Abstract:Software-defined networking (SDN) has emerged as a transformative technology that separates the control plane from the data plane, providing advantages such as flexibility, centralized control, and programmability. This innovation proves particularly beneficial for Internet of Vehicles (IoV) networks, which amalgamate the Internet of Things (IoT) and Vehicular Ad Hoc Network (VANET) to implement Intelligent Transportation Systems (ITS). IoV provides a safe and secured vehicular environment by supporting V2V, V2I, V2S, and V2P. By employing an SDN controller, IoV networks can leverage centralized control and enhanced manageability, leading to the emergence of Software-Defined Internet of Vehicles (SD-IoV) as a promising solution for future communications. However, the SD-IoV networks introduces a potential vulnerability in the form of a single point of failure, particularly susceptible to Distributed Denial of Service (DDoS) attacks. This is because of the centralized nature of SDN and the dynamic nature of IoV. In this context, the SDN controller becomes a prime target for attackers who flood it with massive packet-in messages. To address this security concern, we propose an efficient and lightweight attack detection and mitigation scheme within the SDN controller. The scheme includes a detection module that utilizes entropy and flow rate to identify patterns indicative of attack traffic behavior. Additionally, a mitigation module is designed to minimize the effect of attack traffic on the normal operation, this is performed through analysis of payload lengths.The mitigation flow rule is set for specific traffic type if its payload is less than the threshold value to decrease the false positive rate. An adaptive threshold computation for all parameter values enhances the scheme's effectiveness. We conducted simulations using SUMO, Mininet-WiFi, and Scapy. We evaluated the system performance by using Mininet-wifi SDN simulation tool and Ryu controller for control plane. The system detects DDoS attack traffic within a single window by checking both entropy and flow rate simultaneously. The simulation results demonstrate the efficacy of our proposed scheme in terms of detection time, accuracy, mitigation efficiency, controller load, and link bandwidth consumption, showcasing its superiority compared to existing works in the field.

MSAID: Automated Detection of Interference in Multiple SDN Applications

SAIDE: Efficient application interference detection and elimination in SDN

SAID: State-aware Defense Against Injection Attacks on In-vehicle Network

Combination Attacks and Defenses on SDN Topology Discovery.

Guarding the Perimeter of Cloud-Based Enterprise Networks: an Intelligent SDN Firewall

Safe Reconfiguring Data Plane Via Supervision over Resource and Flow States

Automatic Belief Network Modeling Via Policy Inference for SDN Fault Localization.

SDN-RDCD: A Real-Time and Reliable Method for Detecting Compromised SDN Devices.

Machine Learning-Based IDS for Software-Defined 5G Network

Early Detection of Abnormal Attacks in Software-Defined Networking Using Machine Learning Approaches

An adaptive multistage intrusion detection and prevention system in software defined networking environment

ML‐IDSDN: Machine learning based intrusion detection system for software‐defined network

Security Policy Violations in SDN Data Plane

Detection and Mitigation of DoS Attacks in Software Defined Networks

Collaborative Intrusion Detection for VANETs: A Deep Learning-Based Distributed SDN Approach

A comprehensive detection and mitigation mechanism to protect SD-IoV systems against controller-targeted DDoS attacks

An Efficient Scheme to Defend Data-to-Control-Plane Saturation Attacks in Software-Defined Networking

Measuring the Consistency Between Data and Control Plane in SDN

An Aware-Scheduling Security Architecture with Priority-Equal Multi-Controller for SDN

A3ID: an Automatic and Interpretable Implicit Interference Detection Method for Smart Home Via Knowledge Graph

SDN-Defend: A Lightweight Online Attack Detection and Mitigation System for DDoS Attacks in SDN