返回
Cyberpulse: A Machine Learning Based Link Flooding Attack Mitigation System for Software Defined Networks
DOI:10.1109/ACCESS.2019.2904236.png)
摘要
En 中文
Software-defined networking (SDN) offers a novel paradigm for effective network management by decoupling the control plane from the data plane thereby allowing a high level of manageability and programmability. However, the notion of a centralized controller becomes a bottleneck by opening up a host of vulnerabilities to various types of attacks. One of the most harmful, stealthy, and easy to launch attacks against networked systems is the link flooding attack (LFA). In this paper, we demonstrate the vulnerability of the SDN control layer to LFA and how the attack strategy differs when targeting traditional networks which primarily involves attacking the links directly. In LFA, the attacker employs bots to surreptitiously send low rate legitimate traffic on the control channel which ultimately results in disconnecting control plane from the data plane. Mitigating LFA on the control channel remains a challenge in the network security paradigm with the use of network traffic filtering only. To address this challenge, we propose CyberPulse, a novel effective countermeasure, underpinning a machine learning-based classifier to alleviate LFA in SDN. CyberPulse performs network surveillance by classifying network traffic using deep learning techniques and is implemented as an extension module in the Floodlight controller. CyberPulse was evaluated for its accuracy, false positive rate, and effectiveness as compared to competing approaches on realistic networks generated using Mininet. The results show that CyberPulse can classify malicious flows with high accuracy and mitigate them effectively.
Keyword:
Link flooding attacks
SDN security
OpenFlow
deep learning
AI总结
对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
IF:
3.6
论文数:
9.8W
被引数:
29.4W
机构
引用论文
An autonomous 16 mm/sup 3/ solar-powered node for distributed wireless sensor networks用于分布式无线传感器网络的自治16毫米/sup3/太阳能节点
A Survey on Software-Defined Network and OpenFlow: From Concept to Implementation软件定义网络与OpenFlow研究综述: 从概念到实现
Reaction of metal—metal triply-bonded dimers [η5-RC5H4(CO)2Mo]2 with (μ-R′S)2Fe2(CO)6. Synthesis and structural characterization of (η5-RC5H4)2Mo2Fe(μ3-S)(CO)7, (η5-RC5H4)2Mo4(μ3-S)2(μ-CO)4 and [η5-RC5H4Mo(Co)(μ-SPh)]2
Polyhedron
IF0

