SD-Anti-DDoS: Fast and efficient DDoS defense in software-defined networks

Journal of Network and Computer Applications

Volumn 68, Issue , 2016, Pages 65-79

  Cui, Yunhe ^a   Yan, Lianshan ^a   Li, Saifei ^a   Xing, Huanlai ^a   Pan, Wei ^a   Zhu, Jian ^b   Zheng, Xiaoyang ^b  

^a SOUTHWEST JIAOTONG UNIVERSITY   (China)

^b Centec Networks ^*  (China)

Author keywords

Detection; Distributed Denial of Service (DDoS); OpenFlow; Security; Software Defined Network (SDN); Traceback

Indexed keywords

ERROR DETECTION; HIERARCHICAL SYSTEMS; NETWORK SECURITY; SOFTWARE DEFINED NETWORKING; TIME SWITCHES; TRANSMISSION CONTROL PROTOCOL;

ATTACK DETECTION; DDOS MITIGATIONS; DISTRIBUTED DENIAL OF SERVICE; FLOW TABLES; OPENFLOW; SECURITY; SOFTWARE DEFINED NETWORKING (SDN); TRACEBACK;

DENIAL-OF-SERVICE ATTACK;

EID: 84964374650     PISSN: 10848045     EISSN: 10958592     Source Type: Journal    
DOI: 10.1016/j.jnca.2016.04.005     Document Type: Article

References (39)

