Adaptive suspicious prevention for defending DoS attacks in SDN-based convergent networks

PLoS ONE

Volumn 11, Issue 8, 2016, Pages

  Dao, Nhu Ngoc ^a   Kim, Joongheon ^a   Park, Minho ^b   Cho, Sungrae ^a  

^a Chung Ang University   (South Korea)

^b Soongsil University   (South Korea)

Author keywords

[No Author keywords available]

Indexed keywords

BRAIN; COMPUTER PROGRAM; EXPERIMENTAL MODEL; ALGORITHM; COMPUTER NETWORK; COMPUTER SECURITY; SOFTWARE; WORKFLOW;

ALGORITHMS; COMPUTER COMMUNICATION NETWORKS; COMPUTER SECURITY; SOFTWARE; WORKFLOW;

EID: 84983027871     PISSN: None     EISSN: 19326203     Source Type: Journal    
DOI: 10.1371/journal.pone.0160375     Document Type: Article

References (38)

1. Opennetworking.org [Internet]. California: Open networking foundation [cited 2016 May 15]. Available: https://www.opennetworking.org/sdn-resources/openflow.
2. Yang M, Li Y, Jin D, Su L, Ma S, Zeng L. OpenRAN: a software-defined ran architecture via virtualization. InACM SIGCOMM computer communication review 2013 Aug 12 ( Vol. 43, No. 4, pp. 549-550). ACM. doi: 10.1145/2486001.2491732
3. Gamperli A, Kotronis V, Dimitropoulos X. Evaluating the effect of centralization on routing convergence on a hybrid bgp-sdn emulation framework. InACM SIGCOMM Computer Communication Review 2014 Aug 17 (Vol. 44, No. 4, pp. 369-370). ACM. doi: 10.1145/2740070.2631458
4. Sezer S, Scott-Hayward S, Chouhan PK, Fraser B, Lake D, Finnegan J, et al. Are we ready for SDN? Implementation challenges for software-defined networks. Communications Magazine, IEEE. 2013 Jul; 51(7):36-43. doi: 10.1109/MCOM.2013.6553676
5. Kent S, Atkinson, R. IETF RFC 2402: IP authentication header. 1998 Nov.
6. Abdelsayed S, Glimsholt D, Leckie C, Ryan S, Shami S. An efficient filter for denial-of-service bandwidth attacks. InGlobal Telecommunications Conference, 2003. GLOBECOM'03. IEEE 2003 Dec 1 (Vol. 3, pp. 1353-1357). IEEE. doi: 10.1109/GLOCOM.2003.1258459
7. Gil TM, Poletto M. MULTOPS: a data-structure for bandwidth attack detection. InUSENIX Security Symposium 2001 Aug 13 (pp. 23-38).
8. Mirković J, Prier G, Reiher P. Source-end DDoS defense. InNetwork Computing and Applications, 2003. NCA 2003. Second IEEE International Symposium on 2003 Apr 16 (pp. 171-178). IEEE. doi: 10.1109/NCA.2003.1201153
9. Abliz M. Internet denial of service attacks and defense mechanisms. University of Pittsburgh, Department of Computer Science, Technical Report. 2011 Mar.
10. Al-Duwairi B, Govindarasu M. Novel hybrid schemes employing packet marking and logging for IP traceback. Parallel and Distributed Systems, IEEE Transactions on. 2006 May; 17(5):403-18. doi: 10.1109/TPDS.2006.63
11. Jalili R, Imani-Mehr F, Amini M, Shahriari HR. Detection of distributed denial of service attacks using statistical pre-processor and unsupervised neural networks. InInformation Security Practice and Experience 2005 Apr 11 (pp. 192-203). Springer Berlin Heidelberg. doi: 10.1007/978-3-540-31979-5-17
12. John A, Sivakumar T. Ddos: Survey of traceback methods. International Journal of Recent Trends in Engineering. 2009 May; 1(2):241-5.
13. Wu YC, Tseng HR, Yang W, Jan RH. DDoS detection and traceback with decision tree and grey relational analysis. International Journal of Ad Hoc and Ubiquitous Computing. 2011 Jan 1; 7(2):121-36. doi: 10.1504/IJAHUC.2011.038998
14. Osanaiye O, Choo KK, Dlodlo M. Distributed denial of service (DDoS) resilience in cloud: review and conceptual cloud DDoS mitigation framework. Journal of Network and Computer Applications. 2016 May 31; 67:147-65. doi: 10.1016/j.jnca.2016.01.001
15. Osanaiye O, Cai H, Choo KK, Dehghantanha A, Xu Z, Dlodlo M. Ensemble-based multi-filter feature selection method for DDoS detection in cloud computing. EURASIP Journal on Wireless Communications and Networking. 2016 May 10; 2016(1):1. doi: 10.1186/s13638-016-0623-3
16. Gonzalez JM, Anwar M, Joshi JB. A trust-based approach against IP-spoofing attacks. InPrivacy, Security and Trust (PST), 2011 Ninth Annual International Conference on 2011 Jul 19 (pp. 63-70). IEEE. doi: 10.1109/PST.2011.5971965
