Effectiveness of an Entropy-Based Approach for Detecting Low- and High-Rate DDoS Attacks against the SDN Controller: Experimental Analysis

被引:22
作者
Aladaileh, Mohammad Adnan [1 ]
Anbar, Mohammed [1 ]
Hintaw, Ahmed J. [2 ]
Hasbullah, Iznan H. [1 ]
Bahashwan, Abdullah Ahmed [1 ]
Al-Amiedy, Taief Alaa [1 ]
Ibrahim, Dyala R. [3 ]
机构
[1] Univ Sains Malaysia, Natl Adv IPv6 Ctr Excellence, Gelugor 11800, Malaysia
[2] Alsafwa Univ Coll, Dept Comp Tech Engn, Karbala, Iraq
[3] Amman Arab Univ, Cyber Secur Dept, Amman 11953, Jordan
来源
APPLIED SCIENCES-BASEL | 2023年 / 13卷 / 02期
关键词
software-defined networking; entropy; attack detection; controller; dynamic threshold; static threshold; distributed denial of service; DEFINED NETWORKING CONTROLLER;
D O I
10.3390/app13020775
中图分类号
O6 [化学];
学科分类号
0703 ;
摘要
Software-defined networking (SDN) is a unique network architecture isolating the network control plane from the data plane, offering programmable elastic features that allow network operators to monitor their networks and efficiently manage them. However, the new technology is security deficient. A DDoS attack is one of the common attacks that threaten SDN controllers, leading to the degradation or even collapse of the entire SDN network. Entropy-based approaches and their variants are considered the most efficient approaches to detecting DDoS attacks on SDN controllers. Therefore, this work analyzes the feasibility and impacts of an entropy-based DDoS attack detection approach for detecting low-rate and high-rate DDoS attacks against the controller, measured in terms of detection rate (DR) and false-positive rate (FPR), triggered by a single or multiple host attacks targeting a single or multiple victims. Eight simulation scenarios, representing low and high DDoS attack traffic rates on the controller, have been used to evaluate an entropy-based DDoS attack detection approach. The experimental results reveal that the entropy-based approach enhances the average DR for detecting high-rate DDoS attack traffic compared with low-rate DDoS attack traffic by 6.25%, 20.26%, 6.74%, and 8.81%. In addition, it reduces the average FPRs for detecting a high DDoS attack traffic rate compared with a low DDoS attack traffic rate by 67.68%, 77.54%, 66.94%, and 64.81.
引用
收藏
页数:12
相关论文
共 26 条
[1]   Scalability, Consistency, Reliability and Security in SDN Controllers: A Survey of Diverse SDN Controllers [J].
Ahmad, Suhail ;
Mir, Ajaz Hussain .
JOURNAL OF NETWORK AND SYSTEMS MANAGEMENT, 2021, 29 (01)
[2]   Proposed statistical-based approach for detecting distribute denial of service against the controller of software defined network (SADDCS) [J].
AL-Adaileh, Mohammad A. ;
Anbar, Mohammed ;
Chong, Yung-Wey ;
Al-Ani, Ahmed .
1ST INTERNATIONAL CONFERENCE ON INDUSTRIAL, ELECTRICAL AND ELECTRONICS (ICIEE 2018), 2018, 218
[3]   A Systematic Literature Review on Machine and Deep Learning Approaches for Detecting Attacks in RPL-Based 6LoWPAN of Internet of Things [J].
Al-Amiedy, Taief Alaa ;
Anbar, Mohammed ;
Belaton, Bahari ;
Kabla, Arkan Hammoodi Hasan ;
Hasbullah, Iznan H. ;
Alashhab, Ziyad R. .
SENSORS, 2022, 22 (09)
[4]   Entropy-Based Approach to Detect DDoS Attacks on Software Defined Networking Controller [J].
Aladaileh, Mohammad ;
Anbar, Mohammed ;
Hasbullah, Iznan H. ;
Sanjalawe, Yousef K. ;
Chong, Yung-Wey .
CMC-COMPUTERS MATERIALS & CONTINUA, 2021, 69 (01) :373-391
[5]   Information theory-based approaches to detect DDoS attacks on software-defined networking controller a review [J].
Aladaileh, Mohammad A. ;
Anbar, Mohammed ;
Hasbullah, Iznan H. ;
Sanjalawe, Yousef K. .
INTERNATIONAL JOURNAL OF EDUCATION AND INFORMATION TECHNOLOGIES, 2021, 15 :83-94
[6]   Detection Techniques of Distributed Denial of Service Attacks on Software-Defined Networking Controller-A Review [J].
Aladaileh, Mohammad A. ;
Anbar, Mohammed ;
Hasbullah, Iznan H. ;
Chong, Yung-Wey ;
Sanjalawe, Yousef K. .
IEEE ACCESS, 2020, 8 :143985-143995
[7]   Renyi Joint Entropy-Based Dynamic Threshold Approach to Detect DDoS Attacks against SDN Controller with Various Traffic Rates [J].
Aladaileh, Mohammad Adnan ;
Anbar, Mohammed ;
Hintaw, Ahmed J. ;
Hasbullah, Iznan H. ;
Bahashwan, Abdullah Ahmed ;
Al-Sarawi, Shadi .
APPLIED SCIENCES-BASEL, 2022, 12 (12)
[8]   Dynamic Threshold-Based Approach to Detect Low-Rate DDoS Attacks on Software-Defined Networking Controller [J].
Aladaileh, Mohammad Adnan ;
Anbar, Mohammed ;
Hasbullah, Iznan H. ;
Bahashwan, Abdullah Ahmed ;
Al-Sarawn, Shadi .
CMC-COMPUTERS MATERIALS & CONTINUA, 2022, 73 (01) :1403-1416
[9]   A Flexible SDN-Based Architecture for Identifying and Mitigating Low-Rate DDoS Attacks Using Machine Learning [J].
Arturo Perez-Diaz, Jesus ;
Amezcua Valdovinos, Ismael ;
Choo, Kim-Kwang Raymond ;
Zhu, Dakai .
IEEE ACCESS, 2020, 8 :155859-155872
[10]  
Bahashwan Abdullah Ahmed, 2021, Advances in Cyber Security: Third International Conference, ACeS 2021, Penang, Malaysia, August 24-25, 2021, Revised Selected Papers. Communications in Computer and Information Science (1487), P401, DOI 10.1007/978-981-16-8059-5_25