1. Angiulli, F., Fassetti, F., 2003. Detecting distance-based outliers in streams of data. In: Proceedings of the Sixteenth ACM Conference on Information and Knowledge Management, ACM, pp. 811-820.
2. Answers about recent ddos attack on spamhaus, 2013. Website. < http://www.spamhaus.org/news/article/695 >.
3. Borgnat, P., Dewaele, G., Fukuda, K., Abry, P., Cho, K., 2009. Seven years and one day: sketching the evolution of internet traffic. In: Proceedings of INFOCOM, pp. 711-719.
4. A. Botta, A. Dainotti, and A. Pescap A tool for the generation of realistic network workload for emerging networking scenarios Comput. Netw. 56 October (15) 2012 3531 3547
5. Braga, R., Mota, E., Passito, A., 2010. A lightweight ddos flooding attack detection using nox/openflow. In: Proceedings of LCN, IEEE, pp. 408-415.
6. Bulut, A., Singh, A., 2005. A unified framework for monitoring data streams in real time. In: Proceedings of ICDE, IEEE, pp. 44-55.
7. Collings, J., Liu, J., 2014. An openflow-based prototype of sdn-oriented stateful hardware firewalls. In: Proceedings of ICNP, Raleigh, USA, IEEE, pp. 525-528.
8. G. Cormode, and S. Muthukrishnan What's new: finding significant differences in network data streams IEEE/ACM Trans. Netw. 13 6 2005 1219 1232
9. Francois, J., Festor, O., 2015. Anomaly traceback using software defined networking. In: 2015 National Conference on Parallel Computing Technologies (PARCOMPTECH), IEEE, pp. 203-208.
10. K. Giotis, C. Argyropoulos, G. Androulidakis, D. Kalogeras, and V. Maglaris Combining openflow and sflow for an effective and scalable anomaly detection and mitigation mechanism on sdn environments Comput. Netw. 62 April (7) 2014 122 136
11. Gu, Y., McCallum, A., Towsley, D., 2005. Detecting anomalies in network traffic using maximum entropy estimation. In: Proceedings of the 5th ACM SIGCOMM Conference on Internet Measurement, USENIX, pp. 32-32.
12. Jain, S., Kumar, A., Mandal, S., Ong, J., Poutievski, L., Singh, A., Venkata, S., Wanderer, J., Zhou, J., Zhu, M., Zolla, M., Holzle, U., Stuart, S., Vahda, A., 2013. B4: experience with a globally-deployed software defined wan. In: Proceedings of SIGCOMM, Hong Kong, China, ACM, pp. 3-14.
13. Jung, J., Schechter, S., Berger, A., 2004. Fast detection of scanning worm infections. In: Proceedings of RAID, Sophia Antipolis, France, Springer, pp. 59-81.
14. Kampanakis, P., Perros, H., Beyene, T., 2014. Sdn-based solutions for moving target defense network protection. In: Proceedings of WoWMoM, IEEE, 2014, pp. 1-6.
15. Kreutz, D., Ramos, F., Verissimo, P., 2013. Towards secure and dependable software-defined networks. In: Proceedings of the second ACM SIGCOMM workshop on Hot topics in software defined networking, ACM, pp. 55-60.
16. Lantz, B., Heller, B., McKeown, N., 2010. A network in a laptop: rapid prototyping for software-defined networks. In: Proc. Hotnets, Monterey, CA, USA, ACM, page 19.
17. Li, J., Berg, S., Zhang, M., Reiher, P., Wei, T., 2014. Drawbridge: software-defined ddos-resistant traffic engineering. In: Proceedings of SIGCOMM, Chicago, USA, ACM, pp. 591-592.
18. T. Luo, H.P. Tan, and T.Q.S. Quek Sensor openflow: enabling software-defined wireless sensor networks IEEE Commun. Lett. 16 November (11) 2012 1896 1899
19. Mahoney, M., 2003. Network traffic anomaly detection based on packet bytes. In: Proceedings of the 2003 ACM Symposium on Applied Computing, ACM, pp. 346-350.
20. N. McKeown, T. Anderson, H. Balakrishnan, G. Parulkar, L. Peterson, J. Rexford, S. Shenker, and J. Turner Openflow: enabling innovation in campus networks ACM SIGCOMM Comput. Commun. Rev. 35 April (2) 2008 69 74
21. Mehdi, S., Khalid, J., Khayam, S., 2011. Revisiting traffic anomaly detection using software defined networking. In: Proceedings of RAID, Menlo Park, USA, Springer, pp. 165-180.
22. Miao, R., Yu, M., Jain, N., 2014. Nimbus: cloud-scale attack detection and mitigation. In: Proceedings of SIGCOMM, Chicago, IL, USA, ACM, pp. 121-122.
23. Mininet: an instant virtual network on your laptop. Website. < http://mininet.org/ >.
24. J. Mirkovic, and P. Reiher A taxonomy of ddos attack and ddos defense mechanisms ACM SIGCOMM Comput. Commun. Rev. 34 April (2) 2014 39 53
25. Peng Xiao, Wenyu Qu, Heng Qu, and Zhiyang Li Detecting ddos attacks against data center with correlation analysis Comput. Commun. 67 August (1) 2015 66 74
26. D. Rumelhart, G. Hinton, and R. Williams Learning representations by back-propagating errors Nature 323 October (2) 1986 533 536
27. Ryu sdn framework. Website. < http://osrg.github.io/ryu/ >.
28. S. Sezer, S. Scott-Hayward, P. Chouhan, B. Fraser, D. Lake, J. Finnegan, N. Viljoen, M. Miller, and N. Rao Are we ready for sdn? Implementation challenges for software-defined networks IEEE Commun. Mag. 51 July (7) 2013 36 43
29. Shin, S., Gu, G., 2013. Attacking software defined networks: a first feasibility study. In: Proceedings of HotSDN, Hong Kong, China, ACM, pp. 165-166.
30. Shin, S., Yegneswaran, V., Porras, P., Gu, G., 2013. Avant-guard: scalable and vigilant switch flow management in software-defined networks. In: Proceedings of CCS, Berlin, Germany, ACM, pp. 413-424.
31. Software-defined networking: the new norm for networks. Website. < https://www.opennetworking.org/ >.
32. The openflow specification version 1.0.0. Website. < https://www.opennetworking.org/ >.
33. Twycross, J., Williamson, M., 2003. Implementing and testing a virus throttle. In: Proceedings of the 12th Conference on USENIX Security Symposium, Washington, DC, USA, USENIX, pp. 20-20.
34. Vlachos, M., Meek, C., Vagena, Z., Gunopulos, D., 2004. Identifying similarities, periodicities and bursts for online search queries. In: Proceedings of SIGMOD, ACM, pp. 131-142.
35. B. Wang, Y. Zheng, and W. Lou Ddos attack protection in the era of cloud computing and software-defined networking Comput. Netw. 81 April (22) 2015 308 319
36. Y. Wang, H. Chen, X. Wu, and L. Shu An energy-efficient sdn based sleep scheduling algorithm for wsns J. Netw. Comput. Appl. 59 January 2016 39 45
37. Q. Yan, and F. Yu Distributed denial of service attacks in software-defined networking with cloud computing IEEE Commun. Mag. 53 April (4) 2015 52 59
38. Zhang, H., Reich, J., Rexford, J., 2015. Packet traceback for software defined networks (Master's thesis). Princeton University.
39. Zhu, Y., Shasha, D., 2003. Efficient elastic burst detection in data streams. In: Proceedings of SIGKDD, ACM, pp. 336-345.