UDC 004.72
MODELING OF SECURITY PRINCIPLES IN SOFTWARE DEFINED NETWORKS
А. А. Pimenova, student, department of computer science, PSU, Penza, Russia;
orcid.org/0000-0001-6659-2211, e-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.
D. D. Nikitin, student, department of computer science, PSU, Penza, Russia; e-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.
K. I. Nikishin, Ph.D. (Tech.), associate professor, department of computer science, PSU, Penza, Russia;
orcid.org/0000-0001-7966-7833, e-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.
Currently, large requirements are imposed on computer networks to increase speed, performance and fault tolerance. An important criterion of any network is network fault tolerance and protection against vari- Вестник РГРТУ. 2022. № 82 / Vestnik of RSREU. 2022. No 82 71 ous attacks on the network. The article discusses the principles of security and the study of attacks in software defined networks (SDN). SDN can be subject to various types of attacks. One of the most common attacks are DDoS (Distributed Denial of Service) and MITM (Main in the middle) attacks. The aim of the research is to study the principles of security in SDN and to research various attack, such as DDoS and MITM using color Petri nets and CPN Tools modeling package. The objectives of the study are to detect attacks on each Open-Flow switch of any packet with fake data, to analyze the substitution of MAC address in a packet stream of the network. Hierarchical models on Petri nets made it possible not only to investigate the functioning and behavior of network control system and its security principles, but also to verify the model and the algorithm for protecting switch and control system from DDoS, MITM attacks.
Key words: Software Defined Networks, controller, switch, OpenFlow, Flow Table ,safety, DDoS attack, MITM attack, Petri Nets, CPN Tools.