Abstract:Due to the large computational overhead, underutilization of features, and high bandwidth consumption in traditional SDN environments for DDoS attack detection and mitigation methods, this paper proposes a two-stage detection and mitigation method for DDoS attacks in SDN based on multi-dimensional characteristics. Firstly, an analysis of the traffic statistics from the SDN switch ports is performed, which aids in conducting a coarse-grained detection of DDoS attacks within the network. Subsequently, a Multi-Dimensional Deep Convolutional Classifier (MDDCC) is constructed using wavelet decomposition and convolutional neural networks to extract multi-dimensional characteristics from the traffic data passing through suspicious switches. Based on these extracted multi-dimensional characteristics, a simple classifier can be employed to accurately detect attack samples. Finally, by integrating graph theory with restrictive strategies, the source of attacks in SDN networks can be effectively traced and isolated. The experimental results indicate that the proposed method, which utilizes a minimal amount of statistical information, can quickly and accurately detect attacks within the SDN network. It demonstrates superior accuracy and generalization capabilities compared to traditional detection methods, especially when tested on both simulated and public datasets. Furthermore, by isolating the affected nodes, the method effectively mitigates the impact of the attacks, ensuring the normal transmission of legitimate traffic during network attacks. This approach not only enhances the detection capabilities but also provides a robust mechanism for containing the spread of cyber threats, thereby safeguarding the integrity and performance of the network.

A Research Review on SDN-Based DDOS Attack Detection

Overview of DDoS Attack Detection in Software-Defined Networks

TPDD: A Two-Phase DDoS Detection System in Software-Defined Networking

DDoS Attack in Software Defined Networks: A Survey

Intelligent DDoS Detection in Botnet Combined with Packet-Level Features under SDN

A Comprehensive Survey of Distributed Denial of Service Detection and Mitigation Technologies in Software-Defined Network

A Defense Mechanism for Distributed Denial of Service Attack in Software-Defined Networks

Resource Investment for DDoS Attack Resistant SDN: a Practical Assessment

A systematic review on distributed denial of service attack defense mechanisms in programmable networks

Detection and Mitigation of DoS Attacks in Software Defined Networks

DDoS Attack Detection under SDN Context

Survey of Attacks and Countermeasures for SDN

A comprehensive survey on DDoS detection, mitigation, and defense strategies in software-defined networks

Research on Detection and Defense Methods for Software‐Defined Network Architecture after Hybrid Attack by Distributed Denial of Service

A Novel Distributed Denial-of-Service Attack Detection Scheme for Software Defined Networking Environments.

SDN-Defend: A Lightweight Online Attack Detection and Mitigation System for DDoS Attacks in SDN

Research on Low-Rate DDoS Attack of SDN Network in Cloud Environment

Detection and mitigation of DDoS attacks based on multi-dimensional characteristics in SDN

A Method of DDoS Attack Detection and Mitigation for the Comprehensive Coordinated Protection of SDN Controllers

An Entropy-Based DDoS Defense Mechanism in Software Defined Networks.

SDNShield: Towards More Comprehensive Defense Against DDoS Attacks on SDN Control Plane