Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

International Conference on Intelligent Data Communication Technologies and Internet of Things (IDCIoT)

Enhancement of SDN Packet Security Using Quantum Keys

K Shyampradeep, Amith R Telgar, K Saraswathi

Published Feb 5, 2025• 1 citation
Publisher

Abstract

Software-defined networking (SDN) has emerged as a promising paradigm for managing and controlling network resources efficiently. However, ensuring the security of data packets transmitted within an SDN environment remains a critical challenge. Traditional networking relies on static configurations, while SDN offers dynamic control and programmability, revolutionizing network management. In SDN, the application layer employs tools like OpenDaylight and Mininet for network management and testing. The control layer, managed by controllers such as Floodlight or ONOS, orchestrates traffic flow among switches. In the infrastructure layer, Quantum Key Distribution (QKD) with the BB84 protocol ensures secure communication. Together, these layers enable agile, programmable, and secure networking paradigms. This paper proposes integrating quantum key distribution (QKD) into SDN architectures to bolster packet-level security. By leveraging quantum entanglement and uncertainty, a secure communication channel between SDN controllers and switches is established, resilient to quantum attacks. Evaluation through simulations and real-world experiments demonstrates efficacy in mitigating security threats while minimizing overhead and latency, advancing SDN security IEEE 802.1X capabilities and leveraging quantum technologies for cybersecurity.

DOI
10.1109/idciot64235.2025.10915048

Related papers

Securing SDN Communication through Quantum Key Distribution

Marian Hanashiro Rempola, Andrew D. Smith, Yan Li +1 more

Software-Defined Networking (SDN) is an emerging networking paradigm that decouples the control and data plane in order to enable programmable and flexible networks, optimizing its applications and advancing computer systems. It does so through its architecture, a key part of which is a centralized network management through open interfaces that revolutionizes the way in which networks are designed and makes them more agile and versatile to the evolving needs of modern and future applications services. This also means, however, that there is now a centralized point of attack that is a major vulnerability, threatening the security of the entire network. With such an advanced network paradigm, it requires a security system that will mitigate these risks and warrant long-term security. In attempts to allow secure communications within the network, this research proposes the implementation of Quantum Key Distribution (QKD), leveraging quantum mechanics to secure the network against any computational advancements in the future. QKD is a recent cryptographic system that includes a traditional-computational channel and a physical-quantum channel to generate and distribute keys between parties. It uses the principles of quantum mechanics including entanglement and superposition to ensure that the physical layer cannot be compromised computationally. QKD provides confidentiality and privacy of information and communication. Moreover, it is resistant to technological advancements. The implications of QKD significantly enhance SDN security through its protection against attacks, efficient key distribution, reliable network orchestration, and data integrity, creating an architecture that establishes stable communication channels that are resistant to cyber threats.

IEEE Transportation Electrification Conference and Expo•Jun 19, 2024•7 citations

Integration of Quantum Key Distribution with SDN for Secure Networking

Rentala Mounika, K. Saraswathi

The rapid evolution of digital infrastructure has raised significant concerns about the security of data transmission, particularly with the advent of quantum computing. Traditional cryptographic algorithms are vulnerable to attacks, highlighting the need for quantum-resistant solutions. This paper presents the integration of Quantum Key Distribution (QKD) with Software-Defined Networking (SDN) and network slicing to build a secure, programmable, and flexible network architecture. QKD ensures unconditional security based on quantum mechanics by enabling key distribution with the ability to detect eavesdropping through quantum bit error rates (QBER). SDN provides centralized control and real-time traffic management, while network slicing allows isolation, reliability and customization of traffic flows for specific applications such as URLLC, eMBB, and mMTC. When abnormal QBER or decryption failures are detected, mitigation actions such as Quantum key refresh, traffic rerouting, or attacker isolation are triggered and Performance evaluation of the system is based on Latency and throughput Experimental validation using Mininet and Ryu demonstrates secure key distribution, attack detection, and slice-specific threat mitigation. This integrated approach enhances end-to-end security for next-generation networks, with strong applicability to$\mathbf{5 G} \boldsymbol{/} \mathbf{6 G}$, IoT, and mission-critical services.

