protocol (SNMP) appear inadequate and newer techniques like Network Management Datastore Architecture (NMDA) design and Network Configuration (NETCONF) have been invented. However, unlike SNMP which underwent improvements concentrating on security, the new data management and storage techniques have not been scrutinized for the inherent security flaws. In this thesis, I identify several vulnerabilities in the widely used critical infrastructures which leverage the NMDA design. Software Defined Networking (SDN), a proponent of NMDA, heavily relies on its datastores to program and manage the network. I base my research on the security challenges put forth by the existing datastore’s design as implemented by the SDN controllers. The vulnerabilities identified in this work have a direct impact on the controllers like OpenDayLight, Open Network Operating System and their proprietary implementations (by CISCO, Ericsson, RedHat, Brocade, Juniper, etc). Using the threat detection methodology, I demonstrate how the NMDA-based implementations are vulnerable to attacks which compromise availability, integrity, and confidentiality of the network. I finally propose defense measures to address the security threats in the existing design and discuss the challenges faced while employing these countermeasures. / Dissertation/Thesis / Masters Thesis Computer Science 2018

The Internet, with cloud computing, offers amazing services that require a fast, intelligent, reliable network connection. Current networks, electrical or optical, need to work together to provide the user with a high-quality connection. The IP protocol as Layer 3 and an optical network as Layer 2 need to talk to each other and help each other instead of working separately. Therefore, this thesis proposes using software-defined network (SDN) technology for integrating the IP protocol into an optical network to fill the gap between the two layers and to give the network more intelligence and flexibility for new connection requests, choosing the best route, and monitoring the network. A two-layer SDN centralized controller design has been used. The Layer 1 SDN controller is the centralized controller that connects and updates all Layer 2 SDN controllers which control traffic in each domain. New connection requests are processed in the SDN controller and the traffic is forwarded by the optical network. SDN technology and the integration of IP into the optical network promise to enhance network connectivity.

Yes / Software-Defined Networking (SDN), a novel and innovative networking technology, offers programmability and flexibility within networks and centralized control of those networks. The separation of data and control planes, as well as the concentration of all control provisioning options within a SDN controller, are two of the most significant ways in which SDN improves on traditional network deployments. However, because different planes in an SDN network are separated, the network contains several attack vectors that malicious users could exploit. Distributed Denial-of-Service (DDoS) attacks pose a unique threat to SDN because they can disrupt connections between the controller and data plane devices. Therefore, developing and implementing intrusion detection systems (IDS) in SDN is necessary. This paper investigates IDS in software-defined networks for effectively detecting DDoS attacks using signature-based and machine learning (ML)-based approaches. Mininet and OpenDayLight are used to simulate an SDN environment in which normal and attack traffic is generated to assess intrusion detection techniques. The Snort IDS is employed as the signature-based IDS in this study, while the ML algorithms, Random Forest (RF), J48, Naive Bayes (NB), and Support Vector Machine (SVM) are used to implement the ML-based IDS. The IDS are examined using SDN-generated traffic, with the InSDN-NB model surpassing all other ML models and Snort IDS with 98.86% prediction accuracy and a train time of 1.46s.

This thesis focuses on proposing a Software Defined Network (SDN) based programmable and capacity optimized backhaul and core network which is critical for 5G network design. Cloud Radio Access networks (CRAN) which is key enabler of 5G networks can address a number of challenges that mobile operators face while trying to support ever-growing end-users' needs towards 5th generation of mobile networks (5G). A novel layered and modular programmable CRAN architecture called Software Defined Virtualised Cloud Radio Access Network (SD-vCRAN) is introduced with Network Function Virtualization (NFV) and Software Defined Network (SDN) capabilities. The SDN-Base Band Unit (BBU) pool is shifted to the programmable core network site, where a centralised SDN controller manages the network servers and virtualised network function entities - Mobile Management Entity (MME), Serving/Packet Data Network Data plane (S/PGW-D), Serving/Packet Data Network Control plane (S/PGW-C), Software Network Defined Baseband Unit (SDN-BBU) and Local controllers (LC) via OpenFlow (OF) protocol. This approach simplifies network operations, improve traffic management, enable system-wide optimisation of Quality of Service (QoS) and network-aware application development. The control plane (excluding the preserved 3GPP standard interfaces: S1-MME, S6a, Gx) managed by the network servers provides load balancing, traffic management and optimisation tools for the data plane. The proposed work starts by reviewing the requirements of 5G networks, followed by discussion on 5G backhaul and core challenge. Then, an overview of CRAN, Evolved Programmable Core (EPC), SDN, NFV and related works. The simulation details of the proposed architecture are discussed along with the challenges faced by adopting SDN and NFV in mobile core. A thorough assessment of the interfaces and protocols that should be conserved or enhanced on both data and control plane is conducted. The result enables an architecture where the SDN-BBU pool shares a single cloud with the programmable EPC and the control plane is migrated from the network elements to a centralized controller, running on a virtual machine in the mobile core. The data and control plane separation removes overlaps and provides better signalling, as well as efficient network functioning to comply with latency demands. The proposed system performance is validated in terms of throughput, datagram loss, and packet delay variation under three scenarios: 1. single policy installation, 2. multiple policy installation and 3. load balancing. The load balancing performance of proposed system is validated comparing the performance of two different SDN controllers: Floodlight and OpenDaylight, where the later performs better in terms of throughput (no bandwidth restriction), packet loss (below 0.3%) and jitter (below 0.2ms). Furthermore, a detailed comparison of two SDN controller's - Floodlight and OpenDaylight performances is presented, which shows that OpenDaylight performs better only for less dense networks which needs less processing of messages without being blocked, and the Floodlight performs better in ultra-dense network. Some directions and preliminary thoughts for future work and necessary information to operators for building their roadmap to the upcoming technologies is presented.

Detta projekt har haft som mål att skapa ett redundant SDN-nätverk som ska ligga som grund för ett fiktivt företag. Företeaget ska kunna använda nätverket som vi bygger upp för att vidareutveckla detta och anpassa det efter verksamhetens behov. Nätverket byggs upp med mininet som används för att simulera en nätverksmiljö. Det fiktiva företaget ska sedan bara kunna lyfta ut nätverket från mininet ut till ett riktigt nätverk. Nätverkets funktioner, såsom protokollen STP och LACP implementeras med hjälp av programmeringsspråket python. / The goal for this project is to setup a redundant Software Defined Network for a fictive company. The company should be able to use the network for future network extension. The network will be built in mininet. Mininet is a software that is used to simulate a real network environment. The company should also be able to take the simulated network in mininet and implement it in to a real network. The protocols STP and LACP are implemented in the network by means of the programming language python.

In this diploma thesis is described new network architecture also known as software defined networks. In first part of work are explained and described tasks of individual architecture layers. Work includes discussion about advantages and disadvantages of these networks. In next part is described OpenFlow protocol which allows to controller communicate with underlying hardware devices. Last part contains proposal of laboratory excercises which demonstrate SDN technology.

Under the umbrella of Internet of Things (IoT) and Internet of Everything (IoE), new applications with diverse requirements have emerged and the traditional System-on-Chips (SoCs) were unable to support them. Hence, new versatile SoC architectures were designed, like chiplets and Cloud-of-Chips (CoC). A key component of every SoC, is the on-chip interconnect technology, which is responsible for the communication between Processing Elements (PEs) of a system. Network-on-Chip (NoC) is the current widely used interconnect technology, which is a layered, scalable approach. However, the last years the high structural complexity together with the functional diversity and the challenges (QoS, high latency, security) of NoC motivated the researchers to explore alternatives of it. One NoC alternative that recently gained attention is the Software Defined Network-on-Chip (SDNoC). SDNoC originated from Software Defined Network (SDN) technology, which supports the dynamic nature of future networks and applications, while lowering operating costs through simplified hardware and software. Nevertheless, SDN technology designed for large scale networks. Thus, in order to be ported to micro-scale networks proper alterations and new hardware architectures need to be considered.In this thesis, an exploration of how to embed the SDN technology within the micro scale networks in order to provide secure and manageable communication, improve the network performance and reduce the hardware complexity is presented. Precisely, the design and implementation of an SDNoC architecture is thoroughly described followed by the creation and evaluation of a novel SDNoC communication protocol, called MicroLET, in order to provide secure and efficient communication within system components. Furthermore, the security aspect of SDNoC constitutes a big gap in the literature. Hence, it has been addressed by proposing a secure SDNoC Group Key Agreement (GKA) communication protocol, called SSPSoC, followed by the exploration of Byzantine faults within SDNoC and the investigation of a novel Hardware Trojan (HT) attack together with a proposed detection and defend method. / Doctorat en Sciences de l'ingénieur et technologie / info:eu-repo/semantics/nonPublished

