Robust dynamic network traffic partitioning against malicious attacks

Bing Xiong

doi:10.1016/j.jnca.2016.04.013

Robust dynamic network traffic partitioning against malicious attacks

2017-06-01

57

OA

AI

DOI：10.1016/j.jnca.2016.04.013

Original

Save

View PDF

Abstract

En 中文

The continual growth of network traffic rates leads to heavy packet processing overheads, and a typical solution is to partition traffic into multiple network processors for parallel processing especially in emerging software-defined networks. This paper is thus motivated to propose a robust dynamic network traffic partitioning scheme to defend against malicious attacks. After introducing the conceptual framework of dynamic network traffic partitioning based on flow tables, we strengthen its TCP connection management by building a half-open connection separation mechanism to isolate false connections in the initial connection table (ICT). Then, the lookup performance of the ICT table is reinforced by applying counting bloom filters to cope with malicious behaviors such as SYN flooding attacks. Finally, we evaluate the performance of our proposed traffic partitioning scheme with real network traffic traces and simulated malicious traffic by experiments. Experimental results indicate that our proposed scheme outperforms the conventional ones in terms of packet distribution performance especially robustness against malicious attacks. (C) 2016 Elsevier Ltd. All rights reserved.

Keywords:

Dynamic traffic partitioning

SYN flooding attacks

Half-open connection separation

Counting bloom filters

Robust dynamic network traffic partitioning against malicious attacks

Abstract

AI Summary

Journal

Organization