International Conference on Computation System and Information Technology for Sustainable Solutions (CSITSS)•Nov 20, 2025•0 citations

Enhanced Security of Software-defined Network and Network Slice Through Hybrid Quantum Key Distribution Protocol

Suadad S. Mahdi, Alharith A. Abdullah

Software-defined networking (SDN) has revolutionized the world of technology as networks have become more flexible, dynamic and programmable. The ability to conduct network slicing in 5G networks is one of the most crucial features of SDN implementation. Although network programming provides new security solutions of traditional networks, SDN and network slicing also have security issues, an important one being the weaknesses related to openflow channel between the data plane and controller as the network can be attacked via the openflow channel and exploit communications with the control plane. Our work proposes a solution to provide adequate security for openflow messages through using a hybrid key consisting of classical and quantum key distribution protocols to provide double security depending on the computational complexity and physical properties of quantum. To achieve this goal, the hybrid key used with transport layer security protocol to provide confidentiality, integrity and quantum authentication to secure openflow channel. We experimentally based on the SDN-testbed and network slicing to show the workflow of exchanging quantum and classical keys between the control plane and data plane and our results showed the effectiveness of the hybrid key to enhance the security of the transport layer security protocol. Thereby achieving adequate security for openflow channel against classical and quantum computer attacks.

Híradástechnika/Infocommunications journal•Jan 1, 2022•9 citations

Quantum Key Distribution (QKD) Automation: ETSI QKD Protocol Integration in OpenDaylight SDN Controllers

Sandhya Guduru

Quantum Key Distribution (QKD) protocols, particularly the decoy-state BB84, offer a promising approach to enhancing network security by enabling theoretically unbreakable encryption.Integrating QKD into OpenDaylight Software-Defined Networking (SDN) controllers addresses key management challenges in dynamic, large-scale networks.Automated key rotation for IPSec and VPN tunnels eliminates the need for manual key distribution, ensuring continuous encryption with minimal latency.The implementation of ETSI-compliant QKD protocols ensures efficient, seamless key rotation without compromising performance.Furthermore, Quantum Bit Error Rate (QBER) thresholds are optimized to enhance key generation rates while minimizing key discards.Simulation results indicate that this solution significantly improves network security, reduces latency, and maintains continuous encryption.This research explores how integrating automated QKD protocols within SDN-driven networks can provide a practical and scalable solution for safeguarding communications, ultimately strengthening defenses against cyber threats while maintaining high network performance.

•Aug 24, 2024•0 citations

Quantum resistant software Defined-Networking IPsec, enabling ITS communication over IP networks on real telco infrastructures

Rubén B. Méndez, Jaime S. Buruaga, Juan Pedro Brito Méndez +3 more

The growing dependence on digital communications underscores the need to protect data as it travels through the network. Internet Protocol Security (IPsec) plays a central role, providing a robust framework to ensure the confidentiality, integrity, and authenticity of transmitted data. However, advances in Quantum Computing pose a significant threat to current public-key cryptographic schemes by enabling efficient solutions to factoring and discrete logarithm problems. A promising solution also arises from the quantum domain. Quantum Key Distribution (QKD) provides a security layer immune to any computational attacks, whether quantum or classical. While the rapid adoption of quantum-safe technologies is highly desirable, it is equally important to ensure the resilience of existing trusted infrastructures, as the introduction of novel technologies may also entail unforeseen challenges. Enabling an evolutionary path that brings our current security infrastructure to a quantum-safe one, protected against both present and future threats, is thus very important. This work proposes a solution that integrates emerging quantum technologies into the existing security and communications infrastructure to ensure long-term protection. We focus on IPsec —one of the most widely deployed security protocols— and combine it with Software-Defined Networking (SDN) and QKD to construct a novel network security infrastructure that is resilient against both classical and quantum computational threats. Building upon recent standardization initiatives and operational tools for QKD integration, we demonstrate advanced capabilities -including rekeying and secure key transport- on a field deployed QKD network operating within a shared quantum-classical production infrastructure.

