Abstract:In traditional networks, DDoS attacks are often launched in the network layer or the transport layer. Researchers had explored this problem in depth and put forward plenty of solutions. However, these solutions are only suitable for scenarios such as a single link or victim side network and could not analyse traffic distribution from the angle of the global network. Also, the TCP/IP network architecture lacks abilities to quickly conduct resource deployment and traffic scheduling. When DDoS attacks occur, victims usually could not respond in time. With the superiorities of centralized control mode and global topological view, Software-Defined Networking (SDN) provides a new way to get over the above issues. In this paper, we adopt a combination of diverse technologies to design SDNDefender, a SDN-based DDoS detection and defense mechanism, which is composed of two core components aiming to counter the most popular DDoS attacks including IP spoofing attack and TCP SYN flood attack. We carry out quantitative simulation experiments for evaluating SDNDefender from many metrics. The experimental results show that in contrast to other DDoS defense algorithms, SDNDefender not only efficiently validates spoofed packets and withstands well-known attacks but also defends unknown attacks according to the target’s available resources. Besides, SDNDefender could significantly reduce TCP half-open connections and improve detection accuracy, alleviating attack influences that exhaust the server’s resources and network bandwidth.

DDoS Detection and Protection Based on Cloud Computing Platform

TPDD: A Two-Phase DDoS Detection System in Software-Defined Networking

DDoS attack protection in the era of cloud computing and Software-Defined Networking

An Entropy-Based DDoS Defense Mechanism in Software Defined Networks.

Efficient Distributed Denial-of-Service Attack Defense in SDN-Based Cloud

A Novel Distributed Denial-of-Service Attack Detection Scheme for Software Defined Networking Environments.

Towards DDoS Detection Mechanisms in Software-Defined Networking

A method of DDoS attack detection using HTTP packet pattern and rule engine in cloud computing environment

A Defense Mechanism for Distributed Denial of Service Attack in Software-Defined Networks

DDoS Detection and Defense Mechanism Based on Cognitive-Inspired Computing in SDN

Distributed Denial of Service Defense in Software Defined Network Using OpenFlow.

Overview of DDoS Attack Research Under SDN.

Software-defined DDoS Detection with Information Entropy Analysis and Optimized Deep Learning.

SDNDefender: AComprehensiveDDoSDefenseMechanismUsing Hybrid Approaches over Software Defined Networking

C2DF: High Rate DDOS Filtering Method in Cloud Computing

Advance DDOS Detection and Mitigation Technique for Securing Cloud

Overview of DDoS Attack Detection in Software-Defined Networks

Neural Network-Based DDoS Detection on Edge Computing Architecture

An Efficient DDoS Detection with Bloom Filter in SDN

A DDoS Attack Detection Method Based on Information Entropy and Deep Learning in SDN

Edge DDoS Attack Detection Method Based on Software Defined Networks