.png){kind=icon}
返回
Defending Against Flow Table Overloading Attack in Software-Defined Networks
.png){kind=icon}
PRE
AI
DOI：10.1109/TSC.2016.2602861.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
The Software-Defined Network (SDN) is a new and promising network architecture. At the same time, SDN will surely become a new target of cyber attackers. In this paper, we point out one critical vulnerability in SDNs, the size of flow table, which is most likely to be attacked. Due to the expensive and power-hungry features of Ternary Content Addressable Memory (TCAM), a flow table usually has a limited size, which can be easily disabled by a flow table overloading attack (a transformed DDoS attack). To provide a security service in SDN, we proposed a QoS-aware mitigation strategy, namely, peer support strategy, which integrates the available idle flow table resource of the whole SDN system to mitigate such an attack on a single switch of the system. We established a practical mathematical model to represent the studied system, and conducted a thorough analysis for the system in various circumstances. Based on our analysis, we found that the proposed strategy can effectively defeat the flow table overloading attacks. Extensive simulations and testbed-based experiments solidly support our claims. Moreover, our work also shed light on the implementation of SDN networks against possible brute-force attacks.
Keyword:
SDN security
DDoS attacks
QoS
security service
flow table
AI总结
对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
IF:
5.8
论文数:
2.2K
被引数:
6.5K
机构
暂无机构信息
引用论文
Hydrogenation of cyclohexene catalyzed by ruthenium nitrosyl complexes: Crystal structures of catalyst precursors [Cp∗Ru(μ2-NO)2RuCp∗] and [Cp∗Ru(NO)(η2-C6H10)] (Cp∗= η5-C5(CH3)5).png)
Polyhedron
PolyhedronIF0
PREAI
分享收藏An autonomous 16 mm/sup 3/ solar-powered node for distributed wireless sensor networks用于分布式无线传感器网络的自治16毫米/sup3/太阳能节点
PREAI
分享收藏分享收藏
分享收藏FireCol: A Collaborative Protection Network for the Detection of Flooding DDoS AttacksFrecol: 一种用于检测洪泛DDoS攻击的协作保护网络
OAAI
OAAI分享收藏
查看更多内容