Computer Networks•Mar 4, 2026•2 citations

Increasing network reliability by securing SDN communication with QKD

Paolo Comi, Paolo Martelli, Vicente Martín +6 more

Modern communication networks can be flexibly shaped and controlled using Software Defined Networking (SDN) paradigm. However, besides unprecedented functional benefits, this solution exploits an architectural single point of failure. Securing the communication among SDN functional element is therefore a critical requirement for improving the network reliability. A novel approach to secure communications is provided by Quantum Key Distribution (QKD) that is a physical layer technology capable to securely deliver symmetric encryption keys leveraging on quantum physic properties. Our research demonstrates how to provide unconditionally secure communication at SDN level dramatically improving the reliability of the communication network itself.

International Conference on the Design of Reliable Communication Networks (DRCN)•Apr 19, 2021•5 citations
Software-defined networking (SDN) has emerged as a promising paradigm for managing and controlling network resources efficiently. However, ensuring the security of data packets transmitted within an SDN environment remains a critical challenge. Traditional networking relies on static configurations, while SDN offers dynamic control and programmability, revolutionizing network management. In SDN, the application layer employs tools like OpenDaylight and Mininet for network management and testing. The control layer, managed by controllers such as Floodlight or ONOS, orchestrates traffic flow among switches. In the infrastructure layer, Quantum Key Distribution (QKD) with the BB84 protocol ensures secure communication. Together, these layers enable agile, programmable, and secure networking paradigms. This paper proposes integrating quantum key distribution (QKD) into SDN architectures to bolster packet-level security. By leveraging quantum entanglement and uncertainty, a secure communication channel between SDN controllers and switches is established, resilient to quantum attacks. Evaluation through simulations and real-world experiments demonstrates efficacy in mitigating security threats while minimizing overhead and latency, advancing SDN security IEEE 802.1X capabilities and leveraging quantum technologies for cybersecurity.
Software-Defined Networking (SDN) is an emerging networking paradigm that decouples the control and data plane in order to enable programmable and flexible networks, optimizing its applications and advancing computer systems. It does so through its architecture, a key part of which is a centralized network management through open interfaces that revolutionizes the way in which networks are designed and makes them more agile and versatile to the evolving needs of modern and future applications services. This also means, however, that there is now a centralized point of attack that is a major vulnerability, threatening the security of the entire network. With such an advanced network paradigm, it requires a security system that will mitigate these risks and warrant long-term security. In attempts to allow secure communications within the network, this research proposes the implementation of Quantum Key Distribution (QKD), leveraging quantum mechanics to secure the network against any computational advancements in the future. QKD is a recent cryptographic system that includes a traditional-computational channel and a physical-quantum channel to generate and distribute keys between parties. It uses the principles of quantum mechanics including entanglement and superposition to ensure that the physical layer cannot be compromised computationally. QKD provides confidentiality and privacy of information and communication. Moreover, it is resistant to technological advancements. The implications of QKD significantly enhance SDN security through its protection against attacks, efficient key distribution, reliable network orchestration, and data integrity, creating an architecture that establishes stable communication channels that are resistant to cyber threats.
The rapid evolution of digital infrastructure has raised significant concerns about the security of data transmission, particularly with the advent of quantum computing. Traditional cryptographic algorithms are vulnerable to attacks, highlighting the need for quantum-resistant solutions. This paper presents the integration of Quantum Key Distribution (QKD) with Software-Defined Networking (SDN) and network slicing to build a secure, programmable, and flexible network architecture. QKD ensures unconditional security based on quantum mechanics by enabling key distribution with the ability to detect eavesdropping through quantum bit error rates (QBER). SDN provides centralized control and real-time traffic management, while network slicing allows isolation, reliability and customization of traffic flows for specific applications such as URLLC, eMBB, and mMTC. When abnormal QBER or decryption failures are detected, mitigation actions such as Quantum key refresh, traffic rerouting, or attacker isolation are triggered and Performance evaluation of the system is based on Latency and throughput Experimental validation using Mininet and Ryu demonstrates secure key distribution, attack detection, and slice-specific threat mitigation. This integrated approach enhances end-to-end security for next-generation networks, with strong applicability to5G/6G\mathbf{5 G} \boldsymbol{/} \mathbf{6 G}5G/6G, IoT, and mission-critical services.
