A Survey on Software-Defined VANETs: Benefits, Challenges, and Future Directions
---
paper_title: Maturing of OpenFlow and Software Defined Networking through Deployments

paper_content:

Software-defined Networking (SDN) has emerged as a new paradigm of networking that enables network operators, owners, vendors, and even third parties to innovate and create new capabilities at a faster pace. The SDN paradigm shows potential for all domains of use, including data centers, cellular providers, service providers, enterprises, and homes. Over a three-year period, we deployed SDN technology at our campus and at several other campuses nation-wide with the help of partners. These deployments included the first-ever SDN prototype in a lab for a (small) global deployment. The four-phased deployments and demonstration of new networking capabilities enabled by SDN played an important role in maturing SDN and its ecosystem. We share our experiences and lessons learned that have to do with demonstration of SDN's potential; its influence on successive versions of OpenFlow specification; evolution of SDN architecture; performance of SDN and various components; and growing the ecosystem.
---
paper_title: Vehicle Ad Hoc networks: applications and related technical issues

paper_content:

This article presents a comprehensive survey of the state-of-the-art for vehicle ad hoc networks. We start by reviewing the possible applications that can be used in VANETs, namely, safety and user applications, and by identifying their requirements. Then, we classify the solutions proposed in the literature according to their location in the open system interconnection reference model and their relationship to safety or user applications. We analyze their advantages and shortcomings and provide our suggestions for a better approach. We also describe the different methods used to simulate and evaluate the proposed solutions. Finally, we conclude with suggestions for a general architecture that can form the basis for a practical VANET.
---
paper_title: Software-Defined Networking for Internet of Things: A Survey

paper_content:

Internet of things (IoT) facilitates billions of devices to be enabled with network connectivity to collect and exchange real-time information for providing intelligent services. Thus, IoT allows connected devices to be controlled and accessed remotely in the presence of adequate network infrastructure. Unfortunately, traditional network technologies such as enterprise networks and classic timeout-based transport protocols are not capable of handling such requirements of IoT in an efficient, scalable, seamless, and cost-effective manner. Besides, the advent of software-defined networking (SDN) introduces features that allow the network operators and users to control and access the network devices remotely, while leveraging the global view of the network. In this respect, we provide a comprehensive survey of different SDN-based technologies, which are useful to fulfill the requirements of IoT, from different networking aspects— edge , access , core , and data center networking. In these areas, the utility of SDN-based technologies is discussed, while presenting different challenges and requirements of the same in the context of IoT applications. We present a synthesized overview of the current state of IoT development. We also highlight some of the future research directions and open research issues based on the limitations of the existing SDN-based technologies.
---
paper_title: CloudMAC: towards software defined WLANs

paper_content:

Traditional enterprise WLAN management systems are hard to extend and require powerful access points (APs). In this paper we introduce and evaluate CloudMAC, an architecture for enterprise WLANs in which MAC frames are generated and processed on virtual APs hosted in a datacenter. The APs only need to forward MAC frames. The APs and the servers are connected via an OpenFlow-enabled network, which allows to control where and how MAC frames are transmitted.
---
paper_title: Advertising in the IoT Era: Vision and Challenges

paper_content:

The IoT extends the idea of interconnecting computers to a plethora of different devices, collectively referred to as smart devices. These are physical items, that is, "things", such as wearable devices, home appliances, and vehicles, enriched with computational and networking capabilities. Due to the huge set of devices involved, and therefore its pervasiveness, IoT is a great platform to leverage for building new applications and services or extending existing ones. In this regard, expanding online advertising into the IoT realm is an under-investigated yet promising research direction, especially considering that the traditional Internet advertising market is already worth hundreds of billions of dollars. In this article, we first propose the architecture of an IoT advertising platform inspired by the well known business ecosystem, which the traditional Internet advertising is based on. Additionally, we discuss the key challenges to implement such a platform, with a special focus on issues related to architecture, advertisement content delivery, security, and privacy of the users.
---
paper_title: OpenRoads: empowering research in mobile networks

paper_content:

We present OpenRoads, an open-source platform for innovation in mobile networks. OpenRoads enable researchers to innovate using their own production networks, through providing an wireless extension OpenFlow. Therefore, you can think of OpenRoads as "OpenFlow Wireless". The OpenRoads' architecture consists of three layers: flow, slicing and controller. These layers provide flexible control, virtualization and high-level abstraction. This allows researchers to implement wildly different algorithms and run them concurrently in one network. OpenRoads also incorporates multiple wireless technologies, specifically WiFi and WiMAX. We have deployed OpenRoads, and used it as our production network. Our goal here is for those to deploy OpenRoads and build their own experiments on it.
---
paper_title: Vehicle Ad Hoc networks: applications and related technical issues

paper_content:

This article presents a comprehensive survey of the state-of-the-art for vehicle ad hoc networks. We start by reviewing the possible applications that can be used in VANETs, namely, safety and user applications, and by identifying their requirements. Then, we classify the solutions proposed in the literature according to their location in the open system interconnection reference model and their relationship to safety or user applications. We analyze their advantages and shortcomings and provide our suggestions for a better approach. We also describe the different methods used to simulate and evaluate the proposed solutions. Finally, we conclude with suggestions for a general architecture that can form the basis for a practical VANET.
---
paper_title: Security challenges in vehicular cloud computing

paper_content:

In a series of recent papers, Prof. Olariu and his co-workers have promoted the vision of vehicular clouds (VCs), a nontrivial extension, along several dimensions, of conventional cloud computing. In a VC, underutilized vehicular resources including computing power, storage, and Internet connectivity can be shared between drivers or rented out over the Internet to various customers. Clearly, if the VC concept is to see a wide adoption and to have significant societal impact, security and privacy issues need to be addressed. The main contribution of this work is to identify and analyze a number of security challenges and potential privacy threats in VCs. Although security issues have received attention in cloud computing and vehicular networks, we identify security challenges that are specific to VCs, e.g., challenges of authentication of high-mobility vehicles, scalability and single interface, tangled identities and locations, and the complexity of establishing trust relationships among multiple players caused by intermittent short-range communications. Additionally, we provide a security scheme that addresses several of the challenges discussed.
---
paper_title: 1 Communication Patterns in VANETs

paper_content:

Vehicular networks are a very promising technology to increase traffic safety and efficiency, and to enable numerous other applications in the domain of vehicular communication. Proposed applications for VANETs have very diverse properties and often require nonstandard communication protocols. Moreover, the dynamics of the network due to vehicle movement further complicates the design of an appropriate comprehensive communication system. In this article we collect and categorize envisioned applications from various sources and classify the unique network characteristics of vehicular networks. Based on this analysis, we propose five distinct communication patterns that form the basis of almost all VANET applications. Both the analysis and the communication patterns shall deepen the understanding of VANETs and simplify further development of VANET communication systems.
---
paper_title: Fast and Secure Multihop Broadcast Solutions for Intervehicular Communication

paper_content:

Intervehicular communication (IVC) is an important emerging research area that is expected to considerably contribute to traffic safety and efficiency. In this context, many possible IVC applications share the common need for fast multihop message propagation, including information such as position, direction, and speed. However, it is crucial for such a data exchange system to be resilient to security attacks. Conversely, a malicious vehicle might inject incorrect information into the intervehicle wireless links, leading to life and money losses or to any other sort of adversarial selfishness (e.g., traffic redirection for the adversarial benefit). In this paper, we analyze attacks to the state-of-the-art IVC-based safety applications. Furthermore, this analysis leads us to design a fast and secure multihop broadcast algorithm for vehicular communication, which is proved to be resilient to the aforementioned attacks.
---
paper_title: Towards software-defined VANET: Architecture and services

paper_content:

Vehicular Ad Hoc Networks (VANETs) have in recent years been viewed as one of the enabling technologies to provide a wide variety of services, such as vehicle road safety, enhanced traffic and travel efficiency, and convenience and comfort for passengers and drivers. However, current VANET architectures lack in flexibility and make the deployment of services/protocols in large-scale a hard task. In this paper, we demonstrate how Software-Defined Networking (SDN), an emerging network paradigm, can be used to provide the flexibility and programmability to networks and introduces new services and features to today's VANETs. We take the concept of SDN, which has mainly been designed for wired infrastructures, especially in the data center space, and propose SDN-based VANET architecture and its operational mode to adapt SDN to VANET environments. We also discuss benefits of a Software-Defined VANET and the services that can be provided. We demonstrate in simulation the feasibility of a Software-Defined VANET by comparing SDN-based routing with traditional MANET/VANET routing protocols. We also show in simulation fallback mechanisms that must be provided to apply the SDN concept into mobile wireless scenarios, and demonstrate one of the possible services that can be provided by a Software-Defined VANET.
---
paper_title: The position cheating attack on inter-vehicular online gaming

paper_content:

New in-car communications and entertainment systems have emerged, enabling interconnection of various components in vehicles (e.g., TVs, CD/DVD players, media players, and cell phones). With the new advances of automotive industry, car passengers embody the next consumers that will be targeted by online game providers. In this context, researchers on online games demonstrated the importance of the network's performance in determining the quality level perceived by consumers. Enabling games over Vehicular Ad hoc Networks (VANET) will require the design of secure architectures against threats, in order to not jeopardize the effectiveness of online gaming over VANET. These threats could increase the delivery delay of game events, leading to the unsatisfaction of passengers. In this paper, we address security threats for online gaming over VANET. In particular, we focus on a representative vehicular broadcast algorithm, and we discuss a cheating threat. Indeed, the attacker could use the location-aware game message exchange to cheat about his position, thus enforcing game events to be delayed, and reduce the quality of service. Finally, we run a thorough set of simulations to assess the impact of the position cheating attack to the online gaming over VANET.
---
paper_title: Vehicle Software Updates Distribution with SDN and Cloud Computing

paper_content:

Vehicles have embedded software dedicated to diverse functionality ranging from driving assistance to entertainment. Vehicle manufacturers often need to perform updates on software installed on vehicles. Software updates can either be pushed by the manufacturer to install fixes, or be requested by vehicle owners to upgrade some functionality. We propose an architecture for distributing software updates on vehicles based on SDN and cloud computing. We show that using SDN, the emergent networking paradigm, which provides on-demand network programmability, adds substantial flexibility for deploying software updates on vehicles. We propose solutions for how vehicular networks can be modeled as connectivity graphs that can be used as input for the SDN architecture. After constructing graphs, we present an SDN-based solution where different frequency bands are assigned to different graph edges to improve the network performance.
---
paper_title: SDVN: enabling rapid network innovation for heterogeneous vehicular communication

paper_content:

With the advances in telecommunications, more and more devices are connected to the Internet and getting smart. As a promising application scenario for carrier networks, vehicular communication has enabled many traffic-related applications. However, the heterogeneity of wireless infrastructures and the inflexibility in protocol deployment hinder the real world application of vehicular communications. SDN is promising to bridge the gaps through unified network abstraction and programmability. In this research, we propose an SDN-based architecture to enable rapid network innovation for vehicular communications. Under this architecture, heterogeneous wireless devices, including vehicles and roadside units, are abstracted as SDN switches with a unified interface. In addition, network resources such as bandwidth and spectrum can also be allocated and assigned by the logically centralized control plane, which provides a far more agile configuration capability. Besides, we also study several cases to highlight the advantages of the architecture, such as adaptive protocol deployment and multiple tenants isolation. Finally, the feasibility and effectiveness of the proposed architecture and cases are validated through traffic-trace-based simulation.
---
paper_title: The impact of malicious nodes positioning on vehicular alert messaging system

paper_content:

ICT components of vehicular and transportation systems have a crucial role in ensuring passengers' safety, particularly in the scenario of vehicular networks. Hence, security concerns should not be overlooked, since a malicious vehicle might inject false information into the intervehicle wireless links, leading to life and money losses. This is even more critical when considering applications specifically aimed at improving people's safety, such as accident warning systems. To assess the scenario of such type of applications in a vehicular network, we have performed a thorough evaluation of accident warning systems under a position cheating attack. As one of the main contributions of this paper, we determine the impact of a different number of malicious vehicles on delaying the alert warning messages. In particular, we study the impact of the position of malicious vehicles on delaying alert messages. We identify the most effective strategies that could be used by malicious vehicles in order to maximize the delay of the alert message, and thus strengthen the impact of the attacker. Finally, we pinpoint that even with a small number of malicious vehicles, the positioning cheating attack can significantly increase the delay of the alert message when compared to a scenario without attack.
---
paper_title: Privacy-Preserving Vehicular Communication Authentication with Hierarchical Aggregation and Fast Response

paper_content:

Existing secure and privacy-preserving schemes for vehicular communications in vehicular ad hoc networks face some challenges, e.g., reducing the dependence on ideal tamper-proof devices, building efficient member revocation mechanisms and avoiding computation and communication bottlenecks. To cope with those challenges, we propose a highly efficient secure and privacy-preserving scheme based on identity-based aggregate signatures. Our scheme enables hierarchical aggregation and batch verification. The individual identity-based signatures generated by different vehicles can be aggregated and verified in a batch. The aggregated signatures can be re-aggregated by a message collector (e.g., traffic management authority). With our hierarchical aggregation technique, we significantly reduce the transmission/storage overhead of the vehicles and other parties. Furthermore, existing batch verification based schemes in vehicular ad hoc networks require vehicles to wait for enough messages to perform a batch verification. In contrast, we assume that vehicles will generate messages (and the corresponding signatures) in certain time spans, so that vehicles only need to wait for a very short period before they can start the batch verification procedure. Simulation shows that a vehicle can verify the received messages with very low latency and fast response.
---
paper_title: Performance Evaluation of the IEEE 802.11p WAVE Communication Standard

paper_content:

