arrow
返回

Detecting and Mitigating Target Link-Flooding Attacks Using SDN

delete2019-11-01
delete29
PRE
AI
王
王鹃 (Juan Wang) *
R
Ru Wen
J
Jiangqi Li
F
Fei Yan
B
Bo Zhao
F
Fajiang Yu
DOI:10.1109/TDSC.2018.2822275delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
DDoS attacks have caused very serious damage to enterprise networks. Recently, a new kind of DDoS attack called link-flooding attack (LFA), has surfaced and is already being used by attackers to flood and congest network critical links. LFA is very difficult to detect since adversaries often utilize large-scale legitimate low-speed flows and rolls target links to isolate target areas for launching attacks. To address such a critical security problem, we design and implement a novel LFA defense system called LFADefender that leverages some key features, such as programmability, network-wide view, and flow traceability, of an emerging network technology, Software-Defined Networking (SDN), to effectively detect and migrate LFA. In LFADefender, we propose a LFA target link selection approach and design a LFA congestion monitoring mechanism to effectively detect LFA. In addition, we present a multiple optional paths rerouting method to temporarily mitigate links congestion caused by LFA. We further propose a malicious traffic blocking approach to radically mitigate LFA. Our evaluation results show that LFADefender can accurately detect and rapidly mitigate LFA, but only imposes minimal overhead in the communication channels between network controllers and data planes.
Keyword:
Monitoring
Computer crime
Servers
Feature extraction
Network topology
Internet
Control systems
DDoS
link-flooding attack
SDN
flow tracing
bot identification
AI总结

AI总结

对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。

期刊

IEEE Transactions on Dependable and Secure Computing 封面图
IEEE Transactions on Dependable and Secure Computing
IF:
7.5
论文数:
2.5K
被引数:
9.6K

机构

W
wuhan university
学者数:
8.1W
论文数: 5.8W
被引数: 70
引用论文

引用论文

An autonomous 16 mm/sup 3/ solar-powered node for distributed wireless sensor networks用于分布式无线传感器网络的自治16毫米/sup3/太阳能节点
err2024-10-30
err0
PREAI
errB.A. Warneke; M.D. Scott; B.S. Leibowitz; Lixia Zhou; C.L. Bellew; J.A. Chediak; J.M. Kahn; B.E. Boser; K.S.J. Pister
err分享
err收藏
Exploring the salt–cocrystal continuum with solid-state NMR using natural-abundance samples: implications for crystal engineering
err2017-06-05
err0
errOAAI
errLalit Rajput; Manas Banik; Jayasubba Reddy Yarava; Sumy Joseph; Manoj Kumar Pandey; Yusuke Nishiyama; Gautam R. Desiraju
err分享
err收藏
AN OVERVIEW OF ROUTING OPTIMIZATION FOR INTERNET TRAFFIC ENGINEERING
err2008-01-01
err185
errOAAI
errWang, Ning; Ho, Kin Hon; Pavlou, George; Howarth, Michael
err分享
err收藏
CCCCXLVIII.—Potassium rheni-iodide
err1931-01-01
err0
PREAI
errHenry Vincent Aird Briscoe; Percy Lucock Robinson; Alfred John Rudge
err分享
err收藏
Hepatic protein kinase C: Translocation stimulated by prolactin and partial hepatectomy
err1987-12-01
err0
PREAI
errArthur R. Buckley; Charles W. Putnam; Ronald Evans; Hugh E. Laird; Gul N. Shah; David W. Montgomery; Diane Haddock Russell
err分享
err收藏
学者 查看更多内容