Deployment of Robust Security Scheme in SDN Based 5G Network over NFV Enabled Cloud Environment

• Published in: IEEE transactions on emerging topics in computing 2021-04, Vol.9 (2), p.866-877
• Main Authors: Abdulqadder, Ihsan H., Zou, Deqing, Aziz, Israa T., Yuan, Bin, Dai, Weiqi
• Format: Article
• Language: English
• Subjects: 5G mobile communication; Algorithms; Artificial neural networks; Authentication; cloud; Cloud computing; Cybersecurity; DDoS; Failure rates; flow table; Fuzzy logic; Handover; Network latency; NFV; Packet switching; Privacy; Robustness; SDN; Software-defined networking; Switches; Virtual networks; Washing; Wireless networks
• ISSN: 2168-6750; 2168-6750
• DOI: 10.1109/TETC.2018.2879714

In this Modern era, Software Defined Network (SDN), Network Function Virtualization (NFV), and cloud computing participating of Fifth Generation (5G) network emergence. This paper presents a robust security scheme to provide fortification against major threats along with user privacy in 5G network, two additional entities are introduced. For mobile users, initial authentication is provided at access points by an inventive Highly Secured Authentication and Handover Mechanism (HS-AOHM) scheme which minimizes handover latency without loss of user privacy. Then the authorized user packets are arrived at dispatcher in which a novel Tree Based Switch Assignment (TBSA) algorithm is incorporated. TBSA mitigates the flow table overloading attack by assigning packets to underloaded switches. In controller, DDoS attack is detected with the assist of entropy analysis. Then the suspicious packets are redirected to scrubbing Virtual Network Function (sVNF) in cloud. In sVNF, suspicious packets are classified into normal packets and malicious packets by using Hybrid Fuzzy with Artificial Neural Network (HF-ANN) classifier based on packet features. Normal packets are allowed to access applications whereas malicious packets are dropped at sVNF. Extensive simulation shows security improvement in 5G network in terms of handover latency, holding time, switch failure rate, detection accuracy, and delay.