In order to provide Dedicated Short Range Communication (DSRC) for future vehicle-to-vehicle (V2V) communication the IEEE is currently working on the IEEE 802.11p Wireless Access in Vehicular Environments (WAVE) standard. The standard shall provide a multi-channel DSRC solution with high performance for multiple application types to be used in future Vehicular Ad Hoc Networks (VANETs). We provide a performance evaluation of the standard, considering collision probability, throughput and delay, using simulations and analytical means. WAVE can prioritize messages, however, in dense and high load scenarios the the troughput is decreases while the delay is increasing significantly.
---
paper_title: An Intervehicular Communication Architecture for Safety and Entertainment

paper_content:

Intervehicle communication (IVC) is emerging in research prominence for the interest that it is generating in all major car manufacturers and for the benefits that its inception will produce. The specific features of IVC will allow the deployment of a wide set of possible applications, which span from road safety to entertainment. Even if, on the one hand, these applications share the common need for fast multihop message propagation, on the other hand, they possess distinct characteristics in terms of generated network traffic. The state of the art of current research only proposes solutions specifically designed for a single application (or class) that is not directly extendable to a general IVC context. Instead, we claim that a privileged architecture exists, which is able to support the whole spectrum of application classes. To this aim, we propose a novel IVC architecture that adapts its functionalities to efficiently serve applications by quickly propagating their messages over a vehicular network. We conducted an extensive set of experiments that demonstrate the efficacy of our approach. As representative case studies, we considered two application classes that, for their network traffic characteristics, are at the opposite boundaries of the application spectrum: safety and entertainment.
---
paper_title: A Scalable and Quick-Response Software Defined Vehicular Network Assisted by Mobile Edge Computing

paper_content:

Connected vehicles provide advanced transformations and attractive business opportunities in the automotive industry. Presently, IEEE 802.11p and evolving 5G are the mainstream radio access technologies in the vehicular industry, but neither of them can meet all requirements of vehicle communication. In order to provide low-latency and high-reliability communication, an SDN-enabled network architecture assisted by MEC, which integrates different types of access technologies, is proposed. MEC technology with its on-premises feature can decrease data transmission time and enhance quality of user experience in latency-sensitive applications. Therefore, MEC plays as important a role in the proposed architecture as SDN technology. The proposed architecture was validated by a practical use case, and the obtained results have shown that it meets application- specific requirements and maintains good scalability and responsiveness.
---
paper_title: Intelligent Traffic Light Controlling Algorithms Using Vehicular Networks

paper_content:

In this paper, we propose an intelligent traffic light controlling (ITLC) algorithm. ITLC is intended to schedule the phases of each isolated traffic light efficiently. This algorithm considers the real-time traffic characteristics of the competing traffic flows at the signalized road intersection. Moreover, we have adopted the ITLC algorithm to design a traffic scheduling algorithm for an arterial street scenario; we have thus proposed an arterial traffic light (ATL) controlling algorithm. In the ATL controlling algorithm, the intelligent traffic lights installed at each road intersection coordinate with each other to generate an efficient traffic schedule for the entire road network. We report on the performance of ITLC and ATL algorithms for several scenarios using NS-2. From the experimental results, we infer that the ITLC algorithm reduces, at each isolated traffic light, the queuing delay and increases the traffic fluency by 30% compared with the online algorithm (OAF) traffic light scheduling algorithm. The latter algorithm achieved the best performance when compared with the OAF traffic light scheduling algorithm. On the other hand, the ATL controlling algorithm increases the traffic fluency of traveling vehicles at arterial street coordinations by 70% more than the random and separate traffic light scheduling system. Furthermore, compared with the previously introduced traffic scheduling ART-SYS, the ATL controlling algorithm decreases the average delay at each traffic light by 10%.
---
paper_title: A secure and efficient communication scheme with authenticated key establishment and privacy preserving for vehicular ad hoc networks

paper_content:

Privacy and security should be paid much more attention in secure vehicular ad hoc networks (VANETs). However, as far as we know, few researches on secure VANET protocols have addressed both the privacy issues and authenticated key establishment. Therefore, in this work, a lightweight authenticated key establishment scheme with privacy preservation to secure the communications between mobile vehicles and roadside infrastructure in a VANET is proposed, which is called SECSPP. Our proposed scheme not only accomplishes vehicle-to-vehicle and vehicle-to-roadside infrastructure authentication and key establishment for communication between members, but also integrates blind signature techniques into the scheme in allowing mobile vehicles to anonymously interact with the services of roadside infrastructure. We also show that our scheme is efficient in its implementation on mobile vehicles in comparison with other related proposals.
---
paper_title: A Survey on Software-Defined Networking

paper_content:

Emerging mega-trends (e.g., mobile, social, cloud, and big data) in information and communication technologies (ICT) are commanding new challenges to future Internet, for which ubiquitous accessibility, high bandwidth, and dynamic management are crucial. However, traditional approaches based on manual configuration of proprietary devices are cumbersome and error-prone, and they cannot fully utilize the capability of physical network infrastructure. Recently, software-defined networking (SDN) has been touted as one of the most promising solutions for future Internet. SDN is characterized by its two distinguished features, including decoupling the control plane from the data plane and providing programmability for network application development. As a result, SDN is positioned to provide more efficient configuration, better performance, and higher flexibility to accommodate innovative network designs. This paper surveys latest developments in this active research area of SDN. We first present a generally accepted definition for SDN with the aforementioned two characteristic features and potential benefits of SDN. We then dwell on its three-layer architecture, including an infrastructure layer, a control layer, and an application layer, and substantiate each layer with existing research efforts and its related research areas. We follow that with an overview of the de facto SDN implementation (i.e., OpenFlow). Finally, we conclude this survey paper with some suggested open research challenges.
---
paper_title: OpenFlow: enabling innovation in campus networks

paper_content:

This whitepaper proposes OpenFlow: a way for researchers to run experimental protocols in the networks they use every day. OpenFlow is based on an Ethernet switch, with an internal flow-table, and a standardized interface to add and remove flow entries. Our goal is to encourage networking vendors to add OpenFlow to their switch products for deployment in college campus backbones and wiring closets. We believe that OpenFlow is a pragmatic compromise: on one hand, it allows researchers to run experiments on heterogeneous switches in a uniform way at line-rate and with high port-density; while on the other hand, vendors do not need to expose the internal workings of their switches. In addition to allowing researchers to evaluate their ideas in real-world traffic settings, OpenFlow could serve as a useful campus component in proposed large-scale testbeds like GENI. Two buildings at Stanford University will soon run OpenFlow networks, using commercial Ethernet switches and routers. We will work to encourage deployment at other schools; and We encourage you to consider deploying OpenFlow in your university network too
---
paper_title: A Buffer-Aware QoS Streaming Approach for SDN-Enabled 5G Vehicular Networks

paper_content:

With the progress of network technology in recent years, multimedia streaming applications have become increasingly popular. However, it is difficult to achieve quality of service and efficiency for multimedia streaming over vehicular networks because of the high mobility feature. Over the existing network architecture, it is difficult to immediately analyze the status of the entire network, and then establish the rules of allocation and management. However, the novel network architecture, software-defined networking, offers other options for making network management more efficient, especially for the 5G network environment. Hence, a buffer-aware streaming approach is proposed to allow users to play multimedia streaming over vehicular 5G networks, in the case of handover between different eNodeBs, to achieve minimum delay and have better quality of service. According to the user's mobility information, the status of the player buffer, and the current strength of the network signal, the proposed approach can provide the transmission strategy of multimedia streaming to the SDN controller. Finally, the experimental results proved that the proposed approach is able to not only adjust the priority of streaming content segments with the buffer and mobility status of user equipment to effectively retain overall streaming services quality, but also avoid the delay of streaming content transmission for 5G vehicular networks.
---
paper_title: 5G next generation VANETs using SDN and fog computing framework

paper_content:

The growth of technical revolution towards 5G Next generation networks is expected to meet various communication requirements of future Intelligent Transportation Systems (ITS). Motivated by the consumer needs for variety of ITS applications, bandwidth, high speed and ubiquity, researches are currently exploring different network architectures and techniques, which could be employed in Next generation ITS. To provide flexible network management, control and high resource utilization in Vehicular Ad-hoc Networks (VANETs) on large scale, a new hierarchical 5G Next generation VANET architecture is proposed. The key idea of this holistic architecture is to integrate the centralization and flexibility of Software Defined Networking (SDN) and Cloud-RAN (CRAN), with 5G communication technologies, to effectively allocate resources with a global view. Moreover, a fog computing framework (comprising of zones and clusters) has been proposed at the edge, to avoid frequent handovers between vehicles and RSUs. The transmission delay, throughput and control overhead on controller are analyzed and compared with other architectures. Simulation results indicate reduced transmission delay and minimized control overhead on controllers. Moreover, the throughput of proposed system is also improved.
---
paper_title: 5G Software Defined Vehicular Networks

paper_content:

With the emergence of 5G mobile communication systems and software defined networks, not only could the performance of vehicular networks be improved, but also new applications of vehicular networks are required by future vehicles (e.g., pilotless vehicles). To meet requirements of intelligent transportation systems, a new vehicular network architecture integrated with 5G mobile communication technologies and software defined networking is proposed in this article. Moreover, fog cells have been proposed to flexibly cover vehicles and avoid frequent handover between vehicles and roadside units. Based on the proposed 5G software defined vehicular networks, the transmission delay and throughput are analyzed and compared. Simulation results indicate that there is a minimum transmission delay of 5G software defined vehicular networks considering different vehicle densities. Moreover, the throughput of fog cells in 5G software defined vehicular networks is better than the throughput of traditional transportation management systems.
---
paper_title: An Architecture for Hierarchical Software-Defined Vehicular Networks

paper_content:

With the recent advances in the telecommunications and auto industries, we have witnessed growing interest in ITS, of which VANETs are an essential component. SDN can bring advantages to ITS through its ability to provide flexibility and programmability to networks through a logically centralized controller entity that has a comprehensive view of the network. However, as the SDN paradigm initially had fixed networks in mind, adapting it to work on VANETs requires some changes to address particular characteristics of this kind of scenario, such as the high mobility of its nodes. There has been initial work on bringing SDN concepts to vehicular networks to expand its abilities to provide applications and services through the increased flexibility, but most of these studies do not directly tackle the issue of loss of connectivity with said controller entity. In this article, we propose a hierarchical SDN-based vehicular architecture that aims to have improved performance in the situation of loss of connection with the central SDN controller. Simulation results show that our proposal outperforms traditional routing protocols in the scenario where there is no coordination from the central SDN controller.
---
paper_title: Cooperative Data Scheduling in Hybrid Vehicular Ad Hoc Networks: VANET as a Software Defined Network

paper_content:

This paper presents the first study on scheduling for cooperative data dissemination in a hybrid infrastructure-to-vehicle (I2V) and vehicle-to-vehicle (V2V) communication environment. We formulate the novel problem of cooperative data scheduling (CDS). Each vehicle informs the road-side unit (RSU) the list of its current neighboring vehicles and the identifiers of the retrieved and newly requested data. The RSU then selects sender and receiver vehicles and corresponding data for V2V communication, while it simultaneously broadcasts a data item to vehicles that are instructed to tune into the I2V channel. The goal is to maximize the number of vehicles that retrieve their requested data. We prove that CDS is NP-hard by constructing a polynomial-time reduction from the Maximum Weighted Independent Set (MWIS) problem. Scheduling decisions are made by transforming CDS to MWIS and using a greedy method to approximately solve MWIS. We build a simulation model based on realistic traffic and communication characteristics and demonstrate the superiority and scalability of the proposed solution. The proposed model and solution, which are based on the centralized scheduler at the RSU, represent the first known vehicular ad hoc network (VANET) implementation of software defined network (SDN) concept.
---
paper_title: Delay-Minimization Routing for Heterogeneous VANETs With Machine Learning Based Mobility Prediction

paper_content:

Establishing and maintaining end-to-end connections in a vehicular ad hoc network (VANET) is challenging due to the high vehicle mobility, dynamic inter-vehicle spacing, and variable vehicle density. Mobility prediction of vehicles can address the aforementioned challenge, since it can provide a better routing planning and improve overall VANET performance in terms of continuous service availability. In this paper, a centralized routing scheme with mobility prediction is proposed for VANET assisted by an artificial intelligence powered software-defined network (SDN) controller. Specifically, the SDN controller can perform accurate mobility prediction through an advanced artificial neural network technique. Then, based on the mobility prediction, the successful transmission probability and average delay of each vehicle's request under frequent network topology changes can be estimated by the roadside units (RSUs) or the base station (BS). The estimation is performed based on a stochastic urban traffic model in which the vehicle arrival follows a non-homogeneous Poisson process. The SDN controller gathers network information from RSUs and BS that are considered as the switches. Based on the global network information, the SDN controller computes optimal routing paths for switches (i.e., BS and RSU). While the source vehicle and destination vehicle are located in the coverage area of the same switch, further routing decision will be made by the RSUs or the BS independently to minimize the overall vehicular service delay. The RSUs or the BS schedule the requests of vehicles by either vehicle-to-vehicle or vehicle-to-infrastructure communication, from the source vehicle to the destination vehicle. Simulation results demonstrate that our proposed centralized routing scheme outperforms others in terms of transmission delay, and the transmission performance of our proposed routing scheme is more robust with varying vehicle velocity.
---
paper_title: QoE-Based Flow Management in Software Defined Vehicular Networks

paper_content:

