Abstract:In traditional networks, DDoS attacks are often launched in the network layer or the transport layer. Researchers had explored this problem in depth and put forward plenty of solutions. However, these solutions are only suitable for scenarios such as a single link or victim side network and could not analyse traffic distribution from the angle of the global network. Also, the TCP/IP network architecture lacks abilities to quickly conduct resource deployment and traffic scheduling. When DDoS attacks occur, victims usually could not respond in time. With the superiorities of centralized control mode and global topological view, Software-Defined Networking (SDN) provides a new way to get over the above issues. In this paper, we adopt a combination of diverse technologies to design SDNDefender, a SDN-based DDoS detection and defense mechanism, which is composed of two core components aiming to counter the most popular DDoS attacks including IP spoofing attack and TCP SYN flood attack. We carry out quantitative simulation experiments for evaluating SDNDefender from many metrics. The experimental results show that in contrast to other DDoS defense algorithms, SDNDefender not only efficiently validates spoofed packets and withstands well-known attacks but also defends unknown attacks according to the target’s available resources. Besides, SDNDefender could significantly reduce TCP half-open connections and improve detection accuracy, alleviating attack influences that exhaust the server’s resources and network bandwidth.

Detection and Defense Against Network Isolation Attacks in Software‐defined Networks

Attacking Network Isolation in Software-Defined Networks: New Attacks and Countermeasures

SDN-RDCD: A Real-Time and Reliable Method for Detecting Compromised SDN Devices.

TPDD: A Two-Phase DDoS Detection System in Software-Defined Networking

Combination Attacks and Defenses on SDN Topology Discovery.

Guarding the Perimeter of Cloud-Based Enterprise Networks: an Intelligent SDN Firewall

SDNDefender: AComprehensiveDDoSDefenseMechanismUsing Hybrid Approaches over Software Defined Networking

Detection and Mitigation of DoS Attacks in Software Defined Networks

Defending Against Packet-In Messages Flooding Attack under SDN Context

Defending Against New-Flow Attack in SDN-Based Internet of Things.

How To Defend Against Sophisticated Intrusions In Home Networks Using Sdn And Nfv

Distributed Denial of Service Defense in Software Defined Network Using OpenFlow.

Combating DDoS Attack with Dynamic Detection of Anomalous Hosts in Software Defined Network

SOM-based DDoS Defense Mechanism using SDN for the Internet of Things

SDN-Defend: A Lightweight Online Attack Detection and Mitigation System for DDoS Attacks in SDN

SecSDN-Cloud: Defeating Vulnerable Attacks Through Secure Software-Defined Networks

DDoS Detection and Defense Mechanism Based on Cognitive-Inspired Computing in SDN

SD-Anti-DDoS: Fast and efficient DDoS defense in software-defined networks

A Novel Distributed Denial-of-Service Attack Detection Scheme for Software Defined Networking Environments.

An improved network security situation assessment approach in software defined networks

A Multi-Stage Attack Mitigation Mechanism for Software-Defined Home Networks.