International Peer-Reviewed Journal•Open Access•ISSN 2456-8880
irejournals@gmail.com•+91-7433024337

Home / Current Issue / Paper 1723648

1723648 Vol 10 · Issue 4 Download Paper

Threat Assessment and Denial of Service Attacks in Software Defined Network based Smart Grid: A Survey

Faheem Ahmad Qureshi

Subject area: Science,Engineering and Technology  ·  Area of research: Cybersecurity

DOI: 10.64388/IREV10I4-1723648

Abstract

Smart Grid (SG) is the super critical infrastruc-ture (CI) that fulfils the energy demands of the public, state departments, and also energises and regulates the operations of other CIs. This significant role of SG demands an efficient and reliable underlying infrastructure; power system, communication layer, and SG applications; to enable a secure and operational SG. Although SG has revolutionised the traditional electric grid but its communication layer still lacks efficient management, network automation, programmability, scalability, monitoring, and control. Software defined networks (SDN), offering a greater degree of flexibility, control, and programmability, has a great scope to complement the communication domain of SG; mean-while also introduces certain vulnerabilities. The emerging SDN based SG (SDN-SG) paradigm is in infancy stages in terms of threat assessment and defence mechanisms. Like, one of the severest cyber attacks, denial of service (DoS) attacks, which overwhelms the network resources to curtail the availability of the network for legit users, are still not well-addressed for SDN-SG in the literature. This paper comprehensively surveys the vulnerabilities and associated assessment models of SDN-SG. First, the existing threat assessment models and their adaptability for SDN-SG is evaluated. Afterwards, DoS attacks and associated mitigation techniques for SDN and their scope for SDN-SG are comprehensively studied. Various DoS attacks are identified which are still unaddressed in SDN-SG. In the end, machine learning (ML) techniques are reviewed for securing SDN-SG against a wide spectrum of DoS attacks. Furthermore, we also present challenges, issues, and future research directions related to threat assessment, DoS attacks, and ML based mitigation techniques for SDN-SG.

Keywords

Software defined network (SDN), smart grid (SG), Cyber Security, Threat Assessment, Denial of Service (DoS) Attacks.

References

[1] N. Evans and W. Horsthemke, “Regional critical infrastructure,” in Cyber Resilience of Systems and Networks, pp. 355–380, Springer, 2019.

[2] P. Regulagadda, I. Dincer, and G. Naterer, “Exergy analysis of a thermal power plant with measured boiler and turbine losses,” Applied Thermal Engineering, vol. 30, no. 8-9, pp. 970– 976, 2010.

[3] R. Morello, S. C. Mukhopadhyay, Z. Liu, D. Slomovitz, and S. R. Samantaray, “Advances on sensing technologies for smart cities and power grids: A review,” IEEE Sensors Journal, vol. 17, no. 23, pp. 7596–7610, 2017.

[4] X. Fang, S. Misra, G. Xue, and D. Yang, “Smart grid: The new and improved power grid: A survey,” IEEE Communications Surveys & Tutorials, vol. 14, no. 4, pp. 944– 980, 2012.

[5] K. De Craemer and G. Deconinck, “Analysis of state-of-the-art smart metering communication standards,” in Proceedings of the 5th young researchers symposium, 2010.

[6] A. A. Khan, M. H. Rehmani, and M. Reisslein, “Cognitive radio for smart grids: Survey of architectures, spectrum sensing mechanisms, and networking protocols,” IEEE Communications Surveys & Tutorials, vol. 18, no. 1, pp. 860–898, 2015.

[7] W. Wang, Y. Xu, and M. Khanna, “A survey on the communication architectures in smart grid,” Computer Networks, vol. 55, no. 15, pp. 3604 – 3629, 2011.

[8] H. Lin, C. Chen, J. Wang, J. Qi, D. Jin, Z. T. Kalbarczyk, and R. K. Iyer, “Self-healing attack-resilient PMU network for power system operation,” IEEE Transactions on Smart Grid, vol. 9, no. 3, pp. 1551–1565, 2016.

[9] W. Meng, R. Ma, and H. H. Chen, “Smart grid neighborhood area networks: a survey,” IEEE Network, vol. 28, no. 1, pp. 24–32, 2014.

[10] K. H. Chang, “Interoperable nan standards: a path to cost-effective smart grid solutions,” IEEE Wireless Communications, vol. 20, no. 3, pp. 4–5, 2013.

[11] M. H. Rehmani, A. Davy, B. Jennings, and C. Assi, “Software defined networks-based smart grid communication: A comprehensive survey,” IEEE Communications Surveys & Tutorials, vol. 21, no. 3, pp. 2637–2670, 2019.

[12] D. B. Rawat and S. R. Reddy, “Software defined networking architec-ture, security and energy efficiency: A survey,” IEEE Communications Surveys & Tutorials, vol. 19, no. 1, pp. 325–346, 2016.

[13] G. Baldini, T. Sturman, A. R. Biswas, R. Leschhorn, G. Godor, and M. Street, “Security aspects in software defined radio and cognitive radio networks: A survey and a way ahead,” IEEE Communications Surveys & Tutorials, vol. 14, no. 2, pp. 355–379, 2011.

[14] Y. Yan, Y. Qian, H. Sharif, and D. Tipper, “A survey on cyber security for smart grid communications,” IEEE Communications Surveys & Tutorials, vol. 14, no. 4, pp. 998– 1010, 2012.

[15] W. Wang and Z. Lu, “Cyber security in the smart grid: Survey and challenges,” Computer networks, vol. 57, no. 5, pp. 1344–1371, 2013.

[16] N. Komninos, E. Philippou, and A. Pitsillides, “Survey in smart grid and smart home security: Issues, challenges and countermeasures,” IEEE Communications Surveys & Tutorials, vol. 16, no. 4, pp. 1933–1954, 2014.

[17] Q. Yan, F. R. Yu, Q. Gong, and J. Li, “Software-defined networking (sdn) and distributed denial of service (ddos) attacks in cloud com-puting environments: A survey, some research issues, and challenges,” IEEE communications surveys & tutorials, vol. 18, no. 1, pp. 602–622, 2015.

[18] S. Scott-Hayward, S. Natarajan, and S. Sezer, “A survey of security in software defined networks,” IEEE Communications Surveys & Tutorials, vol. 18, no. 1, pp. 623–654, 2015.

[19] S. T. Ali, V. Sivaraman, A. Radford, and S. Jha, “A survey of securing networks using software defined networking,” IEEE transactions on reliability, vol. 64, no. 3, pp. 1086–1097, 2015.

[20] R. Mahmud, R. Vallakati, A. Mukherjee, P. Ranganathan, and A. Ne-jadpak, “A survey on smart grid metering infrastructures: Threats and solutions,” in IEEE International Conference on Electro/Information Technology (EIT), pp. 386–391, 2015.

[21] L. Langer and M. Kammerstetter, “The evolution of the smart grid threat landscape and cross-domain risk assessment,” in Smart Grid Security, pp. 49–77, Elsevier, 2015.

[22] Y. Kabalci, “A survey on smart metering and smart grid communica-tion,” Renewable and Sustainable Energy Reviews, vol. 57, pp. 302– 318, 2016.

[23] A. S. Thyagaturu, A. Mercian, M. P. McGarry, M. Reisslein, and W. Kellerer, “Software defined optical networks (SDONs): A compre- hensive survey,” IEEE Communications Surveys & Tutorials, vol. 18, no. 4, pp. 2738– 2786, 2016.

[24] H. He and J. Yan, “Cyber-physical attacks and defences in the smart grid: a survey,” IET Cyber-Physical Systems: Theory & Applications, vol. 1, no. 1, pp. 13–27, 2016.

[25] H. I. Kobo, A. M. Abu-Mahfouz, and G. P. Hancke, “A survey on software-defined wireless sensor networks: Challenges and design requirements,” IEEE access, vol. 5, pp. 1872–1899, 2017.

[26] P. C. da Rocha Fonseca and E. S. Mota, “A survey on fault manage-ment in software- defined networks,” IEEE Communications Surveys & Tutorials, vol. 19, no. 4, pp. 2284– 2321, 2017.

[27] R. Alvizu, G. Maier, N. Kukreja, A. Pattavina, R. Morro, A. Capello, and C. Cavazzoni, “Comprehensive survey on T-SDN: Software- defined networking for transport networks,” IEEE Communications Surveys & Tutorials, vol. 19, no. 4, pp. 2232–2283, 2017.

[28] T. Dargahi, A. Caponi, M. Ambrosin, G. Bianchi, and M. Conti, “A survey on the security of stateful SDN data planes,” IEEE Communi-cations Surveys & Tutorials, vol. 19, no. 3, pp. 1701–1725, 2017.

[29] J. H. Cox, J. Chung, S. Donovan, J. Ivey, R. J. Clark, G. Riley, and H. L. Owen, “Advancing software-defined networks: A survey,” IEEE Access, vol. 5, pp. 25487–25526, 2017.

[30] A. Abdou, P. C. Van Oorschot, and T. Wan, “Comparative analysis of control plane security of SDN and conventional networks,” IEEE Communications Surveys & Tutorials, vol. 20, no. 4, pp. 3542–3559, 2018.

