返回
ISDSDN: Mitigating SYN Flood Attacks in Software Defined Networks
DOI:10.1007/s10922-020-09540-1.png)
摘要
En 中文
Software defined networking (SDN) has emerged over the past few years as a novel networking technology that enables fast and easy network management. Separating the control plane and the data plane in SDNs allows for dynamic network management, implementation of new applications, and implementing network specific functions in software. This paper addresses the problem of SYN flood attacks in SDNs which are considered among the most challenging threats because their effect exceeds the targeted end system to the controller and TCAM of OpenFlow switches. These attacks exploit the three-way handshaking connection establishment mechanism in TCP, where attackers overwhelm the victim machine with flood of spoofed SYN packets resulting in a large number of half-open connections that would never complete. Therefore, degrading the performance of the controller and populating OpenFlow switches' TCAMs with spoofed entries. In this paper, we propose ISDSDN, a mechanism for SYN flood attack mitigation in software defined networks. The proposed mechanism adopts the idea of intentional dropping to distinguish between legitimate and attack SYN packets in the context of software defined networks. ISDSDN is implemented as an extension module of POX controller and is evaluated under different attack scenarios. Performance evaluation shows that the proposed mechanism is very effective in defending against SYN flood attacks.
Keyword:
DDoS
SDN
Network security
Intentional dropping
TCAM
AI总结
对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
IF:
3.9
论文数:
1.0K
被引数:
1.3K
机构
暂无机构信息
引用论文
A Survey on Software-Defined Network and OpenFlow: From Concept to Implementation软件定义网络与OpenFlow研究综述: 从概念到实现
Calculation of one-loop instanton determinants using propagators with space-time dependent mass使用时空依赖质量传播子计算单圈瞬子行列式
Relationship between the Kobayashi-Maskawa and Chau-Keung presentation of the quark mixing matrix小林-益川和周-康表述的夸克混合矩阵之间的关系

