arrow
返回

ISDSDN: Mitigating SYN Flood Attacks in Software Defined Networks

delete2020-06-04
delete7
PRE
AI
B
Basheer Al‐Duwairi *
E
Eslam Al-Quraan
Y
Yazeed AbdelQader
DOI:10.1007/s10922-020-09540-1delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
Software defined networking (SDN) has emerged over the past few years as a novel networking technology that enables fast and easy network management. Separating the control plane and the data plane in SDNs allows for dynamic network management, implementation of new applications, and implementing network specific functions in software. This paper addresses the problem of SYN flood attacks in SDNs which are considered among the most challenging threats because their effect exceeds the targeted end system to the controller and TCAM of OpenFlow switches. These attacks exploit the three-way handshaking connection establishment mechanism in TCP, where attackers overwhelm the victim machine with flood of spoofed SYN packets resulting in a large number of half-open connections that would never complete. Therefore, degrading the performance of the controller and populating OpenFlow switches' TCAMs with spoofed entries. In this paper, we propose ISDSDN, a mechanism for SYN flood attack mitigation in software defined networks. The proposed mechanism adopts the idea of intentional dropping to distinguish between legitimate and attack SYN packets in the context of software defined networks. ISDSDN is implemented as an extension module of POX controller and is evaluated under different attack scenarios. Performance evaluation shows that the proposed mechanism is very effective in defending against SYN flood attacks.
Keyword:
DDoS
SDN
Network security
Intentional dropping
TCAM
AI总结

AI总结

对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。

期刊

Journal of Network and Systems Management 封面图
Journal of Network and Systems Management
IF:
3.9
论文数:
1.0K
被引数:
1.3K

机构

暂无机构信息
引用论文

引用论文

The Crystal Structure of Imidotetraphenyldithiodiphosphinic Acid, a Compound with an N--H...S Hydrogen Bond.
err1983-01-01
err0
errOAAI
errSteinar Husebye; Knut Maartmann-Moe; T. Østvold; Harald Høiland; D. L. Powell; R. Suchi
err分享
err收藏
err分享
err收藏
err分享
err收藏
Software-Defined Networking: A Comprehensive Survey软件定义网络: 综合调查
err2015-01-01
err3.5K
errOAAI
errKreutz, Diego; Ramos, Fernando M. V.; Verissimo, Paulo Esteves; Rothenberg, Christian Esteve; Azodolmolky, Siamak; Uhlig, Steve
err分享
err收藏
学者 查看更多内容