[31] J. Xie, F. R. Yu, T. Huang, R. Xie, J. Liu, C. Wang, and Y. Liu, “A survey of machine learning techniques applied to software defined networking (SDN): Research issues and challenges,” IEEE Communi-cations Surveys & Tutorials, vol. 21, no. 1, pp. 393–430, 2018.

[32] R. Amin, M. Reisslein, and N. Shah, “Hybrid SDN networks: A survey of existing approaches,” IEEE Communications Surveys & Tutorials, vol. 20, no. 4, pp. 3259–3306, 2018.

[33] I. Stellios, P. Kotzanikolaou, M. Psarakis, C. Alcaraz, and J. Lopez, “A survey of iot-enabled cyberattacks: Assessing attack paths to critical infrastructures and services,” IEEE Communications Surveys & Tutorials, vol. 20, no. 4, pp. 3453–3495, 2018.

[34] S. Wang, J. Wu, W. Yang, and L.-h. Guo, “Novel architectures and security solutions of programmable software-defined networking: a comprehensive survey,” Frontiers of Information Technology & Elec-tronic Engineering, vol. 19, no. 12, pp. 1500–1521, 2018.

[35] B. K. Tripathy, D. P. Das, S. K. Jena, and P. Bera, “Risk based security enforcement in software defined network,” Computers & Security, vol. 78, pp. 321–335, 2018.

[36] Y. Wadhawan, A. AlMajali, and C. Neuman, “A comprehensive anal-ysis of smart grid systems against cyber-physical attacks,” Electronics, vol. 7, no. 10, p. 249, 2018.

[37] Z. El Mrabet, N. Kaabouch, H. El Ghazi, and H. El Ghazi, “Cyber-security in smart grid: Survey and challenges,” Computers & Electrical Engineering, vol. 67, pp. 469–482, 2018.

[38] P. B. Pajila and E. G. Julie, “Detection of DDoS attack using SDN in IoT: A survey,” in Intelligent Communication Technologies and Virtual Mobile Networks, pp. 438–452, Springer, 2019.

[39] S. Dong, K. Abbas, and R. Jain, “A survey on distributed denial of service (DDoS) attacks in SDN and cloud computing environments,” IEEE Access, vol. 7, pp. 80813–80828, 2019.

[40] Y. Liu, B. Zhao, P. Zhao, P. Fan, and H. Liu, “A survey: Typical se-curity issues of software-defined networking,” China Communications, vol. 16, no. 7, pp. 13–31, 2019.

[41] Y. Zhao, Y. Li, X. Zhang, G. Geng, W. Zhang, and Y. Sun, “A survey of networking applications applying the software defined networking concept based on machine learning,” IEEE Access, vol. 7, pp. 95385– 95405, 2019.

[42] A. Mubarakali and A. S. Alqahtani, “A survey: Security threats and countermeasures in software defined networking,” in IEEE 2nd International Conference on Information and Computer Technologies (ICICT), pp. 180–185, 2019.

[43] N. Sultana, N. Chilamkurti, W. Peng, and R. Alhadad, “Survey on sdn based network intrusion detection system using machine learning approaches,” Peer -to-Peer Networking and Applications, vol. 12, no. 2, pp. 493–501, 2019.

[44] R. Sahay, W. Meng, and C. D. Jensen, “The application of software defined networking on securing computer networks: A survey,” Journal of Network and Computer Applications, vol. 131, pp. 89–108, 2019.

[45] S. Saraswat, V. Agarwal, H. P. Gupta, R. Mishra, A. Gupta, and T. Dutta, “Challenges and solutions in software defined networking: A survey,” Journal of Network and Computer Applications, vol. 141, pp. 23–58, 2019.

[46] P. Kumar, Y. Lin, G. Bai, A. Paverd, J. S. Dong, and A. Martin, “Smart grid metering networks: A survey on security, privacy and open research issues,” IEEE Communications Surveys & Tutorials, vol. 21, no. 3, pp. 2886– 2927, 2019.

[47] C. Peng, H. Sun, M. Yang, and Y.-L. Wang, “A survey on security communication and control for smart grids under malicious cyber at-tacks,” IEEE Transactions on Systems, Man, and Cybernetics: Systems, vol. 49, no. 8, pp. 1554– 1569, 2019.

[48] T. Han, S. R. U. Jan, Z. Tan, M. Usman, M. A. Jan, R. Khan, and Y. Xu, “A comprehensive survey of security threats and their mitigation techniques for next-generation SDN controllers,” Concurrency and Computation: Practice and Experience, p. e5300, 2019.

[49] S. Marksteiner, H. Vallant, and K. Nahrgang, “Cyber security require-ments engineering for low-voltage distribution smart grid architectures using threat modeling,” Journal of Information Security and Applica-tions, vol. 49, p. 102389, 2019.

[50] K. S. Sahoo, S. K. Panda, S. Sahoo, B. Sahoo, and R. Dash, “Toward secure software-defined networks against distributed denial of service attack,” The Journal of Supercomputing, vol. 75, no. 8, pp. 4829–4874, 2019.

[51] J. Sakhnini, H. Karimipour, A. Dehghantanha, R. M. Parizi, and G. Srivastava, “Security aspects of internet of things aided smart grids: A bibliometric survey,” Internet of things, p. 100111, 2019.

[52] J. McCoy and D. B. Rawat, “Software-defined networking for un-manned aerial vehicular networking and security: A survey,” Electron- ics, vol. 8, no. 12, p. 1468, 2019.

[53] J. A. Herrera and J. E. Camargo, “A survey on machine learning applications for software defined network security,” in International Conference on Applied Cryptography and Network Security, pp. 70–93, Springer, 2019.

[54] V. Lamba, N. Šimková, and B. Rossi, “Recommendations for smart grid security risk management,” Cyber-Physical Systems, vol. 5, no. 2, pp. 92–118, 2019.

[55] T. Alharbi, “Deployment of blockchain technology in software defined networks: A survey,” IEEE Access, vol. 8, pp. 9146–9156, 2020.

[56] J. C. C. Chica, J. C. Imbachi, and J. F. Botero, “Security in sdn: A comprehensive survey,” Journal of Network and Computer Applica- tions, p. 102595, 2020.

[57] S. Lee, J. Kim, S. Woo, C. Yoon, S. Scott- Hayward, V. Yegneswaran, P. Porras, and S. Shin, “A comprehensive security assessment frame-work for software-defined networks,” Computers & Security, vol. 91, p. 101720, 2020.

[58] W. B. Jaballah, M. Conti, and C. Lal, “Security and design requirements for software-defined vanets,” Computer Networks, p. 107099, 2020.

[59] M. Z. Gunduz and R. Das, “Cyber-security on smart grid: Threats and potential solutions,” Computer Networks, vol. 169, p. 107094, 2020.

[60] M. Mateski, C. M. Trevino, C. K. Veitch, J. Michalski, J. M. Harris, S. Maruoka, and J. Frye, “Cyber threat metrics,” Sandia National Laboratories, 2012.

[61] H. Maziku, S. Shetty, and D. M. Nicol, “Security risk assessment for SDN-enabled smart grids,” Computer Communications, vol. 133, pp. 1–11, 2019.

[62] R. Khan, K. McLaughlin, D. Laverty, and S. Sezer, “STRIDE-based threat modeling for cyber-physical systems,” in IEEE PES Innovative Smart Grid Technologies Conference Europe (ISGT-Europe), pp. 1–6, 2017.

[63] H. Attila, P. M. Erdo˝si, and F. Kiss, The Common Vulnerability Scoring System (CVSS) generations – usefulness and deficiencies, pp. 137–153. 2016.

[64] B. Schneier, “Attack trees,” Dr. Dobb’s journal, vol. 24, no. 12, pp. 21–29, 1999.

[65] Z. Fan, Y. Xiao, A. Nayak, and C. Tan, “An improved network security situation assessment approach in software defined networks,” Peer-to-Peer Networking and Applications, vol. 12, no. 2, pp. 295–309, 2019.

[66] M. Latah and L. Toker, “A novel intelligent approach for detecting DoS flooding attacks in software-defined networks,” International Journal of Advances in Intelligent Informatics, vol. 4, no. 1, pp. 11–20, 2018.

[67] H. Wang, L. Xu, and G. Gu, “Floodguard: a dos attack prevention extension in software- defined networks,” in IEEE International Con- ference on Dependable Systems and Networks, pp. 239–250, 2015.

[68] S. Tan, D. De, W.-Z. Song, J. Yang, and S. K. Das, “Survey of security advances in smart grid: A data driven approach,” IEEE Communications Surveys & Tutorials, vol. 19, no. 1, pp. 397–422, 2017.

[69] C. Sulzberger, “Thomas edison’s 1882 pearl street generating station,” IEEE Global History Network, 2010.

[70] S. K. Guttikunda and P. Jawahar, “Atmospheric emissions and pollu-tion from the coal-fired thermal power plants in india,” Atmospheric Environment, vol. 92, pp. 449– 460, 2014.

[71] A. K. Chen, Y. N. Velaga, and P. K. P. Sen, “Future electric power grid and battery storage,” in IEEE Texas Power and Energy Conference (TPEC), pp. 1–6, 2019.

[72] M. R. Hossain, A. M. T. Oo, and A. S. Ali, “Evolution of smart grid and some pertinent issues,” in IEEE Australasian Universities Power Engineering Conference, pp. 1–6, 2010.