In vehicular networks, high mobility and limited transmission range of Road-Side Units (RSU) cause dynamic topological changes and result with interference occurred by transmission of vehicles. Moreover, due to the limited bandwidth of IEEE 802.11p based vehicular communication, providing a fair share of network resources among vehicles is essential for an efficient network management. Therefore, flow and interference management challenges cause a degradation in percentage of flow satisfied by effecting quality of communication and enhancing interference in vehicular networks. These aforementioned two challenges can be mitigated with Software-Defined Networking (SDN) paradigm where a centralized controller can schedule data flows and then coordinate power level of vehicles. Hence, in this paper, the cooperation of SDN and IEEE 802.11p based vehicular communication has been proposed in vehicular networks. We present a novel software- defined flow and power management model implemented into controller. Here, we classify vehicles based on Quality of Experience (QoE) and model RSUs with a queuing theoretic approach. Then the proposed model is used to detect unsatisfactory vehicles and estimate effective and accurate amount of transmission power of these vehicles so that unsatisfactory vehicles will be served a new assigned RSU with optimal signal level. Moreover, we redefine flow label field in OpenFlow flow table so that controller can manage to RSUs by imposing some behaviors. Numerical results show how a better flow satisfied can be maintained by implementing this idea.
---
paper_title: Towards software-defined VANET: Architecture and services

paper_content:

Vehicular Ad Hoc Networks (VANETs) have in recent years been viewed as one of the enabling technologies to provide a wide variety of services, such as vehicle road safety, enhanced traffic and travel efficiency, and convenience and comfort for passengers and drivers. However, current VANET architectures lack in flexibility and make the deployment of services/protocols in large-scale a hard task. In this paper, we demonstrate how Software-Defined Networking (SDN), an emerging network paradigm, can be used to provide the flexibility and programmability to networks and introduces new services and features to today's VANETs. We take the concept of SDN, which has mainly been designed for wired infrastructures, especially in the data center space, and propose SDN-based VANET architecture and its operational mode to adapt SDN to VANET environments. We also discuss benefits of a Software-Defined VANET and the services that can be provided. We demonstrate in simulation the feasibility of a Software-Defined VANET by comparing SDN-based routing with traditional MANET/VANET routing protocols. We also show in simulation fallback mechanisms that must be provided to apply the SDN concept into mobile wireless scenarios, and demonstrate one of the possible services that can be provided by a Software-Defined VANET.
---
paper_title: An efficient service channel allocation scheme in SDN-enabled VANETs

paper_content:

Providing infotainment services in Vehicular Adhoc Networks (VANETs) is a key functionality for the future intelligent transportation systems. However, the unique features of vehicular networks such as high velocity, intermittent communication links and dynamic density can induce severe performances degradation for infotainment services running on the six Service Channels (SCHs) available in the Dedicated Short Range Communication (DSRC). Although, the Wireless Access in the Vehicular Environment (WAVE) has been proposed for VANETs to support these applications and guarantee the QoS by proposing four different access categories, no service channel scheme has been proposed to ensure fair and interference-aware allocation. To fill this gap, in this work we propose ESCiVA, an Efficient Service Channel allocation Scheme in SDN-enabled VAnets to balance service traffic on the six SCHs and mitigate interferences between services provided on adjacent channels. Extensive simulation results confirm that ESCiVA outperforms the basic SCH allocation method, defined in the WAVE standard.
---
paper_title: Cost-Efficient Sensory Data Transmission in Heterogeneous Software-Defined Vehicular Networks

paper_content:

Sensing and networking have been regarded as key enabling technologies of future smart vehicles. Sensing allows vehicles to be context awareness, while networking empowers context sharing among ambients. Existing vehicular communication solutions mainly rely on homogeneous network, or heterogeneous network via data offloading. However, today’s vehicular network implementations are highly heterogeneous. Therefore, conventional homogeneous communication and data offloading may not be able to satisfy the requirement of the emerging vehicular networking applications. In this paper, we apply the software-defined network (SDN) to the heterogeneous vehicular networks to bridge the gaps. With SDN, heterogeneous network resources can be managed with a unified abstraction. Moreover, we propose an SDN-based wireless communication solution, which can schedule different network resources to minimize communication cost. We investigate the problems in both single and multiple hop cases. We also evaluate the proposed approaches using traffic traces. The effectiveness and the efficiency are validated by the results.
---
paper_title: Vehicle Software Updates Distribution with SDN and Cloud Computing

paper_content:

Vehicles have embedded software dedicated to diverse functionality ranging from driving assistance to entertainment. Vehicle manufacturers often need to perform updates on software installed on vehicles. Software updates can either be pushed by the manufacturer to install fixes, or be requested by vehicle owners to upgrade some functionality. We propose an architecture for distributing software updates on vehicles based on SDN and cloud computing. We show that using SDN, the emergent networking paradigm, which provides on-demand network programmability, adds substantial flexibility for deploying software updates on vehicles. We propose solutions for how vehicular networks can be modeled as connectivity graphs that can be used as input for the SDN architecture. After constructing graphs, we present an SDN-based solution where different frequency bands are assigned to different graph edges to improve the network performance.
---
paper_title: SDVN: enabling rapid network innovation for heterogeneous vehicular communication

paper_content:

With the advances in telecommunications, more and more devices are connected to the Internet and getting smart. As a promising application scenario for carrier networks, vehicular communication has enabled many traffic-related applications. However, the heterogeneity of wireless infrastructures and the inflexibility in protocol deployment hinder the real world application of vehicular communications. SDN is promising to bridge the gaps through unified network abstraction and programmability. In this research, we propose an SDN-based architecture to enable rapid network innovation for vehicular communications. Under this architecture, heterogeneous wireless devices, including vehicles and roadside units, are abstracted as SDN switches with a unified interface. In addition, network resources such as bandwidth and spectrum can also be allocated and assigned by the logically centralized control plane, which provides a far more agile configuration capability. Besides, we also study several cases to highlight the advantages of the architecture, such as adaptive protocol deployment and multiple tenants isolation. Finally, the feasibility and effectiveness of the proposed architecture and cases are validated through traffic-trace-based simulation.
---
paper_title: Data Offloading in 5G-Enabled Software-Defined Vehicular Networks: A Stackelberg-Game-Based Approach

paper_content:

Data offloading using vehicles is one of the most challenging tasks to perform due to the high mobility of vehicles. There are many solutions available for this purpose, but due to the inefficient management of data along with the control decisions, these solutions are not adequate to provide data offloading by making use of the available networks. Moreover, with the advent of 5G and related technologies, there is a need to cope with high speed and traffic congestion in the existing infrastructure used for data offloading. Hence, to make intelligent decisions for data offloading, an SDN-based scheme is presented in this article. In the proposed scheme, an SDNbased controller is designed that makes decisions for data offloading by using the priority manager and load balancer. Using these two managers in SDN-based controllers, traffic routing is managed efficiently even with an increase in the size of the network. Moreover, a single-leader multi-follower Stackelberg game for network selection is also used for data offloading. The proposed scheme is evaluated with respect to several parameters where its performance was found to be superior in comparison to the existing schemes.
---
paper_title: Link Stability Based Optimized Routing Framework for Software Defined Vehicular Networks

paper_content:

The dynamic nature of vehicular networks imposes a lot of challenges in multihop data transmission as links are vulnerable in their existence due to associated mobility of vehicles. Thus, packets frequently find it difficult to get through to the destination due to the limited lifetimes of links. The conventional broadcasting based vehicular ad-hoc network (VANET) routing protocols struggle to accurately analyze the link dynamicity due to the unavailability of global information and inefficiencies in their route discovering schemes. However, with the recently emerged software defined vehicular network (SDVN) paradigm, link stability can be better scrutinized pertaining to the availability of global network information. Thus, in this paper, we introduce an optimization based novel packet routing scheme with a source routing based flow instantiation (FI) operation for SDVN. The routing framework closely analyzes the stability of links in selecting the routes and the problem is formulated as a minimum cost capacitated flow problem. Furthermore, an incremental packet allocation scheme is proposed to solve the routing problem in a less time complexity. The objective is to find multiple shortest paths which are collectively stable enough to deliver a given number of packets. The FI scheme efficiently delivers and caches flow information in the required nodes with a reduced extent of communication with the control plane. With the help of realistic simulation, we show that the proposed routing framework excels in terms of the performance over the existing routing schemes of both SDVN and conventional VANET.
---
paper_title: Multi-level SDN with vehicles as fog computing infrastructures: A new integrated architecture for 5G-VANETs

paper_content:

The spectacular emergence of connected and autonomous vehicles coupled with their evergrowing demands on processing, computation and communication resources pose new challenges to provide reliable vehicular services. Here, a combination of a multi-level SdN Approach and a foG computing architEcture based on Vehicles as Infrastructures paradigm, called VISAGE, is proposed for future 5G-VANET systems. By using vehicles as fog infrastructures and integrating them with local SDN controllers, the QoS of vehicular applications and protocols becomes more efficient in terms of computation time and communication delays. This is explained by offloading the computing services from the cloud to the edge of networks, making use of the abundant resources offered by vehicles and making network control decisions locally. Through three typical uses cases of our proposed 5G era vehicular architecture, we show the promising benefits of our approach in terms of communication and computation capacities.
---
paper_title: Software defined networking-based vehicular Adhoc Network with Fog Computing

paper_content:

Vehicular Adhoc Networks (VANETs) have been attracted a lot of research recent years. Although VANETs are deployed in reality offering several services, the current architecture has been facing many difficulties in deployment and management because of poor connectivity, less scalability, less flexibility and less intelligence. We propose a new VANET architecture called FSDN which combines two emergent computing and network paradigm Software Defined Networking (SDN) and Fog Computing as a prospective solution. SDN-based architecture provides flexibility, scalability, programmability and global knowledge while Fog Computing offers delay-sensitive and location-awareness services which could be satisfy the demands of future VANETs scenarios. We figure out all the SDN-based VANET components as well as their functionality in the system. We also consider the system basic operations in which Fog Computing are leveraged to support surveillance services by taking into account resource manager and Fog orchestration models. The proposed architecture could resolve the main challenges in VANETs by augmenting Vehicle-to-Vehicle (V2V), Vehicle-to-Infrastructure (V2I), Vehicle-to-Base Station communications and SDN centralized control while optimizing resources utility and reducing latency by integrating Fog Computing. Two use-cases for non-safety service (data streaming) and safety service (Lane-change assistance) are also presented to illustrate the benefits of our proposed architecture.
---
paper_title: A Scalable and Quick-Response Software Defined Vehicular Network Assisted by Mobile Edge Computing

paper_content:

Connected vehicles provide advanced transformations and attractive business opportunities in the automotive industry. Presently, IEEE 802.11p and evolving 5G are the mainstream radio access technologies in the vehicular industry, but neither of them can meet all requirements of vehicle communication. In order to provide low-latency and high-reliability communication, an SDN-enabled network architecture assisted by MEC, which integrates different types of access technologies, is proposed. MEC technology with its on-premises feature can decrease data transmission time and enhance quality of user experience in latency-sensitive applications. Therefore, MEC plays as important a role in the proposed architecture as SDN technology. The proposed architecture was validated by a practical use case, and the obtained results have shown that it meets application- specific requirements and maintains good scalability and responsiveness.
---
paper_title: V2V Data Offloading for Cellular Network Based on the Software Defined Network (SDN) Inside Mobile Edge Computing (MEC) Architecture

paper_content:

Data offloading plays an important role for the mobile data explosion problem that occurs in cellular networks. This paper proposed an idea and control scheme for offloading vehicular communication traffic in the cellular network to vehicle to vehicle (V2V) paths that can exist in vehicular ad hoc networks (VANETs). A software-defined network (SDN) inside the mobile edge computing (MEC) architecture, which is abbreviated as the SDNi-MEC server, is devised in this paper to tackle the complicated issues of VANET V2V offloading. Using the proposed SDNi-MEC architecture, each vehicle reports its contextual information to the context database of the SDNi-MEC server, and the SDN controller of the SDNi-MEC server calculates whether there is a V2V path between the two vehicles that are currently communicating with each other through the cellular network. This proposed method: 1) uses each vehicle’s context; 2) adopts a centralized management strategy for calculation and notification; and 3) tries to establish a VANET routing path for paired vehicles that are currently communicating with each other using a cellular network. The performance analysis for the proposed offloading control scheme based on the SDNi-MEC server architecture shows that it has better throughput in both the cellular networking link and the V2V paths when the vehicle’s density is in the middle.
---
paper_title: SDN VANETs in 5G: An architecture for resilient security services

paper_content:

Vehicular ad-Hoc Networks (VANETs) have been promoted as a key technology that can provide a wide variety of services such as traffic management, passenger safety, as well as travel convenience and comfort. VANETs are now proposed to be part of the upcoming Fifth Generation (5G) technology, integrated with Software Defined Networking (SDN), as key enabler of 5G. The technology of fog computing in 5G turned out to be an adequate solution for faster processing in delay sensitive application, such as VANETs, being a hybrid solution between fully centralized and fully distributed networks. In this paper, we propose a three-way integration between VANETs, SDN, and 5G for a resilient VANET security design approach, which strikes a good balance between network, mobility, performance and security features. We show how such an approach can secure VANETs from different types of attacks such as Distributed Denial of Service (DDoS) targeting either the controllers or the vehicles in the network, and how to trace back the source of the attack. Our evaluation shows the capability of the proposed system to enforce different levels of real-time user-defined security, while maintaining low overhead and minimal configuration.
---
paper_title: Control Plane Optimization in Software-Defined Vehicular Ad Hoc Networks

paper_content:

The vehicle ad hoc network (VANET) is an emerging network technology that is expected to be cost-effective and adaptable, making it ideal to provide network connection service to drivers and passengers on today's roads. In the next generation of VANETs with fifth-generation (5G) networks, software-defined networking (SDN) technology will play a very important role in network management. However, for infotainment applications, high latency in VANET communication imposes a great challenge for network management, whereas direct communication through the cellular networks brings high cost. In this paper, we present an optimizing strategy to balance the latency requirement and the cost on cellular networks, in which we encourage vehicles to send the SDN control requests through the cellular networks by rebating network bandwidth. Furthermore, we model the interaction of the controller and vehicles as a two-stage Stackelberg game and analyze the game equilibrium. From the experimental results, the optimal rebating strategy provides smaller latency than other control plane structures.
---
paper_title: A Software Defined Network architecture for GeoBroadcast in VANETs

paper_content:

