Abstract:Software-defined networking (SDN) has emerged as a transformative technology that separates the control plane from the data plane, providing advantages such as flexibility, centralized control, and programmability. This innovation proves particularly beneficial for Internet of Vehicles (IoV) networks, which amalgamate the Internet of Things (IoT) and Vehicular Ad Hoc Network (VANET) to implement Intelligent Transportation Systems (ITS). IoV provides a safe and secured vehicular environment by supporting V2V, V2I, V2S, and V2P. By employing an SDN controller, IoV networks can leverage centralized control and enhanced manageability, leading to the emergence of Software-Defined Internet of Vehicles (SD-IoV) as a promising solution for future communications. However, the SD-IoV networks introduces a potential vulnerability in the form of a single point of failure, particularly susceptible to Distributed Denial of Service (DDoS) attacks. This is because of the centralized nature of SDN and the dynamic nature of IoV. In this context, the SDN controller becomes a prime target for attackers who flood it with massive packet-in messages. To address this security concern, we propose an efficient and lightweight attack detection and mitigation scheme within the SDN controller. The scheme includes a detection module that utilizes entropy and flow rate to identify patterns indicative of attack traffic behavior. Additionally, a mitigation module is designed to minimize the effect of attack traffic on the normal operation, this is performed through analysis of payload lengths.The mitigation flow rule is set for specific traffic type if its payload is less than the threshold value to decrease the false positive rate. An adaptive threshold computation for all parameter values enhances the scheme's effectiveness. We conducted simulations using SUMO, Mininet-WiFi, and Scapy. We evaluated the system performance by using Mininet-wifi SDN simulation tool and Ryu controller for control plane. The system detects DDoS attack traffic within a single window by checking both entropy and flow rate simultaneously. The simulation results demonstrate the efficacy of our proposed scheme in terms of detection time, accuracy, mitigation efficiency, controller load, and link bandwidth consumption, showcasing its superiority compared to existing works in the field.

An SVM Based DDoS Attack Detection Method for Ryu SDN Controller

A Machine Learning Based Detection and Mitigation of the DDOS Attack by Using SDN Controller Framework

Intelligent DDoS Detection in Botnet Combined with Packet-Level Features under SDN

Using SVM to Detect DDoS Attack in SDN Network

A DDoS Attack Detection Method Based on SVM in Software Defined Network

A framework to detect DDoS attack in Ryu controller based software defined networks using feature extraction and classification

A comprehensive detection and mitigation mechanism to protect SD-IoV systems against controller-targeted DDoS attacks

DDoS Attack Detection and Classification Using Hybrid Model for Multicontroller SDN

Advanced Support Vector Machine- (ASVM-) Based Detection for Distributed Denial of Service (DDoS) Attack on Software Defined Networking (SDN)

A Detection Method For A Novel Ddos Attack Against Sdn Controllers By Vast New Low-Traffic Flows

Performance analysis of ODL and RYU controllers' against DDoS attack in software defined networks

DDoS Detection in SDN Switches Using Support Vector Machine Classifier

Deep Learning-Based Approach for Detecting DDoS Attack on Software-Defined Networking Controller

DDoS Attack Detection Method for Space-Based Network Based on SDN Architecture

DDoS attack detection in software defined networking controller using machine learning techniques

A hybrid method of entropy and SSAE-SVM based DDoS detection and mitigation mechanism in SDN

Attack detection analysis in software-defined networks using various machine learning method

A Deep Learning Based DDoS Detection System in Software-Defined Networking (SDN)

Research on DDoS Abnormal Traffic Detection Under SDN Network

DDoS Detection and Defense Mechanism for SDN Controllers with K-Means.

Detection of Distributed Denial of Service Attacks through a Combination of Machine Learning Algorithms over Software Defined Network Environment