Quantum Key Distribution (QKD) protocols, particularly the decoy-state BB84, offer a promising approach to enhancing network security by enabling theoretically unbreakable encryption.Integrating QKD into OpenDaylight Software-Defined Networking (SDN) controllers addresses key management challenges in dynamic, large-scale networks.Automated key rotation for IPSec and VPN tunnels eliminates the need for manual key distribution, ensuring continuous encryption with minimal latency.The implementation of ETSI-compliant QKD protocols ensures efficient, seamless key rotation without compromising performance.Furthermore, Quantum Bit Error Rate (QBER) thresholds are optimized to enhance key generation rates while minimizing key discards.Simulation results indicate that this solution significantly improves network security, reduces latency, and maintains continuous encryption.This research explores how integrating automated QKD protocols within SDN-driven networks can provide a practical and scalable solution for safeguarding communications, ultimately strengthening defenses against cyber threats while maintaining high network performance.
Quantum Key Distribution (QKD) protocols, particularly the decoy-state BB84, offer a promising approach to enhancing network security by enabling theoretically unbreakable encryption.Integrating QKD into OpenDaylight Software-Defined Networking (SDN) controllers addresses key management challenges in dynamic, large-scale networks.Automated key rotation for IPSec and VPN tunnels eliminates the need for manual key distribution, ensuring continuous encryption with minimal latency.The implementation of ETSI-compliant QKD protocols ensures efficient, seamless key rotation without compromising performance.Furthermore, Quantum Bit Error Rate (QBER) thresholds are optimized to enhance key generation rates while minimizing key discards.Simulation results indicate that this solution significantly improves network security, reduces latency, and maintains continuous encryption.This research explores how integrating automated QKD protocols within SDN-driven networks can provide a practical and scalable solution for safeguarding communications, ultimately strengthening defenses against cyber threats while maintaining high network performance.
Software-defined networking (SDN) has emerged as a promising paradigm for managing and controlling network resources efficiently. However, ensuring the security of data packets transmitted within an SDN environment remains a critical challenge. Traditional networking relies on static configurations, while SDN offers dynamic control and programmability, revolutionizing network management. In SDN, the application layer employs tools like OpenDaylight and Mininet for network management and testing. The control layer, managed by controllers such as Floodlight or ONOS, orchestrates traffic flow among switches. In the infrastructure layer, Quantum Key Distribution (QKD) with the BB84 protocol ensures secure communication. Together, these layers enable agile, programmable, and secure networking paradigms. This paper proposes integrating quantum key distribution (QKD) into SDN architectures to bolster packet-level security. By leveraging quantum entanglement and uncertainty, a secure communication channel between SDN controllers and switches is established, resilient to quantum attacks. Evaluation through simulations and real-world experiments demonstrates efficacy in mitigating security threats while minimizing overhead and latency, advancing SDN security IEEE 802.1X capabilities and leveraging quantum technologies for cybersecurity.
The rapid evolution of digital infrastructure has raised significant concerns about the security of data transmission, particularly with the advent of quantum computing. Traditional cryptographic algorithms are vulnerable to attacks, highlighting the need for quantum-resistant solutions. This paper presents the integration of Quantum Key Distribution (QKD) with Software-Defined Networking (SDN) and network slicing to build a secure, programmable, and flexible network architecture. QKD ensures unconditional security based on quantum mechanics by enabling key distribution with the ability to detect eavesdropping through quantum bit error rates (QBER). SDN provides centralized control and real-time traffic management, while network slicing allows isolation, reliability and customization of traffic flows for specific applications such as URLLC, eMBB, and mMTC. When abnormal QBER or decryption failures are detected, mitigation actions such as Quantum key refresh, traffic rerouting, or attacker isolation are triggered and Performance evaluation of the system is based on Latency and throughput Experimental validation using Mininet and Ryu demonstrates secure key distribution, attack detection, and slice-specific threat mitigation. This integrated approach enhances end-to-end security for next-generation networks, with strong applicability to5G/6G, IoT, and mission-critical services.