Software-defined Networking (SDN) is an emerging trend in communication networks that facilitates decoupling the control and data plane of multilayer switches. A logically centralized controller hosted on a server configures the forwarding tables (flow tables) of switches in order to route the various data flows.  To implement SDN, OpenFlow technology has been adopted by packet switching vendors as it provides increased flexibility for the control and management of a packet switched domain. OpenFlow technology provides flow based switching that is controlled by a network management control application running in an OpenFlow controller. In this thesis work we investigate how an OpenFlow Controller communicates with a legacy network via the OSPF routing protocol, how the size of the OpenFlow network effects the resources (memory and CPU) of a legacy router to whom the controller communicates. Also we examine bandwidth utilization of the link (between the OpenFlow network and legacy router). The main goal of this thesis is to find methods to reduce the consumption of resources of a legacy router. This study shows that the size of OpenFlow network directly affects the usage of the link’s bandwidth, and the memory and CPU usage of a legacy router. Aggregated information from the OpenFlow controller which is sent towards the legacy router can reduce the utilization of these resources. Finally we proposed several algorithms and design models that can be implemented for route aggregation in Software-defined Networks.  Implementation of the solutions suggested in this thesis will allow automatic route aggregation in SDN. ISPs deploying SDN architecture could benefit from the proposed design models and route aggregation solution. / Software-definierade nätverk (SDN) är en framväxande trend i kommunikationsnät som underlättar frikoppling kontroll och uppgifter plan flerskiktade switchar. Ett logiskt centraliserad styrenhet på en server konfigurerar vidarebefordran tabeller (flödestabeller) av växlar för att dirigera de olika dataflöden. För att genomföra SDN har OpenFlow teknik har antagits av paketförmedlande leverantörer eftersom det ger ökad flexibilitet för kontroll och förvaltning av en påslagen paket domän. OpenFlow teknik ger flöde baserad omkoppling som styrs av ett nätverk ledningens kontroll som körs i en OpenFlow controller. I detta examensarbete undersöker vi hur en OpenFlow Controller kommunicerar med ett äldre nätverk via OSPF routing protokoll, hur storleken på OpenFlow nätverkseffekter de resurser (minne och CPU) av en äldre router till vilken styrenheten kommunicerar.  Också vi undersöker bandbreddsutnyttjandet av sambandet (mellan OpenFlow nätverket och äldre router). Det huvudsakliga målet med detta examensarbete är att hitta metoder för att minska konsumtionen av resurser från en äldre router. Denna studie visar att storleken på OpenFlow nätverk direkt påverkar användningen av länkens bandbredd och minne och CPU-användning av en äldre router. Samlad information från OpenFlow styrenhet som sändes mot äldre router kan minska utnyttjandet av dessa resurser. Slutligen föreslog vi flera algoritmer och modeller konstruktion som kan genomföras för route aggregation i Software Defined-nätverk. Genomförandet av de lösningar som föreslås i denna avhandling kommer att möjliggöra automatisk route aggregation i SDN. Internetleverantörer distribuerar SDN arkitektur kunde dra nytta av den föreslagna utformningen modeller och route aggregation lösning.

The ever-increasing applications of Big Data in improving networking application performancehave motivated the networking community to deploy it in SDN (Software defined network) toconstruct flexible, scalable, self-aware, and self-managing networks. The primary purpose ofthis research is to investigate the validity of tensor-decomposition, a well-knownmathematical approach for data reduction, to catch patterns in network traffic as an initialstep toward the network's intelligence.Using only three-dimensional (cubic) tensors (Source, Destination, Bandwidth). Theconducted research used both offline (not simulated) and online (Mininet and RYU controllersimulation) network traffic of the GEANT (TOTEM) dataset. From the tensor decompositionanalysis on the adjacency matricies, we caught traffic intensity patterns between nodes(switches), which provided suggestions that helps rebuild the topology (which nodes shouldbe physically connected to the others). However, capturing the patterns in the time revolutionwas invalid due to limitations in the three-dimensional tensor.