arrow
Return

Detecting and Mitigating Target Link-Flooding Attacks Using SDN

delete2019-11-01
delete29
PRE
AI
王
王鹃 (Juan Wang) *
R
Ru Wen
J
Jiangqi Li
F
Fei Yan
B
Bo Zhao
F
Fajiang Yu
DOI:10.1109/TDSC.2018.2822275delete
deleteOriginal
deleteOriginal request for help
deleteShare
deleteSave
Abstract

Abstract

En 中文
DDoS attacks have caused very serious damage to enterprise networks. Recently, a new kind of DDoS attack called link-flooding attack (LFA), has surfaced and is already being used by attackers to flood and congest network critical links. LFA is very difficult to detect since adversaries often utilize large-scale legitimate low-speed flows and rolls target links to isolate target areas for launching attacks. To address such a critical security problem, we design and implement a novel LFA defense system called LFADefender that leverages some key features, such as programmability, network-wide view, and flow traceability, of an emerging network technology, Software-Defined Networking (SDN), to effectively detect and migrate LFA. In LFADefender, we propose a LFA target link selection approach and design a LFA congestion monitoring mechanism to effectively detect LFA. In addition, we present a multiple optional paths rerouting method to temporarily mitigate links congestion caused by LFA. We further propose a malicious traffic blocking approach to radically mitigate LFA. Our evaluation results show that LFADefender can accurately detect and rapidly mitigate LFA, but only imposes minimal overhead in the communication channels between network controllers and data planes.
Keywords:
Monitoring
Computer crime
Servers
Feature extraction
Network topology
Internet
Control systems
DDoS
link-flooding attack
SDN
flow tracing
bot identification
AI Summary

AI Summary

Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.

Journal

IEEE Transactions on Dependable and Secure Computing cover
IEEE Transactions on Dependable and Secure Computing
IF:
7.5
Papers:
2.5K
Citations:
9.6K

Organization

W
wuhan university
Scholars:
8.1W
Papers: 5.8W
Citations: 70
Cited Papers

Cited Papers

An autonomous 16 mm/sup 3/ solar-powered node for distributed wireless sensor networks
err2024-10-30
err0
PREAI
errB.A. Warneke; M.D. Scott; B.S. Leibowitz; Lixia Zhou; C.L. Bellew; J.A. Chediak; J.M. Kahn; B.E. Boser; K.S.J. Pister
errShare
errSave
Exploring the salt–cocrystal continuum with solid-state NMR using natural-abundance samples: implications for crystal engineering
err2017-06-05
err0
errOAAI
errLalit Rajput; Manas Banik; Jayasubba Reddy Yarava; Sumy Joseph; Manoj Kumar Pandey; Yusuke Nishiyama; Gautam R. Desiraju
errShare
errSave
AN OVERVIEW OF ROUTING OPTIMIZATION FOR INTERNET TRAFFIC ENGINEERING
err2008-01-01
err185
errOAAI
errWang, Ning; Ho, Kin Hon; Pavlou, George; Howarth, Michael
errShare
errSave
CCCCXLVIII.—Potassium rheni-iodide
err1931-01-01
err0
PREAI
errHenry Vincent Aird Briscoe; Percy Lucock Robinson; Alfred John Rudge
errShare
errSave
Hepatic protein kinase C: Translocation stimulated by prolactin and partial hepatectomy
err1987-12-01
err0
PREAI
errArthur R. Buckley; Charles W. Putnam; Ronald Evans; Hugh E. Laird; Gul N. Shah; David W. Montgomery; Diane Haddock Russell
errShare
errSave
researcher View more