[73] N. Komninos, E. Philippou, and A. Pitsillides, “Survey in Smart Grid and smart home security: Issues, challenges and countermeasures,” IEEE Communications Surveys & Tutorials, vol. 16, no. 4, pp. 1933– 1954, 2014.

[74] Z. Fan, R. J. Haines, and P. Kulkarni, “M2M communications for e-health and smart grid: An industry and standard perspective,” IEEE Wireless Communications, vol. 21, no. 1, pp. 62–69, 2014.

[75] M. L. Tuballa and M. L. Abundo, “A review of the development of smart grid technologies,” Renewable and Sustainable Energy Reviews, vol. 59, pp. 710–725, 2016.

[76] A. Yazdani, Y. Hu, A. Johnson, and D. Martinez, “Deployment of smart grid ideas - what needs enhancement?,” IEEE Power and Energy Magazine, vol. 10, no. 2, pp. 108–115, 2012.

[77] E. Fadel, V. Gungor, L. Nassef, N. Akkari, M. A. Malik, S. Almasri, and I. F. Akyildiz, “A survey on wireless sensor networks for smart grid,” Computer Communications, vol. 71, pp. 22 – 33, 2015.

[78] J. Pan, R. Jain, and S. Paul, “A survey of energy efficiency in buildings and microgrids using networking technologies,” IEEE Communications Surveys & Tutorials, vol. 16, no. 3, pp. 1709–1731, 2014.

[79] C. Greer, D. A. Wollman, D. E. Prochaska, P. A. Boynton, J. A. Mazer, C. T. Nguyen, G. J. FitzPatrick, T. L. Nelson, G. H. Koepke, A. R. Hefner Jr, et al., “Nist framework and roadmap for smart grid interoperability standards, release 3.0,” tech. rep., National Institute of Standards and Technology, 2014.

[80] A. B. Birchfield, T. J. Overbye, and K. R. Davis, “Educational applications of large synthetic power grids,” IEEE Transactions on Power Systems, vol. 34, no. 1, pp. 765–772, 2018.

[81] J. Lopez, J. E. Rubio, and C. Alcaraz, “A resilient architecture for the smart grid,” IEEE Transactions on Industrial Informatics, vol. 14, no. 8, pp. 3745–3753, 2018.

[82] A. Abdrabou, “A wireless communication architecture for smart grid distribution networks,” IEEE Systems journal, vol. 10, no. 1, pp. 251–261, 2014.

[83] S. Samtani, S. Yu, H. Zhu, M. Patton, J. Matherly, and H. Chen, “Identifying SCADA systems and their vulnerabilities on the internet of things: A text-mining approach,” IEEE Intelligent Systems, vol. 33, no. 2, pp. 63–73, 2018.

[84] A. Mohammadali, M. S. Haghighi, M. H. Tadayon, and A. Mohammadi-Nodooshan, “A novel identity-based key establishment method for advanced metering infrastructure in smart grid,” IEEE Transactions on Smart Grid, vol. 9, no. 4, pp. 2834–2842, 2016.

[85] F. Elghitani and E. El-Saadany, “Smoothing net load demand varia-tions using residential demand management,” IEEE Transactions on Industrial Informatics, vol. 15, no. 1, pp. 390– 398, 2018.

[86] C. M. Martinez, X. Hu, D. Cao, E. Velenis, B. Gao, and M. Wellers, “Energy management in plug-in hybrid electric vehicles: Recent progress and a connected vehicles perspective,” IEEE Transactions on Vehicular Technology, vol. 66, no. 6, pp. 4534–4549, 2016.

[87] W. Tushar, B. Chai, C. Yuen, S. Huang, D. B. Smith, H. V. Poor, and Z. Yang, “Energy storage sharing in smart grid: A modified auction-based approach,” IEEE Transactions on Smart Grid, vol. 7, no. 3, pp. 1462–1475, 2016.

[88] Z. Li, M. Shahidehpour, F. Aminifar, A. Alabdulwahab, and Y. Al-Turki, “Networked microgrids for enhancing the power system re- silience,” Proceedings of the IEEE, vol. 105, no. 7, pp. 1289–1310, 2017.

[89] C. Vartanian, R. Bauer, L. Casey, C. Loutan, D. Narang, and V. Patel, “Ensuring system reliability: Distributed energy resources and bulk power system considerations,” IEEE Power and Energy Magazine, vol. 16, no. 6, pp. 52–63, 2018.

[90] J. Zhang, B.-C. Seet, T.-T. Lie, and C. H. Foh, “Opportunities for software-defined networking in smart grid,” in IEEE International Conference on Information, Communications & Signal Processing, pp. 1–5, 2013.

[91] N. Kumar and D. P. Vidyarthi, “A green routing algorithm for IoT-enabled software defined wireless sensor network,” IEEE Sensors Journal, vol. 18, no. 22, pp. 9449– 9460, 2018.

[92] M. Parashar, A. Poonia, and K. Satish, “A survey of attacks and their mitigations in software defined networks,” in IEEE International Con-ference on Computing, Communication and Networking Technologies (ICCCNT), pp. 1–8, 2019.

[93] A. Sydney, J. Nutaro, C. Scoglio, D. Gruenbacher, and N. Schulz, “Simulative comparison of multiprotocol label switching and openflow network technologies for transmission operations,” IEEE Transactions on Smart Grid, vol. 4, no. 2, pp. 763–770, 2013.

[94] A. Aydeger, K. Akkaya, and A. S. Uluagac, “SDN-based resilience for smart grid communications,” in IEEE Conference on Network Function Virtualization and Software Defined Network (NFV-SDN), pp. 31–33, 2015.

[95] U. Ghosh, P. Chatterjee, S. Shetty, C. Kamhoua, and L. Njilla, Towards secure software-defined networking integrated cyber- physical systems: Attacks and countermeasures. Boca Raton: CRC Press, 1 ed., 2019.

[96] M. Cokic and I. Seskar, “Software defined network management for dynamic smart grid traffic,” Future Generation Computer Systems, vol. 96, pp. 270–282, 2019.

[97] N. Dorsch, F. Kurtz, F. Girke, and C. Wietfeld, “Enhanced fast failover for software-defined smart grid communication networks,” in IEEE Global Communications Conference (GLOBECOM), pp. 1–6, 2016.

[98] J. Peeples and A. Zare, “Toward resilient smart grid communica-tions using distributed SDN with ML-based anomaly detection,” in Wired/Wireless Internet Communications (WWIC), vol. 10866, p. 83, Springer, 2018.

[99] J. Kim, F. Filali, and Y.-B. Ko, “Trends and potentials of the smart grid infrastructure: From ict sub-system to SDN-enabled smart grid architecture,” Applied Sciences, vol. 5, no. 4, pp. 706–727, 2015.

[100] M. Alishahi, M. H. Y. Moghaddam, and H. R. Pourreza, “Multi-class routing protocol using virtualization and SDN-enabled architecture for smart grid,” Peer-to-Peer Networking and Applications, vol. 11, no. 3, pp. 380–396, 2018.

[101] D. A. Chekired, L. Khoukhi, and H. T. Mouftah, “Decentralized cloud -sdn architecture in smart grid: A dynamic pricing model,” IEEE Transactions on Industrial Informatics, vol. 14, no. 3, pp. 1220–1231, 2017.

[102] T. Ubale and A. K. Jain, “Survey on DDoS attack techniques and solutions in software- defined network,” in Handbook of Computer Networks and Cyber Security, pp. 389–419, Springer, 2020.

[103] N. Dorsch, F. Kurtz, and C. Wietfeld, “On the economic benefits of software-defined networking and network slicing for smart grid communications,” NETNOMICS: Economic Research and Electronic Networking, vol. 19, no. 1-2, pp. 1–30, 2018.

[104] Z. Pan, Q. Xu, C. Chen, and X. Guan, “NS3- matlab co-simulator for cyber-physical systems in smart grid,” in IEEE Chinese Control Conference (CCC), pp. 9831–9836, 2016.

[105] R. A. Niazi and Y. Faheem, “A bayesian game- theoretic intrusion detection system for hypervisor-based software defined networks in smart grids,” IEEE Access, vol. 7, pp. 88656– 88672, 2019.

[106] K. Mets, T. Verschueren, C. Develder, T. L. Vandoorn, and L. Vande-velde, “Integrated simulation of power and communication networks for smart grid applications,” in IEEE International Workshop on Computer Aided Modeling and Design of Communication Links and Networks (CAMAD), pp. 61–65, 2011.

[107] C. Hannon, J. Yan, and D. Jin, “DSSnet: A smart grid modeling platform combining electrical power distribution system simulation and software defined networking emulation,” in ACM SIGSIM conference on principles of advanced discrete simulation, pp. 131–142, 2016.

[108] S. Dalhues, L. Robitzky, U. Häger, N. Dorsch, F. Kurtz, and C. Wi-etfeld, “Analysis of real- time coordination of distributed power flow controllers using software-defined networking communication,” in IEEE Power & Energy Society Innovative Smart Grid Technologies Conference (ISGT), pp. 1–5, 2018.

[109] S. Hernan, S. Lambert, T. Ostwald, and A. Shostack, “Threat modeling-uncover security design flaws using the stride approach,” MSDN Magazine-Louisville, pp. 68–75, 2006.

[110] J. Cleland-Huang, “How well do you know your personae non gratae?,” IEEE software, vol. 31, no. 4, pp. 28–31, 2014.

