Toward software defined dynamic defense as a service for 5g-enabled vehicular networks

Recently, the integrated architecture of 5G-enabled software defined vehicular networks (5G-SDVN) is becoming a new trend of the next generation vehicular networks. 5G-SDVN architecture can provide various improvements for traditional vehicular networks. The most important high throughput and low latency can be guaranteed by 5G. Centralized vehicle control and vehicular network programmability are provided by software defined networks (SDN). Vehicular network security is always critical because it is directly related to personal safety and traffic efficiency. However, security issues of 5G-SDVN are complicated and challenging due to the rapid mobility of vehicles and complex network topology. Also, the scalability and programmability of SDN can enlarge the attack surface, leading to more defects and vulnerabilities. Hence, a dynamic security defense service is urgently needed. In this paper, a software defined dynamic security defense (SD-DSD) scheme is proposed to provide security-As-service for 5G-SDVN. The proposed scheme firstly conducts a security assessment to evaluate the security level of current system. Based on the security assessment result, the proposed scheme then dynamically generates and deploys security strategies in an software defined way. In consequence, the proposed scheme can improve the security level of a given 5G-SDVN system. The evaluation demonstrated that the proposed scheme can improve the system security level effectively and efficiently with a high network performance.