UPM Institutional Repository

An adaptive NLP-driven access control framework for Northbound Interface in Software Defined Network


Citation

Zainal, Zulkarnain and Abdullah, Azizol and Huyop, Fahrul Hakim and Abdullah, Muhammad Daniel Hafiz (2026) An adaptive NLP-driven access control framework for Northbound Interface in Software Defined Network. Computing, 108 (1). art. no. 18. pp. 1-23. ISSN 0010-485X; eISSN: 1436-5057

Abstract

Software-defined networking (SDN) has transformed network management by decoupling the control and data planes, thereby enabling enhanced flexibility, programmability, and automation in network management. However, this flexibility introduces significant challenges to access control, particularly at the Northbound Interface (NBI), where external applications interact with SDN controller. Traditional access control mechanisms, such as rule-based frameworks and Role-Based Access Control (RBAC), suffer from inefficiencies, high maintenance overhead, and limited adaptability to evolving security policies. This paper proposes a novel access control framework that automates policy interpretation and management in SDN controller. The framework uses Natural Language Processing (NLP) techniques. It converts human-readable security policies into rules that machines can execute. This reduces the need for manual intervention and makes the system more adaptable. The experimental results demonstrate 97% accuracy, a precision of 1.00, and a reduced error rate of 0.03, significantly outperforming traditional methods, which exhibit a lower F1-score of 0.24 and higher latency. These findings underscore NLP’s potential for automating and improving SDN access control, offering an efficient and adaptive access control solution. This study highlights the trade-off between processing time and accuracy and suggests further optimizations to reduce computational overhead while maintaining high security and performance. This study also discusses implementation challenges, resource trade-offs and practical integration steps required for real deployments.


Download File

[img] Text
122402.pdf - Published Version
Restricted to Repository staff only

Download (2MB)

Additional Metadata

Item Type: Article
Subject: Software
Subject: Theoretical Computer Science
Divisions: Faculty of Computer Science and Information Technology
DOI Number: https://doi.org/10.1007/s00607-025-01601-0
Publisher: Springer
Keywords: Access control; Natural language processing (NLP); Northbound interface; Security automation; Software-Defined networking (SDN)
Depositing User: Ms. Che Wa Zakaria
Date Deposited: 16 Jan 2026 02:44
Last Modified: 16 Jan 2026 02:44
Altmetrics: http://www.altmetric.com/details.php?domain=psasir.upm.edu.my&doi=10.1007/s00607-025-01601-0
URI: http://psasir.upm.edu.my/id/eprint/122402
Statistic Details: View Download Statistic

Actions (login required)

View Item View Item