A multi-criteria-based DDoS-attack prevention solution using software defined networking

International Conference on Advanced Technologies for Communications

Volumn 2016-January, Issue , 2016, Pages 308-313

  Van Trung, Phan ^a   Huong, Truong Thu ^a   Van Tuyen, Dang ^a   Duc, Duong Minh ^a   Thanh, Nguyen Huu ^a   Marshall, Alan ^b  

^a HANOI UNIVERSITY OF SCIENCE AND TECHNOLOGY   (Viet Nam)

^b UNIVERSITY OF LIVERPOOL   (United Kingdom)

Author keywords

DDoS attack; Fuzzy Logic; OpenFlow SDN

Indexed keywords

FUZZY INFERENCE; FUZZY LOGIC; NETWORK ARCHITECTURE; NETWORK SECURITY; SOFTWARE DEFINED NETWORKING;

ATTACK PREDICTION; ATTACK PREVENTION; ATTRACTIVE SOLUTIONS; DDOS ATTACK; DISTRIBUTED DENIAL OF SERVICE ATTACK; FUZZY INFERENCE SYSTEMS; OPENFLOW; SOFTWARE DEFINED NETWORKING (SDN);

DENIAL-OF-SERVICE ATTACK;

EID: 84961827987     PISSN: 21621039     EISSN: 21621020     Source Type: Conference Proceeding    
DOI: 10.1109/ATC.2015.7388340     Document Type: Conference Paper

References (21)

1. "Software Defined Networking Definition", 2015. [Online]. Available: https: //opennetworking.org/sdn-resources/sdn-definition
2. http: //archive. openflow.org/documents/openflow-wp-latest. pdf
3. Jin C, Wang HN, Shin KG, "Hop-count filtering: An effective defense against spoofed DDoS traffic", Proceedings of the 10th ACM Conference on Computer and Communication Security (CCS), ACM Press, pp 30-41, 2003.
4. Javed Ashraf, Seemab Latif, "Handling Intrusion and DDoS Attacks in Software Defined Networks Using Machine Learning Techniques", Software Engineering Conference (NSEC), pp. 55-60, Rawalpindi, Nov 2014.
5. S. X. Wu and W. Banzhaf. The use of computational intelligence in intrusion Prevention systems: A review. Applied Soft Computing, 10: 1-35, 2010.
6. Y. Kim, J. Y. Jo, and K. K. Suh, "Baseline profile stability for network anomaly detection", International Journal of Network Security, vol. 6, No. 1, pp. 60-66, Jan 2008.
7. O. Salem, S. Vaton, and A. Gravey. An efficient online anomalies Prevention mechanism for high-speed networks. In IEEE Workshop on Monitoring, Attack Prevention and Migitation (MonAM 2007), November 2007.
8. Thottan, M. and Ji, C. Y., "Anomaly Detection in IP networks, " IEEE Transactions on Signal Processing, vol. 51, no. 8, pp. 2191-2204, Aug. 2003.
9. Saurabh Ratnaparikhi, Anup Bhange. "DDOS Attacks on Network; Anomaly Prevention using Statistical Algorithm", International Journal of Advanced Research in Computer Science and Software Engineering, vol 2, December 2012.
10. Xinlei Ma, Yonghong Chen, "DDoS Prevention Method Based on Chaos Analysis of Network Traffic Entropy", IEEE Communication Letters, Vol. 18, No. 1, pp. 114-117, January 2014.
11. L. Feinstein and D. Schnackenberg, "Statistical approaches to ddos attack Prevention and response, " in Proceedings of the DARPA Information Survivability Conference and Exposition, pp. 303-314, 2003.
12. Z. Duan, X. Yuan, J. Chandrashekar, Controlling IP spoofing through interdomain packet filters, IEEE Trans. on Dependable and Secure, Computing, vol. 5, pp. 22-36, 2008.
13. F. Yi, S. Yu, W. Zhou, J. Hai, A. Bonti, Source-based filtering algorithm against DDoS attacks, International Journal of Database Theory and Application, vol. 1, pp. 9-20, 2008.
14. D. Moore, C. Shannon, D. J. Brown, G. M. Voelker, and S. Savage, Inferring internet denial-of-service activity, ACM Transactions on Computer Systems, vol. 24, no. 2, pp. 115-139, 2006.
15. S. Ostermann, B. Tjaden M. Ramadas, "Detecting anamalous network traffic with self-organizing maps, " Recent Advances in Intrusion Prevention, pp. 36-54, 2003.
16. E. Mota, A. Passito R. Braga, "Lightwight DDoS flooding attack Prevention usingNOX/Openflow, " IEEE 35th conference on Local Computer Networks, 2010, pp. 408-415.
17. Serge Guillaume, "Designing Fuzzy Inference Systems from Data: An Interpretability-Oriented Review", IEEE Transactions on Fuzzy Systems, Vol. 9, No. 3, June 2001.
18. Kovacic Z., Bogdan S., "Fuzzy Controller Design. Theory and application", Taylor & Francis Group, Network, 2006.
19. Kamyar Mehran, Takagi-Sugeno Fuzzy Modeling for Process Control, CA: Newcastle University, 2008.
20. https: //www. juniper. net/documentation/en-US/junos13. 2/topics/conce pt/port-mirroring-qfx-series-understanding. html
21. Dileep Kumar G et al., "A Survey on Defense Mechanisms countering DDoS Attacks in the Network", International Journal of Advanced Research in Computer and Communication Engineering, ISSN: 2319-5940, Vol. 2, Issue 7, July 2013, p 2599-2606.