In the field of computer security, we face new challenges and risks year after year. Modern networks include Legacy devices and Internet of Things devices that are often vulnerable to exploitation. Due to the ever-increasing complexity of internal networks, we need to explore new approaches to ensure network security. Software defined networks offer such new possibilities.
In this thesis, we explore the challenges of network segmentation and remote access. We review the concept of software defined network, propose an improvement to SDP using WireGuard tunnels, and develop our own SDP implementation.
We have made T-SDP in the client-controller-gateway topology. Control communication takes place in the form of HTTP REST calls between client and controller and between controller and gateway. Data connection takes place directly between clients and gateways via the WireGuard tunnels.
The result of this thesis is a functional specification and SDP prototype T-SDP which is more secure and could replace VPNs in the future.
|
