IV. Future trend
The SDN network has been introduced a series of security checks, such as existing Intrusion Detection Systems and Intrusion Prevention Systems. As taking advantage of the decoupled data plane and control plane, the potential solution for the specific attack has been emerged and rapidly deployed.

A.Virtual access point of edge
For better security, we may want to transmit the cryptographic data through data plane. In order to separate the client device from encrypted data plane, one simple solution is to create a virtual access point that locates between the client device and the specific switch to encrypt and decrypt packets. The virtual access point, as an abstraction of software layer dynamically allocated by switches, can forward or drop the packet in both direction between the switch’s port and the client device. When the client tries to connect to the SDN network, the virtual access point will initially accept the data or request packets and forward them into the available port of switch. Then the switch will determine the action based on the flow table or forwarding the request to the controller. Once wanting to banned the client device or fail to find the client device, the controller only need to disable the related data path and terminate the virtual access point. If the client device want to send a vast of …show more content…
In addition, the mobile device often faces the overlap region for several different base station. And the smart antenna technology, under the 4G, can distinguish the based station that has the strongest signal. For this problem, the virtual access point should accept the request of changing place and terminating connection and forward the request to the controller with similar mechanisms as