[111] D. Wichers, “Owasp top-10 2013,” OWASP Foundation, February, 2013.

[112] T. Denning, B. Friedman, and T. Kohno, “The security cards: A security threat brainstorming toolkit,” Univ. of Washington, http://securitycards. cs. washington. edu, 2013.

[113] J. Hizver, “Taxonomic modeling of security threats in software defined networking,” in BlackHat Conference, pp. 1–16, 2015.

[114] J. M. Dover, “A denial of service attack against the open Floodlight SDN controller,” Dover Networks, Tech. Rep., 2013.

[115] J. M. Dover, “A switch table vulnerability in the open floodlight SDN controller,” Relatório técnico, 2014.

[116] K. Benton, L. J. Camp, and C. Small, “OpenFlow vulnerability assessment,” in ACM SIGCOMM workshop on Hot topics in software defined networking, pp. 151–152, 2013.

[117] N. R. Mead, F. Shull, K. Vemuru, and O. Villadsen, “A hybrid threat modeling method,” Carnegie MellonUniversity -Software Engineering Institute-Technical Report- CMU/SEI-2018-TN-002, 2018.

[118] M. Howard and D. LeBlanc, “STB online, and SBO (firme), writing secure code,” 2003.

[119] P. Saitta, B. Larcom, and M. Eddington, “Trike v. 1 methodology doc-ument [draft],” URL: http://dymaxion.org/trike/Trike v1 Methodology Documentdraft. pdf, 2005.

[120] C. Alberts, A. Dorofee, J. Stevens, and C. Woody, “Introduction to the octave approach,” tech. rep., Carnegie-Mellon Univ Pittsburgh Pa Software Engineering, 2003.

[121] R. A. Caralli, J. F. Stevens, L. R. Young, and W. R. Wilson, “Introduc-ing octave allegro: Improving the information security risk assessment process,” tech. rep., Carnegie- Mellon Univ Pittsburgh PA Software Engineering Inst, 2007.

[122] M. Rosenquist, “Prioritizing information security risks with threat agent risk assessment,” Intel Corporation White Paper, 2009.

[123] M. Deng, K. Wuyts, R. Scandariato, B. Preneel, and W. Joosen, “A privacy threat analysis framework: supporting the elicitation and ful- fillment of privacy requirements,” Requirements Engineering, vol. 16, no. 1, pp. 3–32, 2011.

[124] T. UcedaVelez and M. M. Morana, Risk centric threat modeling. Wiley Online Library, 2015.

[125] M. Niemiec, P. Jaglarz, M. Jekot, P. Chołda, and P. Boryło, “Risk assessment approach to secure northbound interface of SDN networks,” in IEEE International Conference on Computing, Networking and Communications (ICNC), pp. 164–169, 2019.

[126] C. Zhou, D. Wei, H. Cao, J. Zhang, J. Liu, and Z. Li, “Risk assessment method for host nodes in software defined networking,” in IEEE International Conference on Information Technology in Medicine and Education (ITME), pp. 738–742, 2019.

[127] T.-H. Nguyen and M. Yoo, “Analysis of link discovery service attacks in SDN controller,” in IEEE International Conference on Information Networking (ICOIN), pp. 259–261, 2017.

[128] C. Yoon, S. Lee, H. Kang, T. Park, S. Shin, V. Yegneswaran, P. Porras, and G. Gu, “Flow wars: Systemizing the attack surface and defenses in software-defined networks,” IEEE/ACM Transactions on Networking, vol. 25, no. 6, pp. 3514–3530, 2017.

[129] B. Potteiger, G. Martins, and X. Koutsoukos, “Software and attack centric integrated threat modeling for quantitative risk assessment,” in Proceedings of the Symposium and Bootcamp on the Science of Security, pp. 99–108, 2016.

[130] A. Jaquith, Security metrics: replacing fear, uncertainty, and doubt. Pearson Education, 2007.

[131] W. Kaydos, Operational performance measurement: increasing total productivity. CRC press, 1998.

[132] L. Woodard, C. K. Veitch, S. R. Thomas, and D. P. Duggan, “Catego-rizing threat: building and using a generic threat matrix.,” tech. rep., Sandia National Laboratories, 2007.

[133] D. Kreutz, F. M. Ramos, P. E. Verissimo, C. E. Rothenberg, S. Azodol-molky, and S. Uhlig, “Software-defined networking: A comprehensive survey,” Proceedings of the IEEE, vol. 103, no. 1, pp. 14–76, 2014.

[134] L. Yao, P. Dong, T. Zheng, H. Zhang, X. Du, and M. Guizani, “Network security analyzing and modeling based on petri net and attack tree for sdn,” in IEEE International Conference on Computing, Networking and Communications (ICNC), pp. 1–5, 2016.

[135] D. Z. Baker, H. Liu, and C. Roberts, “Ensuring flexibility and secu-rity in SDN-based spacecraft communication networks through risk assessment,” in IEEE International Symposium on Technologies for Homeland Security (HST), pp. 1–6, 2019.

[136] L. M. Almutairi and S. Shetty, “Generalized stochastic petri net model based security risk assessment of software defined networks,” in IEEE Military Communications Conference (MILCOM), pp. 545–550, 2017.

[137] M. Hajizadeh, T. V. Phan, and T. Bauschert, “Probability analysis of successful cyber attacks in SDN-based networks,” in 2018 IEEE Conference on Network Function Virtualization and Software Defined Networks (NFV-SDN), pp. 1–6, IEEE, 2018.

[138] R. Deb and S. Roy, “Dynamic vulnerability assessments of software-defined networks,” Innovations in Systems and Software Engineering, vol. 16, no. 1, pp. 45–51, 2020.

[139] T. Eom, J. B. Hong, S. An, J. S. Park, and D. S. Kim, “A systematic approach to threat modeling and security analysis for software defined networking,” IEEE Access, vol. 7, pp. 137432–137445, 2019.

[140] A. A. Soares, D. M. Mattos, Y. Lopes, D. S. Medeiros, N. C. Fernandes, and D. C. Muchaluat-Saade, “An efficient authentication mechanism based on software-defined networks for electric vehicles,” in IEEE 28th International Symposium on Industrial Electronics (ISIE), pp. 2471–2476, 2019.

[141] M. Dhawan, R. Poddar, K. Mahajan, and V. Mann, “SPHINX: detecting security attacks in software-defined networks.,” in Ndss, vol. 15, pp. 8–11, 2015.

[142] S. Gao, Z. Li, B. Xiao, and G. Wei, “Security threats in the data plane of software-defined networks,” IEEE network, vol. 32, no. 4, pp. 108–113, 2018.

[143] N. Jehan and A. M. Haneef, “Scalable ethernet architecture using sdn by suppressing broadcast traffic,” in IEEE International Conference on Advances in Computing and Communications (ICACC), pp. 24–27, 2015.

[144] S. Kumar and S. Tapaswi, “A centralized detection and prevention technique against arp poisoning,” in IEEE International Conference on Cyber Security, Cyber Warfare and Digital Forensic (CyberSec), pp. 259–264, 2012.

[145] A. Nehra, M. Tripathi, and M. Gaur, “FICUR: employing SDN programmability to secure arp,” in IEEE Annual Computing and Communication Workshop and Conference (CCWC), pp. 1–8, 2017.

[146] A. Zaalouk, R. Khondoker, R. Marx, and K. Bayarou, “OrchSec: An orchestrator-based architecture for enhancing network-security using network monitoring and SDN control functions,” in IEEE Network Operations and Management Symposium (NOMS), pp. 1–9, 2014.

[147] T. Xing, Z. Xiong, D. Huang, and D. Medhi, “SDNIPS: Enabling software -defined networking based intrusion prevention system in clouds,” in IEEE International Conference on Network and Service Management (CNSM) and Workshop, pp. 308–311, 2014.

[148] L. Schehlmann, S. Abt, and H. Baier, “Blessing or curse? revisiting security aspects of software-defined networking,” in IEEE International Conference on Network and Service Management (CNSM) and Work-shop, pp. 382–387, 2014.

[149] M. D. Hatagundi and H. Kumaraswamy, “A comprehensive survey on different attacks on SDN and approaches to mitigate,” in IEEE Interna-tional Conference on Computing Methodologies and Communication (ICCMC), pp. 624–627, 2019.

[150] N. Dayal and S. Srivastava, “Analyzing behavior of DDoS attacks to identify DDoS detection features in SDN,” in IEEE International Conference on Communication Systems and Networks (COMSNETS), pp. 274–281, 2017.

[151] S. Shin and G. Gu, “Attacking software- defined networks: A first feasibility study,” in ACM SIGCOMM workshop on Hot topics in software defined networking, pp. 165–166, 2013.

[152] S. Hong, L. Xu, H. Wang, and G. Gu, “Poisoning network visibility in software- defined networks: New attacks and countermeasures.,” in NDSS, vol. 15, pp. 8–11, 2015.

[153] P. Berde, M. Gerola, J. Hart, Y. Higuchi, M. Kobayashi, T. Koide, B. Lantz, B. O’Connor, P. Radoslavov, W. Snow, et al., “ONOS: towards an open, distributed SDN OS,” in Proceedings of the third workshop on Hot topics in software defined networking, pp. 1–6, 2014.