This paper proposes a Software Defined Network (SDN) architecture for GeoBroadcast in VANETs. We have implemented a component to automatically manage the geographical location of Road Side Units (RSUs), which are used as a basis for our GeoBroadcast routing. GeoBroadcast in a vehicular network supports periodic broadcast messages from a source vehicle to the destination vehicles that are located in a specific geographical region. In existing Intelligent Transport Systems (ITS), the GeoBroadcast mechanism can be implemented using traditional IP networking. Typically, every periodic warning messages received at nearest RSU from the source must be routed to the control center in ITS, where it is redirected to every other RSUs, that are located in the destination geographical region for broadcasting. As a result, huge overhead in the control center is produced and higher network bandwidth is consumed. However, in our SDN based GeoBroadcast mechanism, the first warning message received by the source RSU is sent to the SDN controller as a packet-in message. The SDN controller will decode the packet-in message and use topological and geographical information to set up the routing paths to the destination RSUs, by installing appropriate flow entries on the corresponding RSUs and intermediate switches, for the following periodic warning messages that are to be broadcasted. As per our simulation with OpenNet a significant reduction by 84% in controller overhead, 60% in network bandwidth consumption, and 81% in latency are achieved.
---
paper_title: Security and Privacy Issues in Vehicular Named Data Networks: An Overview

paper_content:

A tremendous amount of content and information are exchanging in a vehicular environment between vehicles, roadside units, and the Internet. This information aims to improve the driving experience and human safety. Due to the VANET’s properties and application characteristics, the security becomes an essential aspect and a more challenging task. On the contrary, named data networking has been proposed as a future Internet architecture that may improve the network performance, enhance content access and dissemination, and decrease the communication delay. NDN uses a clean design based on content names and Interest-Data exchange model. In this paper, we focus on the vehicular named data networking environment, targeting the security attacks and privacy issues. We present a state of the art of existing VANET attacks and how NDN can deal with them. We classified these attacks based on the NDN perspective. Furthermore, we define various challenges and issues faced by NDN-based VANET and highlight future research directions that should be addressed by the research community.
---
paper_title: QoE-Based Flow Management in Software Defined Vehicular Networks

paper_content:

In vehicular networks, high mobility and limited transmission range of Road-Side Units (RSU) cause dynamic topological changes and result with interference occurred by transmission of vehicles. Moreover, due to the limited bandwidth of IEEE 802.11p based vehicular communication, providing a fair share of network resources among vehicles is essential for an efficient network management. Therefore, flow and interference management challenges cause a degradation in percentage of flow satisfied by effecting quality of communication and enhancing interference in vehicular networks. These aforementioned two challenges can be mitigated with Software-Defined Networking (SDN) paradigm where a centralized controller can schedule data flows and then coordinate power level of vehicles. Hence, in this paper, the cooperation of SDN and IEEE 802.11p based vehicular communication has been proposed in vehicular networks. We present a novel software- defined flow and power management model implemented into controller. Here, we classify vehicles based on Quality of Experience (QoE) and model RSUs with a queuing theoretic approach. Then the proposed model is used to detect unsatisfactory vehicles and estimate effective and accurate amount of transmission power of these vehicles so that unsatisfactory vehicles will be served a new assigned RSU with optimal signal level. Moreover, we redefine flow label field in OpenFlow flow table so that controller can manage to RSUs by imposing some behaviors. Numerical results show how a better flow satisfied can be maintained by implementing this idea.
---
paper_title: Toward Secure Software Defined Vehicular Networks: Taxonomy, Requirements, and Open Issues

paper_content:

The emerging software defined vehicular networking (SDVN) paradigm promises to dramatically simplify network management and enable innovation through network programmability. Despite noticeable advances of SDNs in wired networks, it is also becoming an indispensable component that potentially provides flexible and well managed next-generation wireless networks, gaining massive attention from both industry and academia. In spite of all the hype surrounding emerging SDVNs, exploiting its full potential is demanding, and security is still the key concern and an equally arresting challenge. On the contrary, the complete transformation of the network into an SDN structure is still questionable, and the security and dependability of SDNs have largely been neglected topics. Moreover, the logical centralization of network intelligence and the tremendously evolving landscape of digital threats and cyber attacks that predominantly target emerging SDVNs will have even more devastating effects than they are in simple networks. Besides, the deployment of the SDVNs' novel entities and several architectural components drive new security threats and vulnerabilities. Since the SDVNs architectural layers and their corresponding APIs are heavily dependent on each other, this article aims to present a systematic top-down approach to tackle the potential security vulnerabilities, attacks, and challenges pertaining to each layer. The article contributes by presenting the security implications of the emerging SDVNs to devise comprehensive thematic core layered taxonomies together with external communication APIs. Moreover, we also describe the potential requirements and key enablers toward secure SDVNs. Finally, a plethora of open security research issues are presented that may be deemed appropriate for young researchers and professionals around the globe to tackle in anticipation of secure SDVNs.
---
paper_title: Enabling SDN in VANETs: What is the Impact on Security?

paper_content:

The demand for safe and secure journeys over roads and highways has been growing at a tremendous pace over recent decades. At the same time, the smart city paradigm has emerged to improve citizens' quality of life by developing the smart mobility concept. Vehicular Ad hoc NETworks (VANETs) are widely recognized to be instrumental in realizing such concept, by enabling appealing safety and infotainment services. Such networks come with their own set of challenges, which range from managing high node mobility to securing data and user privacy. The Software Defined Networking (SDN) paradigm has been identified as a suitable solution for dealing with the dynamic network environment, the increased number of connected devices, and the heterogeneity of applications. While some preliminary investigations have been already conducted to check the applicability of the SDN paradigm to VANETs, and its presumed benefits for managing resources and mobility, it is still unclear what impact SDN will have on security and privacy. Security is a relevant issue in VANETs, because of the impact that threats can have on drivers' behavior and quality of life. This paper opens a discussion on the security threats that future SDN-enabled VANETs will have to face, and investigates how SDN could be beneficial in building new countermeasures. The analysis is conducted in real use cases (smart parking, smart grid of electric vehicles, platooning, and emergency services), which are expected to be among the vehicular applications that will most benefit from introducing an SDN architecture.
---
paper_title: Software defined networking-based vehicular Adhoc Network with Fog Computing

paper_content:

Vehicular Adhoc Networks (VANETs) have been attracted a lot of research recent years. Although VANETs are deployed in reality offering several services, the current architecture has been facing many difficulties in deployment and management because of poor connectivity, less scalability, less flexibility and less intelligence. We propose a new VANET architecture called FSDN which combines two emergent computing and network paradigm Software Defined Networking (SDN) and Fog Computing as a prospective solution. SDN-based architecture provides flexibility, scalability, programmability and global knowledge while Fog Computing offers delay-sensitive and location-awareness services which could be satisfy the demands of future VANETs scenarios. We figure out all the SDN-based VANET components as well as their functionality in the system. We also consider the system basic operations in which Fog Computing are leveraged to support surveillance services by taking into account resource manager and Fog orchestration models. The proposed architecture could resolve the main challenges in VANETs by augmenting Vehicle-to-Vehicle (V2V), Vehicle-to-Infrastructure (V2I), Vehicle-to-Base Station communications and SDN centralized control while optimizing resources utility and reducing latency by integrating Fog Computing. Two use-cases for non-safety service (data streaming) and safety service (Lane-change assistance) are also presented to illustrate the benefits of our proposed architecture.
---
paper_title: A Buffer-Aware QoS Streaming Approach for SDN-Enabled 5G Vehicular Networks

paper_content:

With the progress of network technology in recent years, multimedia streaming applications have become increasingly popular. However, it is difficult to achieve quality of service and efficiency for multimedia streaming over vehicular networks because of the high mobility feature. Over the existing network architecture, it is difficult to immediately analyze the status of the entire network, and then establish the rules of allocation and management. However, the novel network architecture, software-defined networking, offers other options for making network management more efficient, especially for the 5G network environment. Hence, a buffer-aware streaming approach is proposed to allow users to play multimedia streaming over vehicular 5G networks, in the case of handover between different eNodeBs, to achieve minimum delay and have better quality of service. According to the user's mobility information, the status of the player buffer, and the current strength of the network signal, the proposed approach can provide the transmission strategy of multimedia streaming to the SDN controller. Finally, the experimental results proved that the proposed approach is able to not only adjust the priority of streaming content segments with the buffer and mobility status of user equipment to effectively retain overall streaming services quality, but also avoid the delay of streaming content transmission for 5G vehicular networks.
---
paper_title: FloodGuard: A DoS Attack Prevention Extension in Software-Defined Networks

paper_content:

This paper addresses one serious SDN-specific attack, i.e., data-to-control plane saturation attack, which overloads the infrastructure of SDN networks. In this attack, an attacker can produce a large amount of table-miss packet_in messages to consume resources in both control plane and data plane. To mitigate this security threat, we introduce an efficient, lightweight and protocol-independent defense framework for SDN networks. Our solution, called FloodGuard, contains two new techniques/modules: proactive flow rule analyzer and packet migration. To preserve network policy enforcement, proactive flow rule analyzer dynamically derives proactive flow rules by reasoning the runtime logic of the SDN/OpenFlow controller and its applications. To protect the controller from being overloaded, packet migration temporarily caches the flooding packets and submits them to the OpenFlow controller using rate limit and round-robin scheduling. We evaluate FloodGuard through a prototype implementation tested in both software and hardware environments. The results show that FloodGuard is effective with adding only minor overhead into the entire SDN/OpenFlow infrastructure.
---
paper_title: 5G next generation VANETs using SDN and fog computing framework

paper_content:

The growth of technical revolution towards 5G Next generation networks is expected to meet various communication requirements of future Intelligent Transportation Systems (ITS). Motivated by the consumer needs for variety of ITS applications, bandwidth, high speed and ubiquity, researches are currently exploring different network architectures and techniques, which could be employed in Next generation ITS. To provide flexible network management, control and high resource utilization in Vehicular Ad-hoc Networks (VANETs) on large scale, a new hierarchical 5G Next generation VANET architecture is proposed. The key idea of this holistic architecture is to integrate the centralization and flexibility of Software Defined Networking (SDN) and Cloud-RAN (CRAN), with 5G communication technologies, to effectively allocate resources with a global view. Moreover, a fog computing framework (comprising of zones and clusters) has been proposed at the edge, to avoid frequent handovers between vehicles and RSUs. The transmission delay, throughput and control overhead on controller are analyzed and compared with other architectures. Simulation results indicate reduced transmission delay and minimized control overhead on controllers. Moreover, the throughput of proposed system is also improved.
---
paper_title: An Architecture for Hierarchical Software-Defined Vehicular Networks

paper_content:

With the recent advances in the telecommunications and auto industries, we have witnessed growing interest in ITS, of which VANETs are an essential component. SDN can bring advantages to ITS through its ability to provide flexibility and programmability to networks through a logically centralized controller entity that has a comprehensive view of the network. However, as the SDN paradigm initially had fixed networks in mind, adapting it to work on VANETs requires some changes to address particular characteristics of this kind of scenario, such as the high mobility of its nodes. There has been initial work on bringing SDN concepts to vehicular networks to expand its abilities to provide applications and services through the increased flexibility, but most of these studies do not directly tackle the issue of loss of connectivity with said controller entity. In this article, we propose a hierarchical SDN-based vehicular architecture that aims to have improved performance in the situation of loss of connection with the central SDN controller. Simulation results show that our proposal outperforms traditional routing protocols in the scenario where there is no coordination from the central SDN controller.
---
paper_title: Towards software-defined VANET: Architecture and services

paper_content:

Vehicular Ad Hoc Networks (VANETs) have in recent years been viewed as one of the enabling technologies to provide a wide variety of services, such as vehicle road safety, enhanced traffic and travel efficiency, and convenience and comfort for passengers and drivers. However, current VANET architectures lack in flexibility and make the deployment of services/protocols in large-scale a hard task. In this paper, we demonstrate how Software-Defined Networking (SDN), an emerging network paradigm, can be used to provide the flexibility and programmability to networks and introduces new services and features to today's VANETs. We take the concept of SDN, which has mainly been designed for wired infrastructures, especially in the data center space, and propose SDN-based VANET architecture and its operational mode to adapt SDN to VANET environments. We also discuss benefits of a Software-Defined VANET and the services that can be provided. We demonstrate in simulation the feasibility of a Software-Defined VANET by comparing SDN-based routing with traditional MANET/VANET routing protocols. We also show in simulation fallback mechanisms that must be provided to apply the SDN concept into mobile wireless scenarios, and demonstrate one of the possible services that can be provided by a Software-Defined VANET.
---
paper_title: LineSwitch: Tackling Control Plane Saturation Attacks in Software-Defined Networking

paper_content:

Software defined networking (SDN) is a new networking paradigm that in recent years has revolutionized network architectures. At its core, SDN separates the data plane, which provides data forwarding functionalities, and the control plane, which implements the network control logic. The separation of these two components provides a virtually centralized point of control in the network, and at the same time abstracts the complexity of the underlying physical infrastructure. Unfortunately, while promising, the SDN approach also introduces new attacks and vulnerabilities. Indeed, previous research shows that, under certain traffic conditions, the required communication between the control and data plane can result in a bottleneck. An attacker can exploit this limitation to mount a new, network-wide, type of denial of service attack, known as the control plane saturation attack . This paper presents LineSwitch, an efficient and effective data plane solution to tackle the control plane saturation attack. LineSwitch employs probabilistic proxying and blacklisting of network traffic to prevent the attack from reaching the control plane, and thus preserve network functionality. We implemented LineSwitch as an extension of the reference SDN implementation, OpenFlow, and run a thorough set of experiments under different traffic and attack scenarios. We compared LineSwitch to the state of the art, and we show that it provides at the same time, the same level of protection against the control plane saturation attack, and a reduced time overhead by up to 30%.
---
paper_title: SDVN: enabling rapid network innovation for heterogeneous vehicular communication

paper_content:

With the advances in telecommunications, more and more devices are connected to the Internet and getting smart. As a promising application scenario for carrier networks, vehicular communication has enabled many traffic-related applications. However, the heterogeneity of wireless infrastructures and the inflexibility in protocol deployment hinder the real world application of vehicular communications. SDN is promising to bridge the gaps through unified network abstraction and programmability. In this research, we propose an SDN-based architecture to enable rapid network innovation for vehicular communications. Under this architecture, heterogeneous wireless devices, including vehicles and roadside units, are abstracted as SDN switches with a unified interface. In addition, network resources such as bandwidth and spectrum can also be allocated and assigned by the logically centralized control plane, which provides a far more agile configuration capability. Besides, we also study several cases to highlight the advantages of the architecture, such as adaptive protocol deployment and multiple tenants isolation. Finally, the feasibility and effectiveness of the proposed architecture and cases are validated through traffic-trace-based simulation.
---
paper_title: FlowRanger: A request prioritizing algorithm for controller DoS attacks in Software Defined Networks

paper_content:

Software Defined Networking (SDN) introduces a new communication network management paradigm and has gained much attention from academia and industry. However, the centralized nature of SDN is a potential vulnerability to the system since attackers may launch denial of services (DoS) attacks against the controller. Existing solutions limit requests rate to the controller by dropping overflowed requests, but they also drop legitimate requests to the controller. To address this problem, we propose FlowRanger, a buffer prioritizing solution for controllers to handle routing requests based on their likelihood to be attacking requests, which derives the trust values of the requesting sources. Based on their trust values, FlowRanger classifies routing requests into multiple buffer queues with different priorities. Thus, attacking requests are served with a lower priority than regular requests. Our simulation results demonstrates that FlowRanger can significantly enhance the request serving rate of regular users under DoS attacks against the controller. To the best of our knowledge, our work is the first solution to battle against controller DoS attacks on the controller side.
---
paper_title: SDN VANETs in 5G: An architecture for resilient security services

paper_content:

Vehicular ad-Hoc Networks (VANETs) have been promoted as a key technology that can provide a wide variety of services such as traffic management, passenger safety, as well as travel convenience and comfort. VANETs are now proposed to be part of the upcoming Fifth Generation (5G) technology, integrated with Software Defined Networking (SDN), as key enabler of 5G. The technology of fog computing in 5G turned out to be an adequate solution for faster processing in delay sensitive application, such as VANETs, being a hybrid solution between fully centralized and fully distributed networks. In this paper, we propose a three-way integration between VANETs, SDN, and 5G for a resilient VANET security design approach, which strikes a good balance between network, mobility, performance and security features. We show how such an approach can secure VANETs from different types of attacks such as Distributed Denial of Service (DDoS) targeting either the controllers or the vehicles in the network, and how to trace back the source of the attack. Our evaluation shows the capability of the proposed system to enforce different levels of real-time user-defined security, while maintaining low overhead and minimal configuration.
---
paper_title: Topology Discovery in Software Defined Networks: Threats, Taxonomy, and State-of-the-Art

paper_content:

The fundamental role of the software defined networks (SDNs) is to decouple the data plane from the control plane, thus providing a logically centralized visibility of the entire network to the controller. This enables the applications to innovate through network programmability. To establish a centralized visibility, a controller is required to discover a network topology of the entire SDN infrastructure. However, discovering a network topology is challenging due to: 1) the frequent migration of the virtual machines in the data centers; 2) lack of authentication mechanisms; 3) scarcity of the SDN standards; and 4) integration of security mechanisms for the topology discovery. To this end, in this paper, we present a comprehensive survey of the topology discovery and the associated security implications in SDNs. This survey provides discussions related to the possible threats relevant to each layer of the SDN architecture, highlights the role of the topology discovery in the traditional network and SDN, presents a thematic taxonomy of topology discovery in SDN, and provides insights into the potential threats to the topology discovery along with its state-of-the-art solutions in SDN. Finally, this survey also presents future challenges and research directions in the field of SDN topology discovery.
---
paper_title: An Architecture for Hierarchical Software-Defined Vehicular Networks

paper_content:

With the recent advances in the telecommunications and auto industries, we have witnessed growing interest in ITS, of which VANETs are an essential component. SDN can bring advantages to ITS through its ability to provide flexibility and programmability to networks through a logically centralized controller entity that has a comprehensive view of the network. However, as the SDN paradigm initially had fixed networks in mind, adapting it to work on VANETs requires some changes to address particular characteristics of this kind of scenario, such as the high mobility of its nodes. There has been initial work on bringing SDN concepts to vehicular networks to expand its abilities to provide applications and services through the increased flexibility, but most of these studies do not directly tackle the issue of loss of connectivity with said controller entity. In this article, we propose a hierarchical SDN-based vehicular architecture that aims to have improved performance in the situation of loss of connection with the central SDN controller. Simulation results show that our proposal outperforms traditional routing protocols in the scenario where there is no coordination from the central SDN controller.
---
paper_title: Towards software-defined VANET: Architecture and services

paper_content:

Vehicular Ad Hoc Networks (VANETs) have in recent years been viewed as one of the enabling technologies to provide a wide variety of services, such as vehicle road safety, enhanced traffic and travel efficiency, and convenience and comfort for passengers and drivers. However, current VANET architectures lack in flexibility and make the deployment of services/protocols in large-scale a hard task. In this paper, we demonstrate how Software-Defined Networking (SDN), an emerging network paradigm, can be used to provide the flexibility and programmability to networks and introduces new services and features to today's VANETs. We take the concept of SDN, which has mainly been designed for wired infrastructures, especially in the data center space, and propose SDN-based VANET architecture and its operational mode to adapt SDN to VANET environments. We also discuss benefits of a Software-Defined VANET and the services that can be provided. We demonstrate in simulation the feasibility of a Software-Defined VANET by comparing SDN-based routing with traditional MANET/VANET routing protocols. We also show in simulation fallback mechanisms that must be provided to apply the SDN concept into mobile wireless scenarios, and demonstrate one of the possible services that can be provided by a Software-Defined VANET.
---
paper_title: Cost-Efficient Sensory Data Transmission in Heterogeneous Software-Defined Vehicular Networks

paper_content:

Sensing and networking have been regarded as key enabling technologies of future smart vehicles. Sensing allows vehicles to be context awareness, while networking empowers context sharing among ambients. Existing vehicular communication solutions mainly rely on homogeneous network, or heterogeneous network via data offloading. However, today’s vehicular network implementations are highly heterogeneous. Therefore, conventional homogeneous communication and data offloading may not be able to satisfy the requirement of the emerging vehicular networking applications. In this paper, we apply the software-defined network (SDN) to the heterogeneous vehicular networks to bridge the gaps. With SDN, heterogeneous network resources can be managed with a unified abstraction. Moreover, we propose an SDN-based wireless communication solution, which can schedule different network resources to minimize communication cost. We investigate the problems in both single and multiple hop cases. We also evaluate the proposed approaches using traffic traces. The effectiveness and the efficiency are validated by the results.
---
paper_title: SDVN: enabling rapid network innovation for heterogeneous vehicular communication

paper_content:

With the advances in telecommunications, more and more devices are connected to the Internet and getting smart. As a promising application scenario for carrier networks, vehicular communication has enabled many traffic-related applications. However, the heterogeneity of wireless infrastructures and the inflexibility in protocol deployment hinder the real world application of vehicular communications. SDN is promising to bridge the gaps through unified network abstraction and programmability. In this research, we propose an SDN-based architecture to enable rapid network innovation for vehicular communications. Under this architecture, heterogeneous wireless devices, including vehicles and roadside units, are abstracted as SDN switches with a unified interface. In addition, network resources such as bandwidth and spectrum can also be allocated and assigned by the logically centralized control plane, which provides a far more agile configuration capability. Besides, we also study several cases to highlight the advantages of the architecture, such as adaptive protocol deployment and multiple tenants isolation. Finally, the feasibility and effectiveness of the proposed architecture and cases are validated through traffic-trace-based simulation.
---
paper_title: Data Offloading in 5G-Enabled Software-Defined Vehicular Networks: A Stackelberg-Game-Based Approach

paper_content:

Data offloading using vehicles is one of the most challenging tasks to perform due to the high mobility of vehicles. There are many solutions available for this purpose, but due to the inefficient management of data along with the control decisions, these solutions are not adequate to provide data offloading by making use of the available networks. Moreover, with the advent of 5G and related technologies, there is a need to cope with high speed and traffic congestion in the existing infrastructure used for data offloading. Hence, to make intelligent decisions for data offloading, an SDN-based scheme is presented in this article. In the proposed scheme, an SDNbased controller is designed that makes decisions for data offloading by using the priority manager and load balancer. Using these two managers in SDN-based controllers, traffic routing is managed efficiently even with an increase in the size of the network. Moreover, a single-leader multi-follower Stackelberg game for network selection is also used for data offloading. The proposed scheme is evaluated with respect to several parameters where its performance was found to be superior in comparison to the existing schemes.
---
paper_title: Multi-level SDN with vehicles as fog computing infrastructures: A new integrated architecture for 5G-VANETs

paper_content:

The spectacular emergence of connected and autonomous vehicles coupled with their evergrowing demands on processing, computation and communication resources pose new challenges to provide reliable vehicular services. Here, a combination of a multi-level SdN Approach and a foG computing architEcture based on Vehicles as Infrastructures paradigm, called VISAGE, is proposed for future 5G-VANET systems. By using vehicles as fog infrastructures and integrating them with local SDN controllers, the QoS of vehicular applications and protocols becomes more efficient in terms of computation time and communication delays. This is explained by offloading the computing services from the cloud to the edge of networks, making use of the abundant resources offered by vehicles and making network control decisions locally. Through three typical uses cases of our proposed 5G era vehicular architecture, we show the promising benefits of our approach in terms of communication and computation capacities.
---
paper_title: Effective Topology Tampering Attacks and Defenses in Software-Defined Networks

paper_content:

As Software-Defined Networking has gained increasing prominence, new attacks have been demonstrated which can corrupt the SDN controller's view of network topology. These topology poisoning attacks, most notably host-location hijacking and link fabrication attacks, enable adversaries to impersonate end-hosts or inter-switch links in order to monitor, corrupt, or drop network flows. In response, defenses have been developed to detect such attacks and raise an alert. In this paper, we analyze two such defenses, TopoGuard and Sphinx, and present two new attacks, Port Probing and Port Amnesia, that can successfully bypass them. We then develop and present extensions to TopoGuard to make it resilient to such attacks.
---
paper_title: SPHINX: Detecting Security Attacks in Software-Defined Networks.

paper_content:

Software-defined networks (SDNs) allow greater control over network entities by centralizing the control plane, but place great burden on the administrator to manually ensure security and correct functioning of the entire network. We list several attacks on SDN controllers that violate network topology and data plane forwarding, and can be mounted by compromised network entities, such as end hosts and soft switches. We further demonstrate their feasibility on four popular SDN controllers. We propose SPHINX to detect both known and potentially unknown attacks on network topology and data plane forwarding originating within an SDN. SPHINX leverages the novel abstraction of flow graphs, which closely approximate the actual network operations, to enable incremental validation of all network updates and constraints. SPHINX dynamically learns new network behavior and raises alerts when it detects suspicious changes to existing network control plane behavior. Our evaluation shows that SPHINX is capable of detecting attacks in SDNs in realtime with low performance overheads, and requires no changes to the controllers for deployment.
---
paper_title: FloodGuard: A DoS Attack Prevention Extension in Software-Defined Networks

paper_content:

This paper addresses one serious SDN-specific attack, i.e., data-to-control plane saturation attack, which overloads the infrastructure of SDN networks. In this attack, an attacker can produce a large amount of table-miss packet_in messages to consume resources in both control plane and data plane. To mitigate this security threat, we introduce an efficient, lightweight and protocol-independent defense framework for SDN networks. Our solution, called FloodGuard, contains two new techniques/modules: proactive flow rule analyzer and packet migration. To preserve network policy enforcement, proactive flow rule analyzer dynamically derives proactive flow rules by reasoning the runtime logic of the SDN/OpenFlow controller and its applications. To protect the controller from being overloaded, packet migration temporarily caches the flooding packets and submits them to the OpenFlow controller using rate limit and round-robin scheduling. We evaluate FloodGuard through a prototype implementation tested in both software and hardware environments. The results show that FloodGuard is effective with adding only minor overhead into the entire SDN/OpenFlow infrastructure.
---
paper_title: Distributed denial of service attacks in software-defined networking with cloud computing

paper_content:

Although software-defined networking (SDN) brings numerous benefits by decoupling the control plane from the data plane, there is a contradictory relationship between SDN and distributed denial-of-service (DDoS) attacks. On one hand, the capabilities of SDN make it easy to detect and to react to DDoS attacks. On the other hand, the separation of the control plane from the data plane of SDN introduces new attacks. Consequently, SDN itself may be a target of DDoS attacks. In this paper, we first discuss the new trends and characteristics of DDoS attacks in cloud computing environments. We show that SDN brings us a new chance to defeat DDoS attacks in cloud computing environments, and we summarize good features of SDN in defeating DDoS attacks. Then we review the studies about launching DDoS attacks on SDN and the methods against DDoS attacks in SDN. In addition, we discuss a number of challenges that need to be addressed to mitigate DDoS attached in SDN with cloud computing. This work can help understand how to make full use of SDN's advantages to defeat DDoS attacks in cloud computing environments and how to prevent SDN itself from becoming a victim of DDoS attacks.
---
paper_title: FRESCO: Modular Composable Security Services for SoftwareDefined Networks

paper_content:

