scope:

This Recommendation analyses security threats encountered in service function chaining based on software-defined networking (SDN) and specifies security guidelines for SDN-based service function chaining architectures. This Recommendation:

- describes a general security architecture for SDN-based service function chaining;

- analyses security threats to and requirements of network elements and corresponding interfaces in the SDN-based service function chaining architecture;

- describes and analyses policy management problems in SDN-based service function chaining;

- suggests countermeasure solutions to meet these requirements.