Journal of Northeastern University Natural Science ›› 2020, Vol. 41 ›› Issue (9): 1217-1222.DOI: 10.12068/j.issn.1005-3026.2020.09.001

• Information & Control •     Next Articles

Efficient Joint Detection and Defense Mechanism for DDoS Attack in SDN

ZENG Rong-fei1, GAO Yuan2, WANG Xing-wei2, ZHANG Bang2   

  1. 1.School of Software, Northeastern University, Shenyang 110169, China; 2.School of Computer Science & Engineering, Northeastern University, Shenyang 110169, China.
  • Received:2019-09-30 Revised:2019-09-30 Online:2020-09-15 Published:2020-09-15
  • Contact: WANG Xing-wei
  • About author:-
  • Supported by:
    -

Abstract: In order to defend against the DDoS attacks for SDN(software-defined networking) controller, this paper proposed an efficient joint detection and defense mechanism. The joint detection part adopted the combination of improved self-organizing mapping algorithm and multidimensional conditional entropy algorithm. By combining the two methods, the purpose of joint detection was achieved. The joint defense part includes a conventional defense module and a fast defense module, which adopts different defense strategies for different detection results by adjusting the priority. Extensive experimental results showed that the joint detection mechanism can achieve a detection rate of 95.2%, and the response time of the joint defense mechanism to the controller can be reduced by 0.11s on average, compared with the single defense mechanism.

Key words: software-defined networking, distributed denial of service attack, improved self-organizing mapping algorithm, multidimensional conditional entropy algorithm, priority

CLC Number: