Адаптивна маршрутизація в SD-WAN з врахуванням показників мережної безпеки

Abstract

This paper proposes an adaptive secure routing method in SD-WAN based on continuous vulnerability analysis of edge devices. The SDN controller uses information from public vulnerability intelligence sources (such as NVD, CVE, or similar databases) and CVSS metrics to dynamically redistribute traffic across edge devices while considering channel capacity limitations. The approach was tested in Mininet emulation on a topology with eight edge devices. The results demonstrate effective traffic redistribution and a significant reduction of the integral network security risk index while preserving overall network throughput.