A Research Review on SDN-Based DDOS Attack Detection

DOI

10.2991/msmi-17.2017.33How to use a DOI?

Keywords

component; software definition network (SDN); distributed denial of service (DDOS); OpenFlow; entropy; machine learning

Abstract

Software definition network (SDN) is a new network architecture, which can realize centralized control of the network by separating the control plane and the data plane. With the introduction of the control plane as a manager of the network, a single point of failure is introduced too. When the network device cannot get access to the SDN controller, the entire network will breakdown. The controller is vulnerable to distributed denial of service (DDOS) attacks, resulting in resource exhaustion, so that the switch cannot get the services of controller. In this paper, different DDOS attack methods are classified according to the different levels of attack and detection positions, and the methods are analyzed and compared. Finally, the problems of DDOS attack detection in SDN are discussed and the potentials for further research are presented.

Copyright

© 2017, the Authors. Published by Atlantis Press.

Open Access

This is an open access article distributed under the CC BY-NC license (http://creativecommons.org/licenses/by-nc/4.0/).

Download article (PDF)

TY  - CONF
AU  - Weidong Zhu
AU  - Xiujuan Yi
PY  - 2017/06
DA  - 2017/06
TI  - A Research Review on SDN-Based DDOS Attack Detection
BT  - Proceedings of the 2017 International Conference on Management Science and Management Innovation (MSMI 2017)
PB  - Atlantis Press
SP  - 145
EP  - 149
SN  - 2352-5428
UR  - https://doi.org/10.2991/msmi-17.2017.33
DO  - 10.2991/msmi-17.2017.33
ID  - Zhu2017/06
ER  -