Abstract:Software-Defined Networking (SDN) actualizes the separation of control and forwarding, innovates network functionality with a logically centralized controller, and facilitates network-wide collaboration. Contemporary SDN infrastructure exposes potential bottlenecks which are prone to engaging low-rate denial of service (LDoS) attacks. Currently, a great deal of detection methods are deployed in the controller, and the controller needs to poll the switch frequently, which brings heavy load to the controller and the southbound link. According to the analysis of existing researches, we focused on the how to decrease the frequent polling of the controller and improve the detection rate. In this paper, we adopted the idea of cross-plane collaboration and proposed a two-phase detection framework, which carried out the lightweight detection method in the data plane and the in-depth detection based on Bayesian voting mechanism in the control plane. Once LDoS attacks are detected, the controller recalculates routes for the bottleneck nodes using the optimized Dijkstra algorithm to complete mitigation. Theoretical analyses and extensive experiments are conducted to validate the performance of our proposed method. Test results show that our method outperforms other traditional methods in terms of the detection rate of 99.1%, the detection delay of 1.3s and the communication overhead of 1068 Byte/s, the average CPU utilization of controller remains at approximately 3.5%. The proposed method takes a step forward to enhance the security of SDN.

Research on Low-Rate DDoS Attack of SDN Network in Cloud Environment

Intelligent DDoS Detection in Botnet Combined with Packet-Level Features under SDN

TPDD: A Two-Phase DDoS Detection System in Software-Defined Networking

Detection and Response of Low-Rate TCP-targeted Denial of Service Attacks

Low-rate DoS Attack Detection Method Based on Hybrid Deep Neural Networks.

Performance and Features: Mitigating the Low-Rate TCP-Targeted DoS Attack via SDN

Machine Learning Based Low-Rate DDoS Attack Detection for SDN Enabled IoT Networks

CCS: A Cross-Plane Collaboration Strategy to Defend Against LDoS Attacks in SDN

A Method of DDoS Attack Detection and Mitigation for the Comprehensive Coordinated Protection of SDN Controllers

OverWatch: A Cross-Plane DDoS Attack Defense Framework with Collaborative Intelligence in SDN.

Detection and Mitigation of DoS Attacks in Software Defined Networks

Overview of DDoS Attack Detection in Software-Defined Networks

DDoS Attack Detection under SDN Context

SD-Anti-DDoS: Fast and efficient DDoS defense in software-defined networks

Multi-SDN Based Cooperation Scheme for DDoS Attack Defense

An Efficient DDoS Detection with Bloom Filter in SDN

Efficient Distributed Denial-of-Service Attack Defense in SDN-Based Cloud

DDoS attack protection in the era of cloud computing and Software-Defined Networking

Dtguard: A Lightweight Defence Mechanism Against A New Dos Attack On Sdn

Resource Investment for DDoS Attack Resistant SDN: a Practical Assessment

LLDM: Low-Latency DoS Attack Detection and Mitigation in SDN