Software-defined networking (SDN) has revolutionized the world of technology as networks have become more flexible, dynamic and programmable. The ability to conduct network slicing in 5G networks is one of the most crucial features of SDN implementation. Although network programming provides new security solutions of traditional networks, SDN and network slicing also have security issues, an important one being the weaknesses related to openflow channel between the data plane and controller as the network can be attacked via the openflow channel and exploit communications with the control plane. Our work proposes a solution to provide adequate security for openflow messages through using a hybrid key consisting of classical and quantum key distribution protocols to provide double security depending on the computational complexity and physical properties of quantum. To achieve this goal, the hybrid key used with transport layer security protocol to provide confidentiality, integrity and quantum authentication to secure openflow channel. We experimentally based on the SDN-testbed and network slicing to show the workflow of exchanging quantum and classical keys between the control plane and data plane and our results showed the effectiveness of the hybrid key to enhance the security of the transport layer security protocol. Thereby achieving adequate security for openflow channel against classical and quantum computer attacks.
Quantum Key Distribution (QKD) protocols, particularly the decoy-state BB84, offer a promising approach to enhancing network security by enabling theoretically unbreakable encryption.Integrating QKD into OpenDaylight Software-Defined Networking (SDN) controllers addresses key management challenges in dynamic, large-scale networks.Automated key rotation for IPSec and VPN tunnels eliminates the need for manual key distribution, ensuring continuous encryption with minimal latency.The implementation of ETSI-compliant QKD protocols ensures efficient, seamless key rotation without compromising performance.Furthermore, Quantum Bit Error Rate (QBER) thresholds are optimized to enhance key generation rates while minimizing key discards.Simulation results indicate that this solution significantly improves network security, reduces latency, and maintains continuous encryption.This research explores how integrating automated QKD protocols within SDN-driven networks can provide a practical and scalable solution for safeguarding communications, ultimately strengthening defenses against cyber threats while maintaining high network performance.
The growing dependence on digital communications underscores the need to protect data as it travels through the network. Internet Protocol Security (IPsec) plays a central role, providing a robust framework to ensure the confidentiality, integrity, and authenticity of transmitted data. However, advances in Quantum Computing pose a significant threat to current public-key cryptographic schemes by enabling efficient solutions to factoring and discrete logarithm problems. A promising solution also arises from the quantum domain. Quantum Key Distribution (QKD) provides a security layer immune to any computational attacks, whether quantum or classical. While the rapid adoption of quantum-safe technologies is highly desirable, it is equally important to ensure the resilience of existing trusted infrastructures, as the introduction of novel technologies may also entail unforeseen challenges. Enabling an evolutionary path that brings our current security infrastructure to a quantum-safe one, protected against both present and future threats, is thus very important. This work proposes a solution that integrates emerging quantum technologies into the existing security and communications infrastructure to ensure long-term protection. We focus on IPsec —one of the most widely deployed security protocols— and combine it with Software-Defined Networking (SDN) and QKD to construct a novel network security infrastructure that is resilient against both classical and quantum computational threats. Building upon recent standardization initiatives and operational tools for QKD integration, we demonstrate advanced capabilities -including rekeying and secure key transport- on a field deployed QKD network operating within a shared quantum-classical production infrastructure.
Modern communication networks can be flexibly shaped and controlled using Software Defined Networking (SDN) paradigm. However, besides unprecedented functional benefits, this solution exploits an architectural single point of failure. Securing the communication among SDN functional element is therefore a critical requirement for improving the network reliability. A novel approach to secure communications is provided by Quantum Key Distribution (QKD) that is a physical layer technology capable to securely deliver symmetric encryption keys leveraging on quantum physic properties. Our research demonstrates how to provide unconditionally secure communication at SDN level dramatically improving the reliability of the communication network itself.