Abstract:A number of disadvantages of traditional networks may be attributed to the close relationship that exists between the control plane and the data plane inside proprietary hardware designs, as described above. The problem of security is one of the most difficult to deal with. There are a plethora of network hazards and attacks that might be encountered these days. DDoS attacks are one of the most popular and disruptive attacks on the internet today, and they affect a wide range of organisations. Despite a large number of traditional mitigation solutions now available, the frequency, volume, and intensity of distributed denial-of-service (DDoS) attacks continue to rise. According to the findings of this paper, a new network paradigm is necessary to satisfy the requirements of today’s complex security concerns. It was necessary to develop a software-defined network (SDN) in order to meet the real-time needs of the massive network that was expanding at an exponential rate. Many advantages of SDN exist, including simplicity of administration, scalability, and agility, but one of the most critical is security, which is one of the most important considerations when implementing SDN. SDS may be seen as a paradigm in which the implementation of new security regulations in the computer environment is performed via the use of protected software, which is described further below. The goal is to provide a flexible and extensible architecture for DDoS detection and prevention that is both flexible and extendable; the suggested clustering approach, which is based on the Open Day Light (ODL) Controller, is employed to carry out the experimental findings. In this section, we emphasise DDoS penetration techniques from a range of tools, and we evaluate the vulnerability against various tactics. It is necessary to use a Mininet emulation tool to construct a detection and prevention system against distributed denial of service (DDoS) attacks in order to achieve success. There is a range of other simulation tools that are utilised in conjunction with this research in order to bring it to a conclusion. Integration of industry standards such as SNORT and Flow has been accomplished in a variety of situations and parameter settings. During the creation of a framework capable of detecting and mitigating DDoS attacks at an early stage in both the control and application levels, the implementation of this framework has been shown to be crucial in the development of a framework.

Game-Theoretic Modeling of Hybrid Defense Strategies Against DRDoS Traffic in 5G Networks

DDoS Defense for IoT: A Stackelberg Game Model-Enabled Collaborative Framework

Real-Time DDoS Defense in 5G-Enabled IoT: A Multidomain Collaboration Perspective

Defending Against DDOS Attacks on IoT Network Throughput: A Trust-Stackelberg Game Model

Mixed Strategy Analysis in Attack-Defense Game Model Based on 5G Heterogeneous Network of CPS Using ncPSO

Game Strategies for Distributed Denial of Service Defense in the Cloud of Things

Preventing DRDoS Attacks in 5G Networks: a New Source IP Address Validation Approach

Countermeasure Based on Smart Contracts and AI against DoS/DDoS Attack in 5G Circumstances

Differential Game Approach for Attack-Defense Strategy Analysis in Internet of Things Networks

Defense of Advanced Persistent Threat on Industrial Internet of Things With Lateral Movement Modeling

An effective DDoS attack mitigation strategy for IoT using an optimization-based adaptive security model

Effective DDoS Mitigation Via ML-Driven In-network Traffic Shaping

Dynamic Anti-Jamming Strategy in SIoT: A Stackelberg-Matching Game Approach

Risk Assessment and Defense Resource Allocation of Cyber-Physical Distribution Systems under Denial-of-Service Attacks

Attack modeling and intrusion detection system for 5G wireless communication network

Application of hybrid strategies of complex network attack and defense games

Game-Theoretic Analysis for Security of Various Software-Defined Networking (SDN) Architectures

A Multi-Layered Defence Strategy against DDoS Attacks in SDN/NFV-Based 5G Mobile Networks

Synchronizing DDoS detection and mitigation based graph learning with programmable data plane, SDN

Machine Learning Enabled Techniques for Protecting Wireless Sensor Networks by Estimating Attack Prevalence and Device Deployment Strategy for 5G Networks

Dynamic Resource Management to Defend Against Advanced Persistent Threats in Fog Computing: A Game Theoretic Approach