OpenFlow is an open standard that has gained tremendous interest in the last few years within the network community. It is an embodiment of the software-defined networking paradigm, in which higher-level flow routing decisions are derived from a control layer that, unlike classic network switch implementations, is separated from the data handling layer. The central attraction to this paradigm is that by decoupling the control logic from the closed and proprietary implementations of traditional network switch infrastructure, researchers can more easily design and distribute innovative flow handling and network control algorithms. Indeed, we also believe that OpenFlow can, in time, prove to be one of the more impactful technologies to drive a variety of innovations in network security. OpenFlow could offer a dramatic simplification to the way we design and integrate complex network security applications into large networks. However, to date there remains a stark paucity of compelling OpenFlow security applications. In this paper, we introduce FRESCO, an OpenFlow security application development framework designed to facilitate the rapid design, and modular composition of OF-enabled detection and mitigation modules. FRESCO, which is itself an OpenFlow application, offers a Click-inspired [19] programming framework that enables security researchers to implement, share, and compose together, many different security detection and mitigation modules. We demonstrate the utility of FRESCO through the implementation of several well-known security defenses as OpenFlow security services, and use them to examine various performance and efficiency aspects of our proposed framework.
---
paper_title: Towards software-defined VANET: Architecture and services

paper_content:

Vehicular Ad Hoc Networks (VANETs) have in recent years been viewed as one of the enabling technologies to provide a wide variety of services, such as vehicle road safety, enhanced traffic and travel efficiency, and convenience and comfort for passengers and drivers. However, current VANET architectures lack in flexibility and make the deployment of services/protocols in large-scale a hard task. In this paper, we demonstrate how Software-Defined Networking (SDN), an emerging network paradigm, can be used to provide the flexibility and programmability to networks and introduces new services and features to today's VANETs. We take the concept of SDN, which has mainly been designed for wired infrastructures, especially in the data center space, and propose SDN-based VANET architecture and its operational mode to adapt SDN to VANET environments. We also discuss benefits of a Software-Defined VANET and the services that can be provided. We demonstrate in simulation the feasibility of a Software-Defined VANET by comparing SDN-based routing with traditional MANET/VANET routing protocols. We also show in simulation fallback mechanisms that must be provided to apply the SDN concept into mobile wireless scenarios, and demonstrate one of the possible services that can be provided by a Software-Defined VANET.
---
paper_title: Cost-Efficient Sensory Data Transmission in Heterogeneous Software-Defined Vehicular Networks

paper_content:

Sensing and networking have been regarded as key enabling technologies of future smart vehicles. Sensing allows vehicles to be context awareness, while networking empowers context sharing among ambients. Existing vehicular communication solutions mainly rely on homogeneous network, or heterogeneous network via data offloading. However, today’s vehicular network implementations are highly heterogeneous. Therefore, conventional homogeneous communication and data offloading may not be able to satisfy the requirement of the emerging vehicular networking applications. In this paper, we apply the software-defined network (SDN) to the heterogeneous vehicular networks to bridge the gaps. With SDN, heterogeneous network resources can be managed with a unified abstraction. Moreover, we propose an SDN-based wireless communication solution, which can schedule different network resources to minimize communication cost. We investigate the problems in both single and multiple hop cases. We also evaluate the proposed approaches using traffic traces. The effectiveness and the efficiency are validated by the results.
---
paper_title: Data Offloading in 5G-Enabled Software-Defined Vehicular Networks: A Stackelberg-Game-Based Approach

paper_content:

Data offloading using vehicles is one of the most challenging tasks to perform due to the high mobility of vehicles. There are many solutions available for this purpose, but due to the inefficient management of data along with the control decisions, these solutions are not adequate to provide data offloading by making use of the available networks. Moreover, with the advent of 5G and related technologies, there is a need to cope with high speed and traffic congestion in the existing infrastructure used for data offloading. Hence, to make intelligent decisions for data offloading, an SDN-based scheme is presented in this article. In the proposed scheme, an SDNbased controller is designed that makes decisions for data offloading by using the priority manager and load balancer. Using these two managers in SDN-based controllers, traffic routing is managed efficiently even with an increase in the size of the network. Moreover, a single-leader multi-follower Stackelberg game for network selection is also used for data offloading. The proposed scheme is evaluated with respect to several parameters where its performance was found to be superior in comparison to the existing schemes.
---
paper_title: A Scalable and Quick-Response Software Defined Vehicular Network Assisted by Mobile Edge Computing

paper_content:

Connected vehicles provide advanced transformations and attractive business opportunities in the automotive industry. Presently, IEEE 802.11p and evolving 5G are the mainstream radio access technologies in the vehicular industry, but neither of them can meet all requirements of vehicle communication. In order to provide low-latency and high-reliability communication, an SDN-enabled network architecture assisted by MEC, which integrates different types of access technologies, is proposed. MEC technology with its on-premises feature can decrease data transmission time and enhance quality of user experience in latency-sensitive applications. Therefore, MEC plays as important a role in the proposed architecture as SDN technology. The proposed architecture was validated by a practical use case, and the obtained results have shown that it meets application- specific requirements and maintains good scalability and responsiveness.
---
paper_title: A security enforcement kernel for OpenFlow networks

paper_content:

Software-defined networks facilitate rapid and open innovation at the network control layer by providing a programmable network infrastructure for computing flow policies on demand. However, the dynamism of programmable networks also introduces new security challenges that demand innovative solutions. A critical challenge is efficient detection and reconciliation of potentially conflicting flow rules imposed by dynamic OpenFlow (OF) applications. To that end, we introduce FortNOX, a software extension that provides role-based authorization and security constraint enforcement for the NOX OpenFlow controller. FortNOX enables NOX to check flow rule contradictions in real time, and implements a novel analysis algorithm that is robust even in cases where an adversarial OF application attempts to strategically insert flow rules that would otherwise circumvent flow rules imposed by OF security applications. We demonstrate the utility of FortNOX through a prototype implementation and use it to examine performance and efficiency aspects of the proposed framework.
---
paper_title: A Location Privacy Preserving Authentication Scheme in Vehicular Networks

paper_content:

As an emerging application scenario of wireless technologies, vehicular communications have been initiated not only for enhancing the transportation safety and driving experiences, but also for a new commercial market of on-board Internet services. Due to extraordinarily high mobility of vehicles in a vehicular network, frequent handover requests will be a norm, which initiates the demand for an effective and fast authentication scheme that can maintain the service continuity in presence of the frequent handover events. However, previously reported authentication schemes, although with minimized handover latency and packet loss rate, may disclose the location information of the mobile user to the third party, which will seriously violate the location privacy of the user. In this paper, we propose a location privacy preserving authentication scheme based on blind signature in the elliptic curve domain. The scheme cannot only provide fast authentication, but also guarantee the security and location anonymity to the public. To analyze the proposed scheme, a theoretical traceability analysis is conducted, which shows that the probability of tracing an vehicle's route is negligibly small. We will also examine the authentication speed of the scheme, and show that the scheme can satisfy seamless handover for fast moving vehicles.
---
paper_title: GSIS: A Secure and Privacy-Preserving Protocol for Vehicular Communications

paper_content:

In this paper, we first identify some unique design requirements in the aspects of security and privacy preservation for communications between different communication devices in vehicular ad hoc networks. We then propose a secure and privacy-preserving protocol based on group signature and identity (ID)-based signature techniques. We demonstrate that the proposed protocol cannot only guarantee the requirements of security and privacy but can also provide the desired traceability of each vehicle in the case where the ID of the message sender has to be revealed by the authority for any dispute event. Extensive simulation is conducted to verify the efficiency, effectiveness, and applicability of the proposed protocol in various application scenarios under different road systems.
---
paper_title: An Efficient Identity-Based Conditional Privacy-Preserving Authentication Scheme for Vehicular Ad Hoc Networks

paper_content:

By broadcasting messages about traffic status to vehicles wirelessly, a vehicular ad hoc network (VANET) can improve traffic safety and efficiency. To guarantee secure communication in VANETs, security and privacy issues must be addressed before their deployment. The conditional privacy-preserving authentication (CPPA) scheme is suitable for solving security and privacy-preserving problems in VANETs, because it supports both mutual authentication and privacy protection simultaneously. Many identity-based CPPA schemes for VANETs using bilinear pairings have been proposed over the last few years to enhance security or to improve performance. However, it is well known that the bilinear pairing operation is one of the most complex operations in modern cryptography. To achieve better performance and reduce computational complexity of information processing in VANET, the design of a CPPA scheme for the VANET environment that does not use bilinear paring becomes a challenge. To address this challenge, we propose a CPPA scheme for VANETs that does not use bilinear paring and we demonstrate that it could supports both the mutual authentication and the privacy protection simultaneously. Our proposed CPPA scheme retains most of the benefits obtained with the previously proposed CPPA schemes. Moreover, the proposed CPPA scheme yields a better performance in terms of computation cost and communication cost making it be suitable for use by the VANET safety-related applications.
---
paper_title: Fast and Secure Multihop Broadcast Solutions for Intervehicular Communication

paper_content:

Intervehicular communication (IVC) is an important emerging research area that is expected to considerably contribute to traffic safety and efficiency. In this context, many possible IVC applications share the common need for fast multihop message propagation, including information such as position, direction, and speed. However, it is crucial for such a data exchange system to be resilient to security attacks. Conversely, a malicious vehicle might inject incorrect information into the intervehicle wireless links, leading to life and money losses or to any other sort of adversarial selfishness (e.g., traffic redirection for the adversarial benefit). In this paper, we analyze attacks to the state-of-the-art IVC-based safety applications. Furthermore, this analysis leads us to design a fast and secure multihop broadcast algorithm for vehicular communication, which is proved to be resilient to the aforementioned attacks.
---
paper_title: Towards resilient geographic routing in WSNs

paper_content:

In this paper, we consider the security of geographical forwarding (GF) -- a class of algorithms widely used in ad hoc and sensor networks. In GF, neighbors exchange their location information, and a node forwards packets to the destination by picking a neighbor that moves the packet closer to the destination. There are a number of attacks that are possible on geographic forwarding. One of the attacks is predicated on misbehaving nodes falsifying their location information. The first contribution of the paper is to propose a location verification algorithm that addresses this problem. The second contribution of the paper is to propose approaches for route authentication and trust-based route selection to defeat attacks on the network. We discuss the proposed approaches in detail, outlining possible attacks and defenses against them.
---
paper_title: The impact of malicious nodes positioning on vehicular alert messaging system

paper_content:

ICT components of vehicular and transportation systems have a crucial role in ensuring passengers' safety, particularly in the scenario of vehicular networks. Hence, security concerns should not be overlooked, since a malicious vehicle might inject false information into the intervehicle wireless links, leading to life and money losses. This is even more critical when considering applications specifically aimed at improving people's safety, such as accident warning systems. To assess the scenario of such type of applications in a vehicular network, we have performed a thorough evaluation of accident warning systems under a position cheating attack. As one of the main contributions of this paper, we determine the impact of a different number of malicious vehicles on delaying the alert warning messages. In particular, we study the impact of the position of malicious vehicles on delaying alert messages. We identify the most effective strategies that could be used by malicious vehicles in order to maximize the delay of the alert message, and thus strengthen the impact of the attacker. Finally, we pinpoint that even with a small number of malicious vehicles, the positioning cheating attack can significantly increase the delay of the alert message when compared to a scenario without attack.
---
paper_title: Improved security in geographic ad hoc routing through autonomous position verification

paper_content:

Inter-vehicle communication is regarded as one of the major applications of mobile ad hoc networks (MANETs). Compared to other MANETs, these so called vehicular ad hoc networks (VANETs) have special requirements in terms of node mobility and position-dependent applications, which are well met by geographic routing protocols. Functional research on geographic routing has already reached a considerable level, whereas security aspects have been vastly neglected so far. Since position dissemination is crucial for geographic routing, forged position information has severe impact regarding both performance and security.In order to lessen this problem, we propose a detection mechanism that is capable of recognizing nodes cheating about their position in beacons (periodic position dissemination in most single-path geographic routing protocols, e.g. GPSR). Unlike other proposals described in the literature, our detection does not rely on additional hardware or special nodes, which contradicts the ad hoc approach. Instead, this mechanism uses a number of different independent sensors to quickly give an estimation of the trustworthiness of other nodes' position claims without using dedicated infrastructure or specialized hardware.The simulative evaluation proves that our position verification system successfully discloses nodes disseminating false positions and thereby widely prevents attacks using position cheating.
---
paper_title: AWF-NA: A Complete Solution for Tampered Packet Detection in VANETs

paper_content:

In vehicular ad hoc networks (VANETs), it is vital to ensure that tampered data packets, especially safety-related ones, are detected and stopped from further propagation. To this end, we propose a novel scheme, autonomous watchdog formation enabled by 2-hop neighborhood awareness (AWF-NA), to ensure nodes automatically functioning as watchdogs to monitor the behaviors of the relaying nodes. Unlike existing schemes [1-4], it aims to detect and react at each hop, and stop any tampered packet from further propagation in spite of dishonest watchdogs and relaying nodes. At each hop, the neighbors of the relaying node and the receiver node autonomously select eligible watchdogs among themselves based on local information provided by 2-hop neighborhood awareness. With 2-hop neighborhood awareness each node knows all the neighbors within its 2 hops, which provides it with necessary information to act according to the heuristic rules in AWF-NA. Induction-based proof shows that AWF-NA can detect all potential attacks of data packet tampering. Theoretical analysis indicates that it achieves good balance of desirable performance and authentic packet relaying.
---
paper_title: An efficient service channel allocation scheme in SDN-enabled VANETs

paper_content:

Providing infotainment services in Vehicular Adhoc Networks (VANETs) is a key functionality for the future intelligent transportation systems. However, the unique features of vehicular networks such as high velocity, intermittent communication links and dynamic density can induce severe performances degradation for infotainment services running on the six Service Channels (SCHs) available in the Dedicated Short Range Communication (DSRC). Although, the Wireless Access in the Vehicular Environment (WAVE) has been proposed for VANETs to support these applications and guarantee the QoS by proposing four different access categories, no service channel scheme has been proposed to ensure fair and interference-aware allocation. To fill this gap, in this work we propose ESCiVA, an Efficient Service Channel allocation Scheme in SDN-enabled VAnets to balance service traffic on the six SCHs and mitigate interferences between services provided on adjacent channels. Extensive simulation results confirm that ESCiVA outperforms the basic SCH allocation method, defined in the WAVE standard.
---
paper_title: Detection and localization of sybil nodes in VANETs

paper_content:

Sybil attacks have been regarded as a serious security threat to ad hoc networks and sensor networks. They may also impair the potential applications of VANETs (Vehicular Ad hoc Networks) by creating an illusion of traffic congestion. In this paper, we present a lightweight security scheme for detecting and localizing Sybil nodes in VANETs, based on statistic analysis of signal strength distribution. Our scheme is a distributed and localized approach, in which each vehicle on a road can perform the detection of potential Sybil vehicles nearby by verifying their claimed positions. We first introduce a basic signal-strength-based position verification scheme. However, the basic scheme proves to be inaccurate and vulnerable to spoof attacks. In order to compensate for the weaknesses of the basic scheme, we propose a technique to prevent Sybil nodes from covering up for each other. In this technique, traffic patterns and support from roadside base stations are used to our advantage. We, then, propose two statistic algorithms to enhance the accuracy of position verification. The algorithms can detect potential Sybil attacks by observing the signal strength distribution of a suspect node over a period of time. The statistic nature of our algorithms significantly reduces the verification error rate. Finally, we conduct simulations to explore the feasibility of our scheme.
---
paper_title: A Robust Detection of the Sybil Attack in Urban VANETs

paper_content:

The Sybil attack is one of the serious attacks to Vehicular Ad Hoc Networks (VANETs), because it severely damages the security of VANETs and, even leads to a threat to lives of drivers and passengers. In this paper, we propose a solution to detect the Sybil attack based on the differences between the normal motion trajectories of vehicles and the abnormal ones. In our approach, each node can accomplish the attack detection independently with the limited assistance from the infrastructures of VANETs. We improve the feasibility of our approach with limited infrastructures at the early deployment stages of VANETs. In addition, the independency and feasibility of our algorithm are more robust than the existing solutions that rely on collaboration of neighboring nodes. Simulation results show that the proposed method outperforms the existing solutions in terms of robustness, detection rate, overhead efficiency, and lower system requirements.
---
paper_title: A sybil attack detection approach using neighboring vehicles in VANET

paper_content:

Vehicular Ad Hoc Network (VANET) is vulnerable to many security threats. One severe attack is Sybil attack, in which a malicious node forges a large number of fake identities in order to disrupt the proper functioning of VANET applications. In this paper, a distributed and robust approach is presented to defend against Sybil attack. Proposed scheme localizes the fake identities of malicious vehicles by analyzing the consistent similarity in neighborhood information of neighbors of these fake identities. Beacon packets are exchanged periodically by all the vehicles to announce their presence and get aware of neighboring nodes. Each node periodically keep a record of its neighboring nodes. In proposed approach, each node exchange groups of its neighboring nodes periodically and perform the intersection of these groups. If some nodes observe that they have similar neighbors for a significant duration of time, these similar neighbors are identified as Sybil nodes. Proposed approach is able to locate Sybil nodes quickly without the requirement of secret information exchange and special hardware support. We evaluate our proposed approach on the realistic traffic scenario. Experiment results demonstrate that detection rate increases when optimal numbers of Sybil nodes are forged by the attacker.
---
paper_title: Anomaly traceback using software defined networking

paper_content:

While the threats in Internet are still increasing and evolving (like intra multi-tenant data center attacks), protection and detection mechanisms are not fully accurate. Therefore, forensics is vital for recovering from an attack but also to identify the responsible entities. Therefore, this paper focuses on tracing back to the sources of an anomaly in the network. In this paper, we propose a method leveraging the Software Defined Networking (SDN) paradigm to passively identify switches composing the network path of an anomaly. As SDN technologies tend to be deployed in the next generation of networks including in data centers, they provide a helpful framework to implement our proposal without developing dedicated routers like usual IP traceback techniques. We evaluated our scheme with different network topologies (Internet and data centers) by considering distributed attacks with numerous hosts.
---
paper_title: FRESCO: Modular Composable Security Services for SoftwareDefined Networks

paper_content:

OpenFlow is an open standard that has gained tremendous interest in the last few years within the network community. It is an embodiment of the software-defined networking paradigm, in which higher-level flow routing decisions are derived from a control layer that, unlike classic network switch implementations, is separated from the data handling layer. The central attraction to this paradigm is that by decoupling the control logic from the closed and proprietary implementations of traditional network switch infrastructure, researchers can more easily design and distribute innovative flow handling and network control algorithms. Indeed, we also believe that OpenFlow can, in time, prove to be one of the more impactful technologies to drive a variety of innovations in network security. OpenFlow could offer a dramatic simplification to the way we design and integrate complex network security applications into large networks. However, to date there remains a stark paucity of compelling OpenFlow security applications. In this paper, we introduce FRESCO, an OpenFlow security application development framework designed to facilitate the rapid design, and modular composition of OF-enabled detection and mitigation modules. FRESCO, which is itself an OpenFlow application, offers a Click-inspired [19] programming framework that enables security researchers to implement, share, and compose together, many different security detection and mitigation modules. We demonstrate the utility of FRESCO through the implementation of several well-known security defenses as OpenFlow security services, and use them to examine various performance and efficiency aspects of our proposed framework.
---
paper_title: GSIS: A Secure and Privacy-Preserving Protocol for Vehicular Communications

paper_content:

In this paper, we first identify some unique design requirements in the aspects of security and privacy preservation for communications between different communication devices in vehicular ad hoc networks. We then propose a secure and privacy-preserving protocol based on group signature and identity (ID)-based signature techniques. We demonstrate that the proposed protocol cannot only guarantee the requirements of security and privacy but can also provide the desired traceability of each vehicle in the case where the ID of the message sender has to be revealed by the authority for any dispute event. Extensive simulation is conducted to verify the efficiency, effectiveness, and applicability of the proposed protocol in various application scenarios under different road systems.
---
paper_title: VeCure: A practical security framework to protect the CAN bus of vehicles

paper_content:

Vehicles are being revolutionized by integrating modern computing and communication technologies in order to improve both user experience and driving safety. As a result, vehicular systems that used to be closed systems are opening up various interfaces, such as Bluetooth, 3G/4G, GPS, etc., to the outside world, thus introducing new opportunities for cyber attacks. It has been recently demonstrated that modern vehicles are vulnerable to several remote attacks launched through Bluetooth and cellular interfaces, allowing the attacker to take full control of the vehicle. The common root cause of these attacks is the lack of message authentication for the vehicle's internal bus system, called Controller Area Network (CAN). In this work, we propose VeCure - a practical security framework for vehicular systems, which can fundamentally solve the message authentication issue of the CAN bus. VeCure is designed to be compatible with existing vehicle system architectures, and employs a trust group structure and a novel message authentication scheme with offline computation capability to minimize online message processing delay and deployment cost. We built a proof-of-concept prototype on a testbed using Freescale's automotive development boards. The experimental results show that VeCure only introduces 50us additional delay to process a message, which is at least 20-fold faster than any existing solution.
---
paper_title: Detection and localization of sybil nodes in VANETs

paper_content:

Sybil attacks have been regarded as a serious security threat to ad hoc networks and sensor networks. They may also impair the potential applications of VANETs (Vehicular Ad hoc Networks) by creating an illusion of traffic congestion. In this paper, we present a lightweight security scheme for detecting and localizing Sybil nodes in VANETs, based on statistic analysis of signal strength distribution. Our scheme is a distributed and localized approach, in which each vehicle on a road can perform the detection of potential Sybil vehicles nearby by verifying their claimed positions. We first introduce a basic signal-strength-based position verification scheme. However, the basic scheme proves to be inaccurate and vulnerable to spoof attacks. In order to compensate for the weaknesses of the basic scheme, we propose a technique to prevent Sybil nodes from covering up for each other. In this technique, traffic patterns and support from roadside base stations are used to our advantage. We, then, propose two statistic algorithms to enhance the accuracy of position verification. The algorithms can detect potential Sybil attacks by observing the signal strength distribution of a suspect node over a period of time. The statistic nature of our algorithms significantly reduces the verification error rate. Finally, we conduct simulations to explore the feasibility of our scheme.
---
paper_title: GSIS: A Secure and Privacy-Preserving Protocol for Vehicular Communications

paper_content:

In this paper, we first identify some unique design requirements in the aspects of security and privacy preservation for communications between different communication devices in vehicular ad hoc networks. We then propose a secure and privacy-preserving protocol based on group signature and identity (ID)-based signature techniques. We demonstrate that the proposed protocol cannot only guarantee the requirements of security and privacy but can also provide the desired traceability of each vehicle in the case where the ID of the message sender has to be revealed by the authority for any dispute event. Extensive simulation is conducted to verify the efficiency, effectiveness, and applicability of the proposed protocol in various application scenarios under different road systems.
---
paper_title: Detection and mitigation of sinkhole attacks in wireless sensor networks

paper_content:

With the advances in technology, there has been an increasing interest in the use of wireless sensor networks (WSNs). WSNs are vulnerable to a wide class of attacks among which sinkhole attack puts severe threats to the security of such networks. This paper proposes two approaches to detect and mitigate such attack in WSNs. It provides a centralized approach to detect suspicious regions in the network using geostatistical hazard model. Furthermore, a distributed monitoring approach has been proposed to explore every neighborhood in the network to detect malicious behaviors. Our simulation experiments validate the correctness and efficiency of the proposed approaches.
---
paper_title: P2DAP — Sybil Attacks Detection in Vehicular Ad Hoc Networks

paper_content:

Vehicular ad hoc networks (VANETs) are being increasingly advocated for traffic control, accident avoidance, and management of parking lots and public areas. Security and privacy are two major concerns in VANETs. Unfortunately, in VANETs, most privacy-preserving schemes are vulnerable to Sybil attacks, whereby a malicious user can pretend to be multiple (other) vehicles. In this paper, we present a lightweight and scalable protocol to detect Sybil attacks. In this protocol, a malicious user pretending to be multiple (other) vehicles can be detected in a distributed manner through passive overhearing by s set of fixed nodes called road-side boxes (RSBs). The detection of Sybil attacks in this manner does not require any vehicle in the network to disclose its identity; hence privacy is preserved at all times. Simulation results are presented for a realistic test case to highlight the overhead for a centralized authority such as the DMV, the false alarm rate, and the detection latency. The results also quantify the inherent trade-off between security, i.e., the detection of Sybil attacks and detection latency, and the privacy provided to the vehicles in the network. From the results, we see our scheme being able to detect Sybil attacks at low overhead and delay, while preserving privacy of vehicles.
---
paper_title: Detecting Sybil attacks in VANETs

paper_content:

Sybil attacks have been regarded as a serious security threat to Ad hoc Networks and Sensor Networks. They may also impair the potential applications in Vehicular Ad hoc Networks (VANETs) by creating an illusion of traffic congestion. In this paper, we make various attempts to explore the feasibility of detecting Sybil attacks by analyzing signal strength distribution. First, we propose a cooperative method to verify the positions of potential Sybil nodes. We use a Random Sample Consensus (RANSAC)-based algorithm to make this cooperative method more robust against outlier data fabricated by Sybil nodes. However, several inherent drawbacks of this cooperative method prompt us to explore additional approaches. We introduce a statistical method and design a system which is able to verify where a vehicle comes from. The system is termed the Presence Evidence System (PES). With PES, we are able to enhance the detection accuracy using statistical analysis over an observation period. Finally, based on realistic US maps and traffic models, we conducted simulations to evaluate the feasibility and efficiency of our methods. Our scheme proves to be an economical approach to suppressing Sybil attacks without extra support from specific positioning hardware.
---
paper_title: Distance-Based Scheme for Broadcast Storm Mitigation in Named Software Defined Vehicular Networks (NSDVN)

paper_content:

Computer networking field is evolving day by day and new techniques like named data network (NDN), software defined network (SDN) and vehicular ad-hoc networks (VANETs) are gaining attention due to their enhanced functionalities over traditional networks. NDN is a new paradigm which mitigates the IPv4 addressing limitations due to its better and flexible mechanism. In NDN, communication between different nodes occur with the help of content names rather than IP addresses. On the other hand, SDN provides more control and manages the network efficiently by decoupling data and control plane. Communication in VANETs contains two parts (i) V2V (vehicle-to-vehicle) (ii) V2I (vehicle-to-infrastructure). In V2V, communication between different vehicles carry out by vehicles itself while in V2I it can be done through road side units (RSU). Broadcast storm problem occurs when same packets were flooded by each vehicle. With the help of both NDN and SDN in VANETs, broadcast storm problem can be solved. In this paper, we introduced a new technique named as Broadcast Storm Avoidance Mechanism (BSAM) to mitigate the broadcast storm issue. Proposed scheme is evaluated through simulations which show the better results of BSAM as compared to native VNDN in terms of average number of interest packets transmission and average end-to-end delay.
---
paper_title: Mobility management approaches for SDN-enabled mobile networks

paper_content:

