DDoS Attack Detection in Software Defined Networks by Various Metrics

被引：1
作者：
Saadallah N.R. [1 ]
Al-Talib S.A.A. [1 ]
Malallah F.L. [1 ]
机构：
[1] Computer and Information Department, College of Electronics Engineering, Ninevah University, Mosul
来源：
Recent Patents on Engineering | 2022年 / 16卷 / 02期
关键词：
centralized control networks; controller plane; data plane; detection software; distributed denial of service attack; Software-defined networks;
D O I：
10.2174/1872212115666210714143008
中图分类号：
学科分类号：
摘要：
Background: Software-Defined Networks (SDNs) are a new architectural approach to smart centralized control networks that were introduced alongside Open Flow in 2011. SDNs are programmed using software applications that help operators manage the network in a fully consistent and comprehensive way. Centralization in these networks is considered a weakness, especially if it is accessed by a Distributed Denial of Service (DDoS) attack-which is the process of uploading huge floods of various sorts of traffic to a website, from multiple sources, in order to make it and its services inaccessible to users. Methods: In our current research, we will build an SDN through a Mininet virtualization simulator, and by using Python. A DDoS attack will be detected depending on two facts: firstly, Traffic State-which normally sees traffic packets sent at around 30 packets per second (DDoS packets are about 250 packets per second and will completely disrupt the network if the attack persists). Secondly, the number of IP Hits. The method used in the research appears very effective in detecting DDoS, according to the results we have achieved. Results: The proposed performance of the system: The Precision (PREC), Recall (REC), and F-Measure (F1) metrics have been used for assessment. Conclusion: The novelty of the current research lies in the detection of penetration in SDN networks, by calculating the number of hits by the hacker's device and the number of times they enter the main device in the network, in addition to the large amount of data sent by the hacker's device to the network. The experimental results are promising as compared with the datasets like CIC-DoS, CI-CIDS2017, CSE-CIC-IDS2018, and customized dataset. The results ranged between 90% and 96%. © 2022 Bentham Science Publishers.
引用
收藏
相关论文
共 29 条
  • [1] Stallings William, Foundations of modern networking SDN, NFV, QoE, IoT, and cloud, (2016)
  • [2] Ahuja N., Singal G., DDOS attack detection & prevention in sdn using openflow statistics, IEEE 9th International Conference on Advanced Computing (IACC), pp. 147-152, (2019)
  • [3] Wickboldt JA, De Jesus WP, Isolani PH, Both CB, Rochol J, Granville LZ, Software-defined networking: management requirements and challenges, IEEE Communications Magazine, 53, 1, pp. 278-285, (2016)
  • [4] Isolani Pedro H., Wickboldt Juliano A., Cristiano B., Juergen Rochol, Granville Lisandro Z., Interactive monitoring, visualization, and configuration of OpenFlow-based SDN, IFIP/IEEE International Symposium on Integrated Network Management (IM), pp. 207-215, (2015)
  • [5] Nishtha M.S., Software defined network – Architectures, International Conference Distributed and Grid Computing (PDGC), pp. 451-456, (2014)
  • [6] Haleplidis Evangelos, Pentikousis Kostas, Denazis Spyros, Salim Jamal, Meyer David, Koufopavlou Odysseas, RFC 7426: Software-Defined Networking (SDN): Layers and Architecture Terminology, (2015)
  • [7] Lantz B., Heller B., Keown Mc., A network in a laptop: rapid prototyping for software-defined networks, Proceedings of the 9th ACM SIGCOMM Workshop on Hot Topics in Networks, (2010)
  • [8] Saravanan K., Asokan R., Distributed Denial of Service (DDOS) attacks detection mechanism, Int. J. Comput. Sci. Eng. Info. Technol. (IJCSEIT), 1, 5, (2011)
  • [9] Behal S., Kumar K., Sachdeva M., D-face: an anomaly based distributed approach for early detection of DDoS attacks and flash events, J. Netw. Comput. Appl, 111, pp. 49-63, (2018)
  • [10] de Lima Filho Francisco Sales, A. F. Silveira Frederico, de Medeiros Brito Junior Agostinho, Vargas-Solar Genoveva, and F. Silveira Luiz, "Smart Detection: An Online Approach for DoS/DDoS Attack Detection Using Machine Learning, Secur. Commun. Netw., Hindawi, 2019, (2019)
123