ABSTRACT Classical public‐key cryptography used to secure Software‐Defined Networking (SDN) control planes remains vulnerable to future cryptographically relevant quantum computers through Shor's algorithm, motivating the exploration of quantum‐safe key establishment mechanisms. While Quantum Key Distribution (QKD) has been widely studied as a standalone technology, its direct integration into SDN control‐plane protection remains insufficiently quantified from both architectural and operational perspectives. This paper presents a quantum‐secure SDN control‐plane framework in which BB84‐based key generation, key lifecycle management, and quantum‐authenticated flow‐rule protection are integrated into the Ryu controller through a QBER‐aware Key Management System (KMS) and OpenFlow 1.3 Experimenter extensions. Beyond implementation, the paper positions the design as a practical migration model for quantum‐resilient SDN infrastructures and evaluates its security–performance trade‐offs against a classical RSA + TLS baseline. The system is implemented using Ryu, Open vSwitch, and a software BB84 simulator in a Mininet testbed with up to 20 OpenFlow switches. All measurements are repeated over 30 independent trials with full statistical reporting, while QBER stability is assessed over 1000 runs. Results show that BB84 key generation latency averages 45.3 ms ( σ = 3.2 ms), mean QBER remains at 4.8% with zero threshold violations, flow installation latency increases from 13.2 to 17.6 ms, controller CPU overhead is +3.8 percentage points, and throughput decreases from 8200 to 7580 pps under saturation. In addition, scalability follows a near‐perfect linear trend ( R 2 = 0.998), enabling projection to larger SDN deployments. These findings show that QKD‐secured SDN control‐plane protection is operationally feasible on commodity hardware with bounded and predictable overhead, while offering a practical blueprint for the gradual deployment of quantum‐resilient networking infrastructure.
6G networks promise advanced applications such as immersive extended reality, autonomous systems, and massive machine-type communications, all of which demand highly secure communication. Yet, the rise of quantum computing technologies poses significant challenges to classical cryptographic methods, creating an urgent need for security designs resistant to quantum attacks. Quantum key distribution (QKD) is a promising solution; however, its deployment is currently constrained by expensive point-to-point connections that require dedicated devices at both endpoints. These constraints, combined with a restricted operational range, have limited the use of QKD to niche applications. To address this, our study introduces a scalable microservice framework for SDN-enabled QKD networks, leveraging the SDN Controller and its support for diverse communication protocols, including REST APIs. Our findings demonstrate that integrating QKD within an SDN-enabled microservice architecture can enhance network performance and flexibility by improving scalability, reducing latency, and extending achievable secret key rates over longer distances.
Software-Defined Networking (SDN) is an emerging networking paradigm that decouples the control and data plane in order to enable programmable and flexible networks, optimizing its applications and advancing computer systems. It does so through its architecture, a key part of which is a centralized network management through open interfaces that revolutionizes the way in which networks are designed and makes them more agile and versatile to the evolving needs of modern and future applications services. This also means, however, that there is now a centralized point of attack that is a major vulnerability, threatening the security of the entire network. With such an advanced network paradigm, it requires a security system that will mitigate these risks and warrant long-term security. In attempts to allow secure communications within the network, this research proposes the implementation of Quantum Key Distribution (QKD), leveraging quantum mechanics to secure the network against any computational advancements in the future. QKD is a recent cryptographic system that includes a traditional-computational channel and a physical-quantum channel to generate and distribute keys between parties. It uses the principles of quantum mechanics including entanglement and superposition to ensure that the physical layer cannot be compromised computationally. QKD provides confidentiality and privacy of information and communication. Moreover, it is resistant to technological advancements. The implications of QKD significantly enhance SDN security through its protection against attacks, efficient key distribution, reliable network orchestration, and data integrity, creating an architecture that establishes stable communication channels that are resistant to cyber threats.
The nature of network services has drastically changed in recent years. New demands require new capabilities, forcing the infrastructure to dynamically adapt to new scenarios. Novel network paradigms, such as software-defined networking (SDN) and network functions virtualization, have appeared to provide flexibility for network management and services. The reliance on software and commoditized hardware of these new paradigms introduces new security threats and, consequently, one of the most desired capabilities is a strengthened security layer when connecting remote premises. On the other hand, traditional cryptographic protocols are based on computational complexity assumptions. They rely on certain mathematical problems (e.g., integer factorization, discrete logarithms, or elliptic curves) that cannot be efficiently solved using conventional computing. This general assumption is being revisited because of quantum computing. The creation of a quantum computer would put these protocols at risk and force a general overhaul of network security. Quantum key distribution (QKD) is a novel technique for providing synchronized sources of symmetric keys between two separated domains. Its security is based on the fundamental laws of quantum physics, which makes it impossible to copy the quantum states exchanged between both endpoints. Therefore, if implemented properly, QKD generates highly secure keys, immune to any algorithmic cryptanalysis. This work proposes a node design to provide QKD-enhanced security in end-to-end services and analyze the control plane requirements for service provisioning in transport networks. We define and demonstrate the necessary workflows and protocol extensions in different SDN scenarios, integrating the proposed solution into a virtual router providing QKD-enhanced IPsec sessions.