The evolving network technologies aim at meeting the envisioned communication demands of future smart cities and applications. Although software-defined networking (SDN) enables flexible network control, its applicability to mobile networks is still in its infancy. When it comes to introducing the SDN vision to mobile networks, handling of wireless events and mobility management operations stand out as major challenges. In this paper, we study the scalability issues of SDNized wireless networks, specifically those relevant to mobility management. We design and implement different mobility management approaches in SDNized wireless networks and investigate the impact of various system variables on the overall handover delays. We also study the improvements in handover delays: (i) when a proposed proactive mobility management algorithm is implemented; (ii) when the controller delegates partial control of mobility management to the forwarding entities. For the implementation of the proposed approaches on the OpenFlow network, the paper also suggests potential extensions to the OpenFlow protocol. The contributed approaches are validated on a full-scale demonstrator, with results showing that proactive outperforms reactive and that the delegated control approach performs better than proactive for smaller topology sizes. Furthermore, a proposal for LTE X2-specific control delegation is discussed as a use case.
---
paper_title: Delay-Minimization Routing for Heterogeneous VANETs With Machine Learning Based Mobility Prediction

paper_content:

Establishing and maintaining end-to-end connections in a vehicular ad hoc network (VANET) is challenging due to the high vehicle mobility, dynamic inter-vehicle spacing, and variable vehicle density. Mobility prediction of vehicles can address the aforementioned challenge, since it can provide a better routing planning and improve overall VANET performance in terms of continuous service availability. In this paper, a centralized routing scheme with mobility prediction is proposed for VANET assisted by an artificial intelligence powered software-defined network (SDN) controller. Specifically, the SDN controller can perform accurate mobility prediction through an advanced artificial neural network technique. Then, based on the mobility prediction, the successful transmission probability and average delay of each vehicle's request under frequent network topology changes can be estimated by the roadside units (RSUs) or the base station (BS). The estimation is performed based on a stochastic urban traffic model in which the vehicle arrival follows a non-homogeneous Poisson process. The SDN controller gathers network information from RSUs and BS that are considered as the switches. Based on the global network information, the SDN controller computes optimal routing paths for switches (i.e., BS and RSU). While the source vehicle and destination vehicle are located in the coverage area of the same switch, further routing decision will be made by the RSUs or the BS independently to minimize the overall vehicular service delay. The RSUs or the BS schedule the requests of vehicles by either vehicle-to-vehicle or vehicle-to-infrastructure communication, from the source vehicle to the destination vehicle. Simulation results demonstrate that our proposed centralized routing scheme outperforms others in terms of transmission delay, and the transmission performance of our proposed routing scheme is more robust with varying vehicle velocity.
---
paper_title: Security Challenges in Future NDN-Enabled VANETs

paper_content:

Originally envisioned to tackle the massive content distribution in today's Internet, the Information-Centric Networking (ICN) has turned out to be a promising paradigm for different network scenarios, including Vehicular Ad Hoc Networks (VANETs). Data retrieval independent from specific recipients bound to fixed physical locations could be a key enabler for future vehicular networks, fixing old unsolved issues of mobility management in classical IP-based systems. As an evidence, several preliminary investigations have been performed on a widely known ICN instance, i.e., the Named-Data Networking (NDN). Nevertheless, the NDN architecture presents a new set of security vulnerabilities. Interest flooding attacks, cache poisoning attacks and privacy violation attacks by means of content names represent concrete NDN threats. While the benefits offered by NDN to vehicular networks have been partially investigated, the impact of major security threats stays unclear. Therefore, this paper opens a more comprehensive discussion of the security risks brought by the application of NDN solutions in VANETs. This is a fundamental first step toward the future design of suitable related countermeasures.
---
paper_title: Realization of VANET-Based Cloud Services through Named Data Networking

paper_content:

Connected car technology (also referred to as VANET) has gradually paved its way to legislation in several countries and soon will be followed by mass-scale deployment. However, the race between the advancements in technologies and utilization of the available resources have left a question mark on the future of pure VANET. Therefore, the research community together with academia and industry have foreseen the evolution of VANET into VANET-based clouds. The data- or content-centric communication paradigm is the point of convergence in these technologies because the content is shared among different nodes in different forms such as infotainment or safety. However, the current IP-based networking is not an ideal choice for content-centric applications because of its larger overhead for establishing, maintaining, and securing the path, addressing complexity, non-scalability for content, routing and mobility management overhead, and so on. Therefore, the limitations and shortcomings of current IP-based networking and the need for efficient content delivery advocate for a paradigm shift. To this end, a new content-centric networking paradigm, namely NDN, has been employed to address the aforementioned issues related to content-centric networking while using IP-based networking. In this article, we foresee the integration of VANET-based clouds with NDN called NDN-VC for reliable, efficient, robust, and safe intelligent transportation systems. We particularly aim at the architecture and concise naming mechanism for NDN-VC. Furthermore, we also outline the unique future challenges faced by the NDN-VC.
---
paper_title: Network Slicing to Enable Scalability and Flexibility in 5G Mobile Networks

paper_content:

We argue for network slicing as an efficient solution that addresses the diverse requirements of 5G mobile networks, thus providing the necessary flexibility and scalability associated with future network implementations. We elaborate on the challenges that emerge when we design 5G networks based on network slicing. We focus on the architectural aspects associated with the coexistence of dedicated as well as shared slices in the network. In particular, we analyze the realization options of a flexible radio access network with focus on network slicing and their impact on the design of 5G mobile networks. In addition to the technical study, this paper provides an investigation of the revenue potential of network slicing, where the applications that originate from such concept and the profit capabilities from the network operator's perspective are put forward.
---
paper_title: Mobile Edge Computing, Fog et al.: A Survey and Analysis of Security Threats and Challenges

paper_content:

Abstract For various reasons, the cloud computing paradigm is unable to meet certain requirements (e.g. low latency and jitter, context awareness, mobility support) that are crucial for several applications (e.g. vehicular networks, augmented reality). To fulfill these requirements, various paradigms, such as fog computing, mobile edge computing, and mobile cloud computing, have emerged in recent years. While these edge paradigms share several features, most of the existing research is compartmentalized; no synergies have been explored. This is especially true in the field of security, where most analyses focus only on one edge paradigm, while ignoring the others. The main goal of this study is to holistically analyze the security threats, challenges, and mechanisms inherent in all edge paradigms, while highlighting potential synergies and venues of collaboration. In our results, we will show that all edge paradigms should consider the advances in other paradigms.
---
paper_title: Network Slicing Based 5G and Future Mobile Networks: Mobility, Resource Management, and Challenges

paper_content:

5G networks are expected to be able to satisfy users' different QoS requirements. Network slicing is a promising technology for 5G networks to provide services tailored for users' specific QoS demands. Driven by the increased massive wireless data traffic from different application scenarios, efficient resource allocation schemes should be exploited to improve the flexibility of network resource allocation and capacity of 5G networks based on network slicing. Due to the diversity of 5G application scenarios, new mobility management schemes are greatly needed to guarantee seamless handover in network-slicing-based 5G systems. In this article, we introduce a logical architecture for network-slicing-based 5G systems, and present a scheme for managing mobility between different access networks, as well as a joint power and subchannel allocation scheme in spectrum-sharing two-tier systems based on network slicing, where both the co-tier interference and cross-tier interference are taken into account. Simulation results demonstrate that the proposed resource allocation scheme can flexibly allocate network resources between different slices in 5G systems. Finally, several open issues and challenges in network-slicing-based 5G networks are discussed, including network reconstruction, network slicing management, and cooperation with other 5G technologies.
---
paper_title: Infrastructure-Assisted Communication for NDN-VANETs

paper_content:

Vehicular Ad-Hoc Networks (VANETs) include services such as video streaming for automated safety precautions and autonomous driving. NDN is proposed in VANETs as a solution for the connection breaks, since NDN decouples the content exchange from the location of the host. The combination of NDN and VANETs leads to autonomous ad-hoc network architectures that are self-managed. In this paper, we apply the NDN architecture in VANETs, to retrieve information from other vehicles and to save network resources. We present a Vehicle to Infrastructure (V2I) communication architecture for NDN-VANETs, which consists of vehicles and Road Side Units (RSUs). For installed RSUs along the roads we develop two communication techniques: First, in the centralized approach every node that requests content sends its Interests to the nearest RSU. RSUs are responsible for routing the Interests to the content source. In our second approach, a hybrid communication technique uses RSUs as a backup mechanism and forwards packets to them, if a route to the content source is unavailable. We compare our approaches with our previous work iMMM-VNDN, flooding and AODV. Our results show that we outperform previous works in terms of Interest Satisfaction Ratio and the total amount of Delivered Data in the requester node.
---
paper_title: A Framework for Experimenting ICN over SDN Solutions using Physical and Virtual Testbeds

paper_content:

ABSTRACT Information Centric Networking (ICN) is a paradigm in which the network layer provides users with access to content by names, instead of providing communication channels between hosts. The ICN paradigm promises to offer a set of advantages with respect to existing (IP) networks for the support of the large majority of current traffic. In this paper, we consider the deployment of ICN by exploiting the Software Defined Networking (SDN) architecture. SDN is characterized by a logically centralized control plane and a well-defined separation between data and control planes. An SDN-enabled network facilitates the introduction of ICN functionality, without requiring a complex transition strategy and the re-deployment of new ICN capable hardware. More in details, in this paper we provide: i) a solution to support ICN by exploiting SDN, extending a previous work of ours; ii) design and implement an open reference environment to deploy and test the ICN over SDN solutions over local and distributed testbeds; iii) design and implementation of a set of Caching policies that leverage on the ICN over SDN approach; iv) performance evaluation of key aspects of the ICN over SDN architecture and of the designed caching policies. All the source code and the monitoring suite are publicly available. To the best of our knowledge, there are no other similar solutions available in Open Source, nor similar emulation platforms, including also a comprehensive set of monitoring tools.
---
paper_title: NFV: Security Threats and Best Practices

paper_content:

Network function virtualization (NFV) yields numerous benefits, particularly the possibility of a cost-efficient transition of telco hardware functionalities on the software platform to break the vendor lock-in problem. These benefits come at the price of some security flaws. Indeed, with NFV, virtual mobile networks become vulnerable to a number of security threats. These threats can be leveraged using some available mitigation techniques and also through other emerging solutions. This article presents critical security threats that exist in the NFV infrastructure, proposes best security practices to protect against them.
---

Title: A Survey on Software-Defined VANETs: Benefits, Challenges, and Future Directions

Section 1: INTRODUCTION
Description 1: Introduce the development of vehicular ad-hoc networks (VANETs) and their integration with Software Defined Networking (SDN) to address emerging challenges in intelligent transportation systems.

Section 2: BACKGROUND OVERVIEW
Description 2: Provide a brief overview of VANET and SDN technologies, discussing their basic principles, benefits, and challenges.

Section 3: SDN BASED VEHICULAR NETWORKS
Description 3: Present a systematic survey on the state-of-the-art SDN-based VANET (SDVN) architectures, highlighting their design, benefits, and challenges.

Section 3.1: Overview of state-of-the-art SDVN Architectures
Description 3.1: Conduct a comprehensive survey on existing research, describing proposed SDVN architectures and their working methodologies.

Section 3.2: Benefits and Challenges
Description 3.2: Discuss the major benefits and research challenges extracted from the survey of SDVN architectures, focusing on aspects such as resource utilization, network configuration, and security.

Section 4: SDVNS SECURITY ANALYSIS & COUNTERMEASURES
Description 4: Analyze the security threats and vulnerabilities in SDVN architectures and discuss possible countermeasures to mitigate these risks.

Section 4.1: Control Plane Resource Consumption
Description 4.1: Discuss the issue of control plane resource consumption in SDVNs and explore countermeasures to handle excessive requests from the data plane.

Section 4.2: Network Topology Poisoning
Description 4.2: Analyze the implications of network topology poisoning attacks and review existing solutions to prevent such threats.

Section 4.3: Distributed Denial of Service Attacks
Description 4.3: Evaluate the vulnerability of SDVN architectures to DDoS attacks and propose relevant defense mechanisms.

Section 4.4: Rule conflicts violating existing security policies
Description 4.4: Discuss how rule conflicts might arise in SDVN architectures and explore techniques to reconcile these conflicts.

Section 4.5: Privacy
Description 4.5: Highlight privacy concerns related to user information in SDVNs and suggest privacy-preserving mechanisms.

Section 4.6: Forgery
Description 4.6: Describe the threat of message forgery in SDVNs and outline methods to ensure secure information dissemination.

Section 4.7: Tampering
Description 4.7: Address the issue of tampering with in-transit messages and propose approaches for anomaly detection in data packets.

Section 4.8: Jamming
Description 4.8: Discuss how jamming attacks can disrupt SDVN operations and propose strategies to mitigate such attacks.

Section 4.9: Impersonation
Description 4.9: Analyze impersonation attacks in SDVNs and review techniques for detecting and preventing these attacks.

Section 4.10: Application-based attacks
Description 4.10: Inspect attacks on specific vehicular applications like smart grid and platoon management and propose SDVN-based solutions for detection and mitigation.

Section 4.11: Malware Attack Injection
Description 4.11: Review the threat posed by malware injection in SDVNs and suggest frameworks for enhancing the security of vehicular systems.

Section 4.12: Routing based Attacks
Description 4.12: Evaluate routing-based attacks such as sinkhole, sybil, and replay attacks in SDVNs and discuss effective countermeasures.

Section 5: DISCUSSION AND OPEN ISSUES
Description 5: Summarize the findings from the review of SDVN architectures, discuss lessons learned, and outline the future research challenges and directions.

Section 6: CONCLUSIONS
Description 6: Conclude the survey by summarizing the key contributions of the study, highlighting the potential of SDN to support advanced VANET applications, and outlining the future research directions.