Abstract:Cloud computing has become the real trend of enterprise IT service model that offers cost-effective and scalable processing. Meanwhile, Software-Defined Networking (SDN) is gaining popularity in enterprise networks for flexibility in network management service and reduced operational cost. There seems a trend for the two technologies to go hand-in-hand in providing an enterprise’s IT services. However, the new challenges brought by the marriage of cloud computing and SDN, particularly the implications on enterprise network security, have not been well understood. This paper sets to address this important problem.We start by examining the security impact, in particular, the impact on DDoS attack defense mechanisms, in an enterprise network where both technologies are adopted. We find that SDN technology can actually help enterprises to defend against DDoS attacks if the defense architecture is designed properly. To that end, we propose a DDoS attack mitigation architecture that integrates a highly programmable network monitoring to enable attack detection and a flexible control structure to allow fast and specific attack reaction. To cope with the new architecture, we propose a graphic model based attack detection system that can deal with the dataset shift problem. The simulation results show that our architecture can effectively and efficiently address the security challenges brought by the new network paradigm and our attack detection system can effectively report various attacks using real-world network traffic.

DDoS Attack in Software Defined Networks: A Survey

TPDD: A Two-Phase DDoS Detection System in Software-Defined Networking

A Comprehensive Survey of Distributed Denial of Service Detection and Mitigation Technologies in Software-Defined Network

Overview of DDoS Attack Detection in Software-Defined Networks

A comprehensive survey on DDoS detection, mitigation, and defense strategies in software-defined networks

Intelligent DDoS Detection in Botnet Combined with Packet-Level Features under SDN

A Defense Mechanism for Distributed Denial of Service Attack in Software-Defined Networks

DDoS Attack Detection under SDN Context

Survey of Attacks and Countermeasures for SDN

Resource Investment for DDoS Attack Resistant SDN: a Practical Assessment

On Denial of Service Attacks in Software Defined Networks

DDoS attack protection in the era of cloud computing and Software-Defined Networking

An Entropy-Based DDoS Defense Mechanism in Software Defined Networks.

A systematic review on distributed denial of service attack defense mechanisms in programmable networks

A Novel Distributed Denial-of-Service Attack Detection Scheme for Software Defined Networking Environments.

FADM: DDoS Flooding Attack Detection and Mitigation System in Software-Defined Networking

SD-Anti-DDoS: Fast and efficient DDoS defense in software-defined networks

A Deep Learning Based DDoS Detection System in Software-Defined Networking (SDN)

Research on Distributed Denial-of-service Attacks:a Survey

Detection and Mitigation of DoS Attacks in Software Defined Networks

Penetrating into Openflow Networks: Novel Ddos Attacks in Sdn and Countermeasures