[154] J. Medved, R. Varga, A. Tkacik, and K. Gray, “Opendaylight: Towards a model-driven SDN controller architecture,” in IEEE International Symposium on a World of Wireless, Mobile and Multimedia Networks 2014, pp. 1–6, 2014.

[155] Z. K. Khattak, M. Awais, and A. Iqbal, “Performance evaluation of OpenDaylight SDN controller,” in IEEE international conference on parallel and distributed systems (ICPADS), pp. 671–676, 2014.

[156] F. Tomonori, “Introduction to RYU SDN framework,” Open Network-ing Summit, pp. 1–14, 2013.

[157] B. Jelacic, D. Rosic, I. Lendak, M. Stanojevic, and S. Stoja, “STRIDE to a secure smart grid in a hybrid cloud,” in Computer Security, pp. 77–90, Springer, 2017.

[158] C.-W. Ten, C.-C. Liu, and M. Govindarasu, “Vulnerability assessment of cybersecurity for SCADA systems using attack trees,” in IEEE Power Engineering Society General Meeting, pp. 1–8, 2007.

[159] M. H. Haider, S. B. Saleem, J. Rafaqat, and N. Sabahat, “Threat modeling of wireless attacks on advanced metering infrastructure,” in IEEE International Conference on Mathematics, Actuarial Science, Computer Science and Statistics (MACS), pp. 1–6, 2019.

[160] A. Hahn, “Smart grid architecture risk optimization through vulnera-bility scoring,” in IEEE Conference on Innovative Technologies for an Efficient and Reliable Electricity Supply, pp. 36–41, 2010.

[161] J. Ko, H. Lim, S. Lee, and T. Shon, “AVQS: attack route-based vulnerability quantification scheme for smart grid,” The Scientific World Journal, vol. 2014, 2014.

[162] R. K. Pandey and M. Misra, “Cyber security threats—smart grid infrastructure,” in IEEE National Power Systems Conference (NPSC), pp. 1–6, 2016.

[163] A. Lee and T. Brewer, “Smart grid cyber security strategy and require-ments,” Draft Interagency Report NISTIR, vol. 7628, 2009.

[164] D. Yadav, A. R. Mahajan, and A. Thomas, “An ontology for risk analysis in smart grid,” International Journal of Computer Science and Information Security, vol. 14, no. 12, p. 371, 2016.

[165] C.-W. Ten, C.-C. Liu, and G. Manimaran, “Vulnerability assessment of cybersecurity for SCADA systems,” IEEE Transactions on Power Systems, vol. 23, no. 4, pp. 1836–1846, 2008.

[166] C. Neureiter, G. Eibl, A. Veichtlbauer, and D. Engel, “Towards a framework for engineering smart-grid-specific privacy requirements,” in IEEE Conference of the Industrial Electronics Society IECON, pp. 4803–4808, 2013.

[167] I. S. Razo-Zapata, “A method to assess the economic feasibility of new commercial services in the smart grid,” in IEEE Conference on Service-Oriented Computing and Applications (SOCA), pp. 90–97, 2017.

[168] C. C. Fung, M. A. Roumani, and K. P. Wong, “A proposed study on economic impacts due to cyber attacks in smart grid: A risk based assessment,” in 2013 IEEE Power & Energy Society General Meeting, pp. 1–5, IEEE, 2013.

[169] A. Srivastava, T. Morris, T. Ernster, C. Vellaithurai, S. Pan, and U. Adhikari, “Modeling cyber-physical vulnerability of the smart grid with incomplete information,” IEEE Transactions on Smart Grid, vol. 4, no. 1, pp. 235–244, 2013.

[170] H. Bao, R. Lu, B. Li, and R. Deng, “BLITHE: Behavior rule-based insider threat detection for smart grid,” IEEE Internet of Things Journal, vol. 3, no. 2, pp. 190–205, 2015.

[171] Y.-T. Chen, “Modeling information security threats for smart grid applications by using software engineering and risk management,” in IEEE International Conference on Smart Energy Grid Engineering (SEGE), pp. 128– 132, 2018.

[172] J. Dobaj, “INSpiRA: integrating security into risk assessment: doctoral project paper,” in International conference on software engineering for adaptive and self-managing systems, pp. 183–187, 2018.

[173] A. Hematian, W. Yu, D. Griffith, and N. Golmie, “Performance assessment of smart meter traffic over lte network using sdr testbed,” in IEEE International Conference on Computing, Networking and Communications (ICNC), pp. 408–412, 2019.

[174] ˙I. Özçelik and R. R. Brooks, “Cusum-entropy: an efficient method for DDoS attack detection,” in IEEE International Istanbul Smart Grid Congress and Fair (ICSG), pp. 1–5, 2016.

[175] H. T. Mouftah and M. Erol-Kantarci, Smart Grid: Networking, Data Management, and Business Models. Boca Raton: CRC Press, 1 ed., 2017.

[176] M. H. Rehmani, F. Akhtar, A. Davy, and B. Jennings, “Achieving resilience in sdn-based smart grid: A multi-armed bandit approach,” in IEEE Conference on Network Softwarization and Workshops (NetSoft), pp. 366–371, 2018.

[177] S. Wang, J. Wu, S. Zhang, and K. Wang, “SSDS: a smart software-defined security mechanism for vehicle-to-grid using transfer learning,” IEEE Access, vol. 6, pp. 63967– 63975, 2018.

[178] D. Ibdah, M. Kanani, N. Lachtar, N. Allan, and B. Al-Duwairi, “On the security of SDN- enabled smartgrid systems,” in IEEE International Conference on Electrical and Computing Technologies and Applica-tions (ICECTA), pp. 1–5, 2017.

[179] N. Dorsch, F. Kurtz, H. Georg, C. Hägerling, and C. Wietfeld, “Software -defined networking for smart grid communications: Appli-cations, challenges and advantages,” in IEEE International conference on smart grid communications (SmartGridComm), pp. 422– 427, 2014.

[180] F. Kurtz, N. Dorsch, C. Bektas, and C. Wietfeld, “Synchronized measurement concept for failure handling in software-defined smart grid communications,” in IEEE International Conference on Smart Grid Communications (SmartGridComm), pp. 1–6, 2017.

[181] S. Rinaldi, F. Bonafini, P. Ferrari, A. Flammini, E. Sisinni, D. Di Cara, N. Panzavecchia, G. Tinè, A. Cataliotti, V. Cosentino, et al., “Char- acterization of IP-based communication for smart grid using software -defined networking,” IEEE Transactions on Instrumentation and Mea-surement, vol. 67, no. 10, pp. 2410–2419, 2018.

[182] S. Zhang, Q. Li, J. Wu, J. Li, and G. Li, “A security mechanism for software-defined networking based communications in vehicle- to-grid,” in IEEE Smart Energy Grid Engineering (SEGE), pp. 386–391, 2016.

[183] A. Aydeger, K. Akkaya, M. H. Cintuglu, A. S. Uluagac, and O. Mo-hammed, “Software defined networking for resilient communications in smart grid active distribution networks,” in IEEE International Conference on Communications (ICC), pp. 1– 6, 2016.

[184] N. Dorsch, F. Kurtz, S. Dalhues, L. Robitzky, U. Häger, and C. Wi-etfeld, “Intertwined: Software-defined communication networks for multi-agent system-based smart grid control,” in IEEE international conference on smart grid communications (SmartGridComm), pp. 254– 259, 2016.

[185] A. Irfan, N. Taj, and S. A. Mahmud, “A novel secure SDN/LTE based architecture for smart grid security,” in IEEE International Conference on Computer and Information Technology; Ubiquitous Computing and Communications; Dependable, Autonomic and Secure Computing; Pervasive Intelligence and Computing, pp. 762–769, 2015.

[186] F. Alharbi and Z. Fei, “Improving the quality of service for critical flows in smart grid using software-defined networking,” in IEEE International Conference on Smart Grid Communications (SmartGrid-Comm), pp. 237–242, 2016.

[187] R. Chaudhary, G. S. Aujla, S. Garg, N. Kumar, and J. J. Rodrigues, “SDN-enabled multi- attribute-based secure communication for smart grid in iiot environment,” IEEE Transactions on Industrial Informatics, vol. 14, no. 6, pp. 2629–2640, 2018.

[188] U. Ghosh, P. Chatterjee, and S. Shetty, “A security framework for sdn-enabled smart power grids,” in IEEE International Conference on Distributed Computing Systems Workshops (ICDCSW), pp. 113–118, 2017.

[189] G. Lin, M. Dong, K. Ota, J. Li, W. Yang, and J. Wu, “Security function virtualization based moving target defense of SDN-enabled smart grid,” in IEEE International Conference on Communications (ICC), pp. 1–6, 2019.

[190] S. Jitnukulsiri and C. Aswakul, “Validation of SDN emulator based on Mininet and ONOS controller for iec 61850 packet delay measure- ment,” in IEEE International Conference on Consumer Electronics-Asia (ICCE-Asia), pp. 113–117, 2019.

[191] X. Zhang, K. Wei, L. Guo, W. Hou, and J. Wu, “SDN-based resilience solutions for smart grids,” in IEEE International Conference on Soft-ware Networking (ICSN), pp. 1–5, 2016.

[192] Y. Sim and H. Y. Lee, “Denial-of-service attack using host location hijacking in software-defined network,” in IEEE European Symposium on Security and Privacy (Euro S&P), pp. 1–2, 2016.

