Skip to content

SDN Controller Security Requirements Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-NET-000512

    Group
  • The SDN controller must be configured to audit the enforcement actions used to restrict access associated with changes to any application within the SDN framework.

    Without auditing the enforcement of access restrictions against changes to any application within the SDN framework, it will be difficult to identify attempted attacks and an audit trail will not b...
    Rule Medium Severity
  • SRG-NET-000512

    Group
  • SRG-NET-000705

    Group
  • The SDN controller must be configured to employ organization-defined controls by type of denial of service (DoS) to achieve the DoS objective.

    DoS events may occur due to a variety of internal and external causes, such as an attack by an adversary or a lack of planning to support organizational needs with respect to capacity and bandwidth...
    Rule Medium Severity
  • SRG-NET-000715

    Group
  • The SDN controller must be configured to implement physically or logically separate subnetworks to isolate organization-defined critical system components and functions.

    Separating critical system components and functions from other noncritical system components and functions through separate subnetworks may be necessary to reduce susceptibility to a catastrophic o...
    Rule Medium Severity
  • SRG-NET-000760

    Group

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules