Lightweight DDoS flooding attack detection using NOX/OpenFlow

Proceedings - Conference on Local Computer Networks, LCN

Volumn , Issue , 2010, Pages 408-415

  Braga, Rodrigo ^a   Mota, Edjard ^a   Passito, Alexandre ^a  

^a FEDERAL UNIVERSITY OF AMAZONAS   (Brazil)

Author keywords

Artificial Neural Networks; Network Security; Programmable Networks

Indexed keywords

ARTIFICIAL NEURAL NETWORK; DDOS ATTACK; DISTRIBUTED DENIAL OF SERVICE ATTACK; FALSE ALARMS; FLOODING ATTACKS; FLOW ANALYSIS; HARD TASK; HIGH RATE; INTERNET SECURITY; LOW OVERHEAD; LOW RATES; PROGRAMMABLE NETWORKS; TRAFFIC FLOW; WEB SERVERS;

INTERNET; PROGRAMMED CONTROL SYSTEMS; SELF ORGANIZING MAPS;

NETWORK SECURITY;

EID: 79955041204     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/LCN.2010.5735752     Document Type: Conference Paper

References (23)

1. "The stacheldraht ddos attack tool," 2009. [Online]. Available: http://staff.washington.edu/dittrich/misc/stacheldraht.analysis.txt
2. "Twitter hit by denial-of-service attack," 2009. [Online]. Available: http://www.cnn.com/2009/TECH/08/06/twitter.attack/index.html
3. N. McKeown, T. Anderson, H. Balakrishnan, G. Parulkar, L. Peterson, J. Rexford, S. Shenker, and J. Turner, "Openflow: enabling innovation in campus networks," SIGCOMM Comput. Commun. Rev., vol. 38, no. 2, pp. 69-74, 2008.
4. N. Gude, T. Koponen, J. Pettit, B. Pfaff, M. Casado, N. McKeown, and S. Shenker, "Nox: towards an operating system for networks," SIGCOMM Comput. Commun. Rev, vol. 38, no. 3, pp. 105-110, 2008.
5. Y. Feng, R. Guo, D.Wang, and B. Zhang, "Research on the Active DDoS Filtering Algorithm Based on IP Flow," in 2009 Fifth International Conference on Natural Computation. IEEE, 2009, pp. 628-632.
6. M. Kim, H. Kang, S. Hung, S. Chung, and J. Hong, "A flow-based method for abnormal network traffic detection," in IEEE/IFIP Network Operations and Management Symposium, 2004, pp. 599-612.
7. T. Kohonen, "The self-organizing map," Proceedings of the IEEE, vol. 78, no. 9, pp. 1464-1480, 1990.
8. M. Ramadas, S. Ostermann, and B. Tjaden, "Detecting anomalous network traffic with self-organizing maps," in Recent Advances in Intrusion Detection. Springer, 2003, pp. 36-54.
9. H. Gunes Kayacik, N. Zincir-Heywood et al., "A hierarchical SOM-based intrusion detection system," Engineering Applications of Artificial Intelligence, vol. 20, no. 4, pp. 439-451, 2007.
10. M. Li and W. Dongliang, "Anormaly Intrusion Detection Based on SOM," in Proceedings of the 2009 WASE International Conference on Information Engineering-Volume 01. IEEE Computer Society, 2009, pp. 40-43.
11. D. Jiang, Y. Yang, and M. Xia, "Research on Intrusion Detection Based on an Improved SOM Neural Network," in Proceedings of the 2009 Fifth International Conference on Information Assurance and Security-Volume 01. IEEE Computer Society, 2009, pp. 400-403.
12. M. Alsulaiman, A. Alyahya, R. Alkharboush, and N. Alghafis, "Intrusion Detection System Using Self-Organizing Maps," in 2009 Third International Conference on Network and System Security. IEEE, 2009, pp. 397-402.
13. A. Mitrokotsa and C. Douligeris, "Detecting denial of service attacks using emergent self-organizing maps," in Signal Processing and Information Technology, 2005. Proceedings of the Fifth IEEE International Symposium on, 2005, pp. 375-380.
14. C. Wang, H. Yu, and H. Wang, "Grey self-organizing map based intrusion detection," Optoelectronics Letters, vol. 5, no. 1, pp. 64-68, 2009.
15. W. Wang and S. Gombault, "Efficient Detection of DDoS Attacks with Important Attributes ," in CRISIS 2008, Third International Conference on Risks and Security on Internet and Systems, October 28-30, Tozeur, Tunisia. RSM - Dépt. Réseaux, Sécurité et Multimédia (Institut Télécom-Télécom Bretagne), DREAM research group - Diagnosing, REcommending Actions and Modelling (INRIA /IRISA Rennes), 2008.
16. S. Das, G. Parulkar, and N. McKeown, "Unifying Packet and Circuit Switched Networks," in Globecomm Workshop on Below IP Networking. IEEE, Nov. 2009. [Online]. Available: http://ieeexplore.ieee.org/lpdocs/epic03/ wrapper.htm?arnumber=5360777
17. "Openflow switch specification," 2010. [Online]. Available: http://www.openflowswitch.org/wp/documents/
18. S. Haykin, Neural networks: a comprehensive foundation. Prentice Hall PTR Upper Saddle River, NJ, USA, 1999.
19. Z.-P. Lo, M. Fujita, and B. Bavarian, "Analysis of neighborhood interaction in kohonen neural networks," in 6th International Parallel Processing Symposium, Los Alamitos, CA, 1991, pp. 246-249.
20. J. Mirkovic, S. Fahmy, P. Reiher, and R. K. Thomas, "How to test dos defenses," in CATCH '09: Proceedings of the 2009 Cybersecurity Applications & Technology Conference for Homeland Security. Washington, DC, USA: IEEE Computer Society, 2009, pp. 103-117.
21. P. Borgnat, G. Dewaele, K. Fukuda, P. Abry, and K. Cho, "Seven years and one day: Sketching the evolution of internet traffic," in INFOCOM 2009, IEEE, April 2009, pp. 711-719.
22. "Setting up a virtual testing environment," 2010. [Online]. Available: http://noxrepo.org/manual/vm environment.html
23. "Manual of wirefilter," 2010. [Online]. Available: http://www.linuxcertif.com/man/1/wirefilter/