Abstract:Software-defined networks offer a new approach that attracts the attention of most academic and industrial circles due to the features it contains. However, some loopholes make such modern networks vulnerable to many types of attacks. Among the most important types of these attacks is the Distributed Denial of Service (DDoS) attack, which in turn affects the network's performance and delays many real user requests. As one of the main features of SDN is the centralization of all the control plane in the SDN controller, it becomes a central point of attack that may compromise the whole network. Hence, in our proposed approach, we aim to mitigate the DDoS attack that maybe launched to compromise the SDN controller, flood the control plane and cripple the entire network. Many DDoS mitigation scheme have been proposed, however, determining the threshold between legitimate requests and malicious requests is still a challenging task. Our proposed approach relies on a two-phases algorithm that assigns a variable trust value for every user. This trust value is compared with schemes relying on a threshold value that changes dynamically and assists in detecting the DDoS attack. The first phase of our two-phases algorithm is Header fields extraction, and the second phase is calculating the trust value based on header fields information. Our proposed approach shows better performance than related detection schemes in terms of accuracy, detection rate, and false-positive rate. Where the accuracy of the system reaches up to 98.83% which is high compared to other traditional methods.

A DDOS PREVENTION MODEL BASED ON WAVELET ANALYSIS AND CONNECTION TRUST DOMAIN

Detection of low-rate DDoS attack based on self-similarity

Detection and Response of Low-Rate TCP-targeted Denial of Service Attacks

A DoS Attack Defense Model Adopting Data Mining

A Detection Model for Distributed Denial of Service Attacks Based on Network Connection Analysis

TPDD: A Two-Phase DDoS Detection System in Software-Defined Networking

Detecting DDoS Attacks Based on Network Connection Statistics

A Wavelet Based Distributed ID Model

A Method Based on AMHI for DDoS Attacks Detection and Defense

Defend Against Application-Layer Distributed Denial-of-Service Attacks Based on Session Suspicion Probability Model

Analysis、detection and Protection Technology of DDOS Attack

Group Testing Based Detection of Web Service DDoS Attackers.

A variable-trust threshold-based approach for DDOS attack mitigation in software defined networks

DDoSMiner: an Automated Framework for DDoS Attack Characterization and Vulnerability Mining.

A Queue Model to Detect DDos Attacks

DDoS Attack Detection Based on Fast Fractional Fourier Transform

A New Multistage Approach to Detect Subtle DDoS Attacks.

A METHOD FOR DDoS ATTACKS PREVENTION BASED ON INTERACTION ACTIVITY

Detecting DDoS Attacks Against Web Server Using Time Series Analysis

Mitigating Distributed Denial-of-service Attacks Using Network Connection Control Charts

The Research on A Novel Defense Mechanism of DDoS