[193] A. M. AbdelSalam, A. B. El-Sisi, and V. Reddy, “Mitigating arp spoofing attacks in software-defined networks,” in Proceedings of the International conference on Computer Theory and Applications (ICCTA), 2016.

[194] D. Smyth, D. O’Shea, V. Cionca, and S. McSweeney, “Attacking distributed software- defined networks by leveraging network state consistency,” Computer Networks, vol. 156, pp. 9–19, 2019.

[195] D. Saif, A. Cormier, S. Banik, and A. Matrawy, “A review of recently emerging denial of service threats and defences in the transport layer,” in IEEE Canadian Conference on Electrical & Computer Engineering (CCECE), pp. 1–5, 2018.

[196] S. Singh, R. Khan, and A. Agrawal, “Prevention mechanism for infras-tructure based denial-of-service attack over software defined network,” in IEEE International Conference on Computing, Communication & Automation, pp. 348–353, 2015.

[197] R. Durner, C. Lorenz, M. Wiedemann, and W. Kellerer, “Detecting and mitigating denial of service attacks against the data plane in software defined networks,” in IEEE Conference on Network Softwarization (NetSoft), pp. 1–6, 2017.

[198] Z. Li, W. Xing, and D. Xu, “Detecting saturation attacks in software-defined networks,” in IEEE International Conference on Intelligence and Security Informatics (ISI), pp. 163–168, 2018.

[199] Y. Liu, M. Dong, K. Ota, J. Li, and J. Wu, “Deep reinforcement learning based smart mitigation of DDoS flooding in software- defined networks,” in IEEE International Workshop on Computer Aided Mod-eling and Design of Communication Links and Networks (CAMAD), pp. 1–6, 2018.

[200] L. Barki, A. Shidling, N. Meti, D. Narayan, and M. M. Mulla, “Detection of distributed denial of service attacks in software defined networks,” in IEEE International Conference on Advances in Comput-ing, Communications and Informatics (ICACCI), pp. 2576–2581, 2016.

[201] A. Aydeger, N. Saputro, K. Akkaya, and M. Rahman, “Mitigating crossfire attacks using SDN-based moving target defense,” in IEEE Conference on Local Computer Networks (LCN), pp. 627–630, 2016.

[202] K. Kalkan, G. Gür, and F. Alagöz, “SDNScore: A statistical defense mechanism against DDoS attacks in SDN environment,” in IEEE Symposium on Computers and Communications (ISCC), pp. 669–675, 2017.

[203] R. U. Rasool, U. Ashraf, K. Ahmed, H. Wang, W. Rafique, and Z. Anwar, “Cyberpulse: a machine learning based link flooding attack mitigation system for software defined networks,” IEEE Access, vol. 7, pp. 34885– 34899, 2019.

[204] R. Mohammadi, M. Conti, C. Lal, and S. C. Kulhari, “SYN-Guard: an effective counter for syn flooding attack in software-defined network-ing,” International Journal of Communication Systems, vol. 32, no. 17, p. e4061, 2019.

[205] R. Mohammadi, R. Javidan, and M. Conti, “Slicots: an sdn-based lightweight countermeasure for tcp syn flooding attacks,” IEEE Trans-actions on Network and Service Management, vol. 14, no. 2, pp. 487–497, 2017.

[206] S. Fichera, L. Galluccio, S. C. Grancagnolo, G. Morabito, and S. Palazzo, “OPERETTA: an openflow-based remedy to mitigate tcp synflood attacks against web servers,” Computer Networks, vol. 92, pp. 89–100, 2015.

[207] P. Kumar, M. Tripathi, A. Nehra, M. Conti, and C. Lal, “SAFETY: Early detection and mitigation of tcp syn flood utilizing entropy in SDN,” IEEE Transactions on Network and Service Management, vol. 15, no. 4, pp. 1545– 1559, 2018.

[208] G. Tarnaras, F. Athanasiou, and S. Denazis, “Efficient topology dis-covery algorithm for software-defined networks,” IET Networks, vol. 6, no. 6, pp. 157–161, 2017.

[209] D. M. F. Mattos and O. C. M. B. Duarte, “AuthFlow: authentication and access control mechanism for software defined networking,” annals of telecommunications, vol. 71, no. 11- 12, pp. 607–615, 2016.

[210] R. Nagarathna and S. M. Shalinie, “SLAMHHA: a supervised learning approach to mitigate host location hijacking attack on SDN controllers,” in IEEE International Conference on Signal Processing, Communica- tion and Networking (ICSCN), pp. 1–7, 2017.

[211] D. C. Plummer et al., “Ethernet address resolution protocol: Or converting network protocol addresses to 48. bit ethernet address for transmission on ethernet hardware.,” RFC, vol. 826, pp. 1–10, 1982.

[212] G. Yao, J. Bi, and P. Xiao, “Source address validation solution with openflow/nox architecture,” in IEEE International Conference on Network Protocols, pp. 7–12, 2011.

[213] T. Wang and H. Chen, “SGuard: A lightweight SDN safe-guard architecture for DoS attacks,” China Communications, vol. 14, no. 6, pp. 113–125, 2017.

[214] J. Kwon, D. Seo, M. Kwon, H. Lee, A. Perrig, and H. Kim, “An in-crementally deployable anti-spoofing mechanism for software-defined networks,” Computer Communications, vol. 64, pp. 1–20, 2015.

[215] K. S. Sahoo, D. Puthal, M. Tiwary, J. J. Rodrigues, B. Sahoo, and R. Dash, “An early detection of low rate DDoS attack to SDN based data center networks using information distance metrics,” Future Generation Computer Systems, vol. 89, pp. 685–697, 2018.

[216] S. Luo, J. Wu, J. Li, and B. Pei, “A defense mechanism for distributed denial of service attack in software-defined networks,” in IEEE Inter-national Conference on Frontier of Computer Science and Technology, pp. 325– 329, 2015.

[217] M. Pióro, Á. Szentesi, J. Harmatos, A. Jüttner, P. Gajowniczek, and S. Kozdrowski, “On open shortest path first related network optimisa-tion problems,” Performance evaluation, vol. 48, no. 1-4, pp. 201–223, 2002.

[218] J. R. Yee, “On the internet routing protocol enhanced interior gateway routing protocol: is it optimal?,” International Transactions in Opera-tional Research, vol. 13, no. 3, pp. 177– 194, 2006.

[219] B. R. Smith and J. Garcia-Luna-Aceves, “Securing the border gateway routing protocol,” in IEEE Global Telecommunications Conference, pp. 81–85, 1996.

[220] M. Moshref, A. Bhargava, A. Gupta, M. Yu, and R. Govindan, “Flow-level state transition as a new switch primitive for SDN,” in Proceedings of the third workshop on Hot topics in software defined networking, pp. 61– 66, 2014.

[221] A. Shaghaghi, M. A. Kaafar, and S. Jha, “Wedgetail: an intrusion prevention system for the data plane of software defined networks,” in ACM Asia Conference on Computer and Communications Security, pp. 849–861, 2017.

[222] M. Zhang, J. Bi, J. Bai, and G. Li, “Floodshield: securing the sdn infrastructure against denial- of-service attacks,” in IEEE International Conference On Trust, Security And Privacy In Computing And Com-munications, pp. 687– 698, 2018.

[223] L. Dridi and M. F. Zhani, “SDN-guard: DoS attacks mitigation in SDN networks,” in IEEE International Conference on Cloud Networking (Cloudnet), pp. 212–217, 2016.

[224] A. F. M. Piedrahita, S. Rueda, D. M. Mattos, and O. C. M. Duarte, “FlowFence: a denial of service defense system for software defined networking,” in IEEE Global Information Infrastructure and Network-ing Symposium (GIIS), pp. 1–6, 2015.

[225] S. Shin, V. Yegneswaran, P. Porras, and G. Gu, “Avant-guard: scalable and vigilant switch flow management in software-defined networks,” in ACM SIGSAC conference on Computer & communications security, pp. 413–424, 2013.

[226] P. Van Trung, T. T. Huong, D. Van Tuyen, D. M. Duc, N. H. Thanh, and A. Marshall, “A multi-criteria-based DDoS-attack prevention solution using software defined networking,” in IEEE International Conference on Advanced Technologies for Communications (ATC), pp. 308–313, 2015.

[227] S. Zhu, J. Bi, C. Sun, C. Wu, and H. Hu, “Sdpa: enhancing stateful forwarding for software- defined networking,” in IEEE International Conference on Network Protocols (ICNP), pp. 323–333, 2015.

[228] G. Shang, P. Zhe, X. Bin, H. Aiqun, and R. Kui, “FloodDefender: Protecting data and control plane resources under SDN-aimed DoS attacks,” in IEEE Conference on Computer Communications (INFO-COM), pp. 1–9, 2017.

[229] E. Al-Shaer and S. Al-Haj, “FlowChecker: configuration analysis and verification of federated openflow infrastructures,” in Proceedings of the 3rd ACM workshop on Assurable and usable security configuration, pp. 37–44, 2010.

[230] A. Khurshid, X. Zou, W. Zhou, M. Caesar, and P. B. Godfrey, “Veriflow: verifying network- wide invariants in real time,” in Presented as part of the 10th {USENIX} Symposium on Networked Systems Design and Implementation ({NSDI} 13), pp. 15–27, 2013.

[231] R. Sherwood, G. Gibb, K.-K. Yap, G. Appenzeller, M. Casado, N. McKeown, and G. Parulkar, “Flowvisor: a network virtualization layer,” OpenFlow Switch Consortium, Tech. Rep, vol. 1, p. 132, 2009.

[232] K. Phemius, M. Bouet, and J. Leguay, “Disco: distributed multi-domain sdn controllers,” in IEEE Network Operations and Management Symposium (NOMS), pp. 1–4, 2014.

[233] T. Ball, N. Bjørner, A. Gember, S. Itzhaky, A. Karbyshev, M. Sagiv, M. Schapira, and A. Valadarsky, “VeriCon: towards verifying controller programs in software-defined networks,” in Proceedings of the 35th ACM SIGPLAN Conference on Programming Language Design and Implementation, pp. 282–293, 2014.

[234] A. Nakao and P. Du, “Toward in-network deep machine learning for identifying mobile applications and enabling application specific network slicing,” IEICE Transactions on Communications, 2018.

[235] P. Wang, S.-C. Lin, and M. Luo, “A framework for QoS-aware traffic classification using semi- supervised machine learning in SDNs,” in IEEE International Conference on Services Computing (SCC), pp. 760–765, 2016.

[236] A. B. Letaifa, “Adaptive QoE monitoring architecture in SDN net-works: Video streaming services case,” in IEEE International Wire-less Communications and Mobile Computing Conference (IWCMC), pp. 1383– 1388, 2017.

[237] L. Yanjun, L. Xiaobo, and Y. Osamu, “Traffic engineering framework with machine learning based meta-layer in software-defined networks,” in IEEE International Conference on Network Infrastructure and Digital Content, pp. 121–125, 2014.

[238] Y. He, F. R. Yu, N. Zhao, V. C. Leung, and H. Yin, “Software-defined networks with mobile edge computing and caching for smart cities: A big data deep reinforcement learning approach,” IEEE Communications Magazine, vol. 55, no. 12, pp. 31–37, 2017.

[239] T. V. Phan, N. K. Bao, and M. Park, “A novel hybrid flow-based handler with DDoS attacks in software-defined networking,” in IEEE Confer-ences on Ubiquitous Intelligence & Computing, Advanced and Trusted Computing, Scalable Computing and Communications, Cloud and Big Data Computing, Internet of People, and Smart World Congress (UIC/ATC/ScalCom/CBDCom/IoP/SmartWor ld), pp. 350–357, 2016.

[240] T. V. Phan, T. Van Toan, D. Van Tuyen, T. T. Huong, and N. H. Thanh, “OpenFlowSIA: An optimized protection scheme for software- defined networks from flooding attacks,” in IEEE Sixth International Conference on Communications and Electronics (ICCE), pp. 13–18, 2016.

[241] P. Wang, K.-M. Chao, H.-C. Lin, W.-H. Lin, and C.-C. Lo, “An efficient flow control approach for SDN-based network threat detection and migration using support vector machine,” in IEEE International Conference on e-Business Engineering (ICEBE), pp. 56–63, 2016.

[242] D. Hu, P. Hong, and Y. Chen, “FADM: DDoS flooding attack detection and mitigation system in software-defined networking,” in IEEE Global Communications Conference, pp. 1–7, 2017.

[243] N. Bouacida, A. Alghadhban, S. Alalmaei, H. Mohammed, and B. Shi -hada, “Failure mitigation in software defined networking employing load type prediction,” in IEEE International Conference on Communi-cations (ICC), pp. 1–7, 2017.

[244] B. Leng, L. Huang, C. Qiao, and H. Xu, “A decision-tree-based on-line flow table compressing method in software defined networks,” in IEEE/ACM 24th International Symposium on Quality of Service (IWQoS), pp. 1–2, 2016.

[245] S. Nanda, F. Zafari, C. DeCusatis, E. Wedaa, and B. Yang, “Predicting network attack patterns in SDN using machine learning approach,” in IEEE Conference on Network Function Virtualization and Software Defined Networks (NFV-SDN), pp. 167–172, 2016.

[246] F. Tang, L. Li, L. Barolli, and C. Tang, “An efficient sampling and classification approach for flow detection in sdn-based big data cen- ters,” in IEEE 31st International Conference on Advanced Information Networking and Applications (AINA), pp. 1106–1115, 2017.

[247] Z. Chen, F. Jiang, Y. Cheng, X. Gu, W. Liu, and J. Peng, “XGBoost classifier for ddos attack detection and analysis in SDN-based cloud,” in IEEE International Conference on Big Data and Smart Computing (BigComp), pp. 251–256, 2018.

[248] E. Ivannikova, M. Zolotukhin, and T. Hämäläinen, “Probabilistic transition-based approach for detecting application-layer ddos attacks in encrypted software-defined networks,” in International Conference on Network and System Security, pp. 531–543, Springer, 2017.

[249] M. E. Ahmed, H. Kim, and M. Park, “Mitigating DNS query-based DDoS attacks with machine learning on software-defined networking,” in MILCOM 2017-2017 IEEE Military Communications Conference (MILCOM), pp. 11–16, IEEE, 2017.

[250] R. Braga, E. Mota, and A. Passito, “Lightweight DDoS flooding attack detection using NOX/OpenFlow,” in IEEE Local Computer Network Conference, pp. 408–415, 2010.

[251] T. M. Nam, P. H. Phong, T. D. Khoa, T. T. Huong, P. N. Nam, N. H. Thanh, L. X. Thang, P. A. Tuan, V. D. Loi, et al., “Self-organizing map-based approaches in DDoS flooding detection using SDN,” in IEEE International Conference on Information Networking (ICOIN), pp. 249–254, 2018.

[252] P. MohanaPriya and S. M. Shalinie, “Restricted Boltzmann machine based detection system for DDoS attack in software defined networks,” in IEEE Fourth International Conference on Signal Processing, Com-munication and Networking (ICSCN), pp. 1–6, 2017.

[253] Y. Han, B. I. Rubinstein, T. Abraham, T. Alpcan, O. De Vel, S. Erfani, D. Hubczenko, C. Leckie, and P. Montague, “Reinforcement learning for autonomous defence in software- defined networking,” in Interna-tional Conference on Decision and Game Theory for Security, pp. 145–165, Springer, 2018.

[254] S. Salman, C. Streiffer, H. Chen, T. Benson, and A. Kadav, “DeepConf: Automating data center network topologies management with machine learning,” in Proceedings of the 2018 Workshop on Network Meets AI & ML, pp. 8– 14, 2018.

[255] S. Kim, J. Son, A. Talukder, and C. S. Hong, “Congestion prevention mechanism based on Q-leaning for efficient routing in SDN,” in IEEE International Conference on Information Networking (ICOIN), pp. 124–128, 2016.

[256] X. Guo, H. Lin, Z. Li, and M. Peng, “Deep reinforcement learning based QoS-aware secure routing for SDN-IoT,” IEEE Internet of Things Journal, 2019.

[257] R. Kokila, S. T. Selvi, and K. Govindarajan, “DDoS detection and anal-ysis in sdn-based environment using support vector machine classifier,” in IEEE International Conference on Advanced Computing (ICoAC), pp. 205– 210, 2014.

[258] T. A. Tang, L. Mhamdi, D. McLernon, S. A. R. Zaidi, and M. Ghogho, “Deep learning approach for network intrusion detection in software defined networking,” in IEEE International Conference on Wireless Networks and Mobile Communications (WINCOM), pp. 258–263, 2016.

[259] C. Li, Y. Wu, X. Yuan, Z. Sun, W. Wang, X. Li, and L. Gong, “Detec-tion and defense of DDoS attack based on deep learning in openflow-based SDN,” International Journal of Communication Systems, vol. 31, no. 5, p. e3497, 2018.

[260] Q. Niyaz, W. Sun, and A. Y. Javaid, “A deep learning based DDoS de-tection system in software-defined networking (SDN),” arXiv preprint arXiv:1611.07400, 2016.

[261] X.-F. Chen and S.-Z. Yu, “Cipa: A collaborative intrusion prevention architecture for programmable network and sdn,” Computers & Secu-rity, vol. 58, pp. 1–19, 2016.

[262] N. Dayal and S. Srivastava, “An RBF-PSO based approach for early detection of DDoS attacks in SDN,” in IEEE International Conference on Communication Systems & Networks (COMSNETS), pp. 17–24, 2018.

[263] A. Abubakar and B. Pranggono, “Machine learning based intrusion detection system for software defined networks,” in IEEE International Conference on Emerging Security Technologies (EST), pp. 138–143, 2017.

[264] A. Schmidt, “The estonian cyberattacks,” A fierce domain: Conflict in cyberspace, 1986 to 2012, pp. 174–193, 2013.

[265] “Estonia DDoS.” https://www.nytimes.com/2007/05/29/ technology/29estonia.html, 2007.

[266] N. Hamid, “The british hacker who became the islamic state’s chief terror cyber coach: A profile of junaid husain,” Combating Terrorism Center, vol. 11, no. 4, 2018.

[267] J. Pagliery, “Isis is attacking the u.s. energy grid (and failing).” www.money.cnn.com, 2015.

[268] “Ukraine power grid DDoS.” https://www.bbc.com/news/technology- 38573074, 2015.

[269] M. Lee, M. J. Assante, and T. Conway, “TLP: White-analysis of the cyber attack on the ukrainian power grid-defense use case,” in Electricity Information Sharing and Analysis Center (E-ISAC), pp. 1–29, 2016.

[270] Z. K., “Inside the cunning, unprecedented hack of ukraine’s power grid.” www.wired.com/2016/03/inside-cunning- unprecedented-hack-ukraines-powergrid, 2016.

[271] D. Park, J. Summers, and M. Walstrom, “Cyberattack on critical infrastructure: Russia and the ukrainian power grid attacks,” Henry M Jackson School of International Studies, vol. 11, 2017.

[272] “Liberia DDoS.” https://www.bbc.com/news/technology- 37859678, 2016.

[273] J. Condliffe, “Ukraines power grid gets hacked again a worrying sign for infrastructure attacks,” MIT Technol. Rev., 2016.

[274] “DoS attack on saudia arbaia petro-chemical industry.” https://www.nytimes.com/2018/03/15/technol ogy/saudi-arabia-hacks-cyberattacks.html, 2017.

[275] “DoS attack on usa power grid.” https://www.cnbc.com/2019/05/02/ddos- attack-caused- interruptions-in-power-system- operations-doe.html, 2019.

[276] M. Samir, M. Azab, M. R. Rizk, and N. Sadek, “PYGRID: a soft-ware development and assessment framework for grid-aware software defined networking,” International Journal of Network Management, vol. 28, no. 5, p. e2033, 2018.

[277] H. Maziku and S. Shetty, “Software defined networking enabled resilience for IEC 61850- based substation communication systems,” in IEEE International Conference on Computing, Networking and Communications (ICNC), pp. 690–694, 2017.

[278] U. Ghosh, X. Dong, R. Tan, Z. Kalbarczyk, D. K. Yau, and R. K. Iyer, “A simulation study on smart grid resilience under software-defined networking controller failures,” in ACM International Workshop on Cyber-Physical System Security, pp. 52–58, 2016.

[279] A. Starke, J. McNair, R. Trevizan, A. Bretas, J. Peeples, and A. Zare, “Toward resilient smart grid communications using distributed SDN with ML-based anomaly detection,” in International Conference on Wired/Wireless Internet Communication, pp. 83–94, Springer, 2018.

[280] Z. Lv, L. Wang, Z. Guan, J. Wu, X. Du, H. Zhao, and M. Guizani, “An optimizing and differentially private clustering algorithm for mixed data in SDN-based smart grid,” IEEE Access, vol. 7, pp. 45773–45782, 2019.

[281] L. Reuter, O. Jung, and J. Magin, “Neural network based anomaly detection for SCADA systems,” in IEEE Conference on Innovation in Clouds, Internet and Networks and Workshops (ICIN), pp. 194–201, 2020.

[282] S. Revathi and A. Malathi, “A detailed analysis on NSL-KDD dataset using various machine learning techniques for intrusion detection,” International Journal of Engineering Research & Technology (IJERT), vol. 2, no. 12, pp. 1848–1853, 2013.

[283] J.-H. Lee, J.-H. Lee, S.-G. Sohn, J.-H. Ryu, and T.-M. Chung, “Effec-tive value of decision tree with KDD 99 intrusion detection datasets for intrusion detection system,” in IEEE International Conference on Advanced Communication Technology, vol. 2, pp. 1170– 1175, 2008.

[284] S. Soheily-Khah, P.-F. Marteau, and N. Béchet, “Intrusion detection in network systems through hybrid supervised and unsupervised ma-chine learning process: A case study on the iscx dataset,” in IEEE International Conference on Data Intelligence and Security (ICDIS), pp. 219–226, 2018.

[285] J. Cai, J. Luo, S. Wang, and S. Yang, “Feature selection in machine learning: A new perspective,” Neurocomputing, vol. 300, pp. 70–79, 2018.

[286] S. Azad, F. Sabrina, and S. Wasimi, “Transformation of smart grid using machine learning,” in IEEE Australasian Universities Power Engineering Conference (AUPEC), pp. 1–6, 2019.

[287] T. Huang, F. R. Yu, C. Zhang, J. Liu, J. Zhang, and Y. Liu, “A survey on large-scale software defined networking (SDN) testbeds: Approaches and challenges,” IEEE Communications Surveys & Tutorials, vol. 19, no. 2, pp. 891–917, 2016.

[288] S. Tan, W.-Z. Song, S. Yothment, J. Yang, and L. Tong, “Scoreplus: A software-hardware hybrid and federated experiment environment for smart grid,” ACM Transactions on Embedded Computing Systems (TECS), vol. 16, no. 1, pp. 1–25, 2016.

[289] D. Artz and Y. Gil, “A survey of trust in computer science and the semantic web,” Journal of Web Semantics, vol. 5, no. 2, pp. 58– 71, 2007.

[290] Z. Yao and Z. Yan, “A trust management framework for software-defined network applications,” Concurrency and Computation: Practice and Experience, p. e4518, 2018.

[291] A. L. Aliyu, P. Bull, and A. Abdallah, “A trust management frame-work for network applications within an SDN environment,” in IEEE International Conference on Advanced Information Networking and Applications Workshops (WAINA), pp. 93–98, 2017.

[292] D. Kreutz, F. M. Ramos, and P. Verissimo, “Towards secure and dependable software- defined networks,” in ACM SIGCOMM workshop on Hot topics in software defined networking, pp. 55–60, 2013.

[293] D. Desfontaines and B. Pejo, “Sok: Differential privacies,” Proceedings on Privacy Enhancing Technologies, vol. 2020, no. 2, pp. 288–313, 2020.

[294] C. Dwork, “Differential privacy: A survey of results,” in International conference on theory and applications of models of computation, pp. 1–19, Springer, 2008.

[295] M. Bräuning and R. Khondoker, “Analysis of SDN applications for smart grid infrastructures,” in SDN and NFV Security, pp. 99–110, Springer, 2018.

[296] M. Amjad, L. Musavian, and M. H. Rehmani, “Effective capacity in wireless networks: A comprehensive survey,” IEEE Communications Surveys & Tutorials, vol. 21, no. 4, pp. 3007–3038, 2019.

How to cite this paper

Faheem Ahmad Qureshi "Threat Assessment and Denial of Service Attacks in Software Defined Network based Smart Grid: A Survey" Iconic Research And Engineering Journals Volume 10 Issue 4 2026 Page 62-137 https://doi.org/10.64388/IREV10I4-1723648
Faheem Ahmad Qureshi "Threat Assessment and Denial of Service Attacks in Software Defined Network based Smart Grid: A Survey" Iconic Research And Engineering Journals, vol. 10, no. 4, Oct. 2026, doi: https://doi.org/10.64388/IREV10I4-1723648
Faheem Ahmad Qureshi (2026). Threat Assessment and Denial of Service Attacks in Software Defined Network based Smart Grid: A Survey. Iconic Research And Engineering Journals, 10(4). doi: https://doi.org/10.64388/IREV10I4-1723648
Faheem Ahmad Qureshi "Threat Assessment and Denial of Service Attacks in Software Defined Network based Smart Grid: A Survey" Iconic Research And Engineering Journals, vol. 10, no. 4, Oct. 2026. Crossref, https://doi.org/10.64388/IREV10I4-1723648
@article{1723648,
      author = {Faheem Ahmad Qureshi},
      title = {Threat Assessment and Denial of Service Attacks in Software Defined Network based Smart Grid: A Survey},
      journal = {Iconic Research And Engineering Journals},
      year = {2026},
      volume = {10},
      number = {4},
      pages = {62-137},
      issn = {2456-8880},
      url = {https://www.irejournals.com/formatedpaper/1723648.pdf},
      abstract = {Smart Grid (SG) is the super critical infrastruc-ture (CI) that fulfils the energy demands of the public, state departments, and also energises and regulates the operations of other CIs. This significant role of SG demands an efficient and reliable underlying infrastructure; power system, communication layer, and SG applications; to enable a secure and operational SG. Although SG has revolutionised the traditional electric grid but its communication layer still lacks efficient management, network automation, programmability, scalability, monitoring, and control. Software defined networks (SDN), offering a greater degree of flexibility, control, and programmability, has a great scope to complement the communication domain of SG; mean-while also introduces certain vulnerabilities. The emerging SDN based SG (SDN-SG) paradigm is in infancy stages in terms of threat assessment and defence mechanisms. Like, one of the severest cyber attacks, denial of service (DoS) attacks, which overwhelms the network resources to curtail the availability of the network for legit users, are still not well-addressed for SDN-SG in the literature. This paper comprehensively surveys the vulnerabilities and associated assessment models of SDN-SG. First, the existing threat assessment models and their adaptability for SDN-SG is evaluated. Afterwards, DoS attacks and associated mitigation techniques for SDN and their scope for SDN-SG are comprehensively studied. Various DoS attacks are identified which are still unaddressed in SDN-SG. In the end, machine learning (ML) techniques are reviewed for securing SDN-SG against a wide spectrum of DoS attacks. Furthermore, we also present challenges, issues, and future research directions related to threat assessment, DoS attacks, and ML based mitigation techniques for SDN-SG.},
      keywords = {Software defined network (SDN), smart grid (SG), Cyber Security, Threat Assessment, Denial of Service (DoS) Attacks.},
      month = {October},
      doi = {https://doi.org/10.64388/IREV10I4-1723648}
  }