17. Mizrak AT, Savage S, Marzullo K. Detecting compromised routers via packet forwarding behavior. Network, IEEE. 2008 Mar; 22(2):34-9. doi: 10.1109/MNET.2008.4476069
18. Park K, Lee H. On the effectiveness of route-based packet filtering for distributed DoS attack prevention in power-law internets. InACM SIGCOMM computer communication review 2001 Aug 27 (Vol. 31, No. 4, pp. 15-26). ACM. doi: 10.1145/383059.38306
19. Zargar ST, Joshi JB. A collaborative approach to facilitate intrusion detection and response against DDoS attacks. InCollaborative Computing: Networking, Applications and Worksharing (Collaborate-Com), 2010 6th International Conference on 2010 Oct 9 (pp. 1-8). IEEE. doi: 10.4108/icst.collaboratecom.2010.46
20. Zhou P, Luo X, Chen A, Chang RK. STor: Social Network based Anonymous Communication in Tor. arXiv preprint arXiv:1110.5794. 2011 Oct 26.
21. Peng T, Leckie C, Ramamohanarao K. Protection from distributed denial of service attacks using history-based IP filtering. InCommunications, 2003. ICC'03. IEEE International Conference on 2003 May 11 (Vol. 1, pp. 482-486). IEEE. doi: 10.1109/ICC.2003.1204223
22. Wang H, Jin C, Shin KG. Defense against spoofed IP traffic using hop-count filtering. IEEE/ACM Transactions on Networking (ToN). 2007 Feb 1; 15(1):40-53. doi: 10.1109/TNET.2006.890133
23. Kim Y, Lau WC, Chuah MC, Chao HJ. PacketScore: a statistics-based packet filtering scheme against distributed denial-of-service attacks. IEEE transactions on dependable and secure computing. 2006 Apr 1; 3(2):141. doi: 10.1109/TDSC.2006.25
24. Liu HI, Chang KC. Defending systems against tilt DDoS attacks. InTelecommunication Systems, Services, and Applications (TSSA), 2011 6th International Conference on 2011 Oct 20 (pp. 22-27). IEEE. doi: 10.1109/TSSA.2011.6095400
25. Ranjan S, Swaminathan R, Uysal M, Nucci A, Knightly E. DDoS-shield: DDoS-resilient scheduling to counter application layer attacks. IEEE/ACM Transactions on Networking (TON). 2009 Feb 1; 17(1):26-39. doi: 10.1109/TNET.2008.926503
26. Ashraf J, Latif S. Handling intrusion and DDoS attacks in Software Defined Networks using machine learning techniques. InSoftware Engineering Conference (NSEC), 2014 National 2014 Nov 11 (pp. 55-60). IEEE. doi: 10.1109/NSEC.2014.6998241
27. Kreutz D, Ramos F, Verissimo P. Towards secure and dependable software-defined networks. InProceedings of the second ACM SIGCOMM workshop on Hot topics in software defined networking 2013 Aug 16 (pp. 55-60). ACM. doi: 10.1145/2491185.2491199
28. Shin S, Song Y, Lee T, Lee S, Chung J, Porras P, et al. Rosemary: A robust, secure, and high-performance network operating system. InProceedings of the 2014 ACM SIGSAC conference on computer and communications security 2014 Nov 3 (pp. 78-89). ACM. doi: 10.1145/2660267.2660353
29. Porras P, Shin S, Yegneswaran V, Fong M, Tyson M, Gu G. A security enforcement kernel for OpenFlow networks. InProceedings of the first workshop on Hot topics in software defined networks 2012 Aug 13 (pp. 121-126). ACM. doi: 10.1145/2342441.2342466
30. Shin S, Porras PA, Yegneswaran V, Fong MW, Gu G, Tyson M. FRESCO: Modular Composable Security Services for Software-Defined Networks. InNDSS 2013 Feb.
31. Wen X, Chen Y, Hu C, Shi C, Wang Y. Towards a secure controller platform for openflow applications. InProceedings of the second ACM SIGCOMM workshop on Hot topics in software defined networking 2013 Aug 16 (pp. 171-172). ACM. doi: 10.1145/2491185.2491212
32. Shin S, Yegneswaran V, Porras P, Gu G. Avant-guard: Scalable and vigilant switch flow management in software-defined networks. InProceedings of the 2013 ACM SIGSAC conference on Computer & communications security 2013 Nov 4 (pp. 413-424). ACM. doi: 10.1145/2508859.2516684
33. Kotani D, Okabe Y. A packet-in message filtering mechanism for protection of control plane in openflow networks. InProceedings of the tenth ACM/IEEE symposium on Architectures for networking and communications systems 2014 Oct 20 (pp. 29-40). ACM. doi: 10.1145/2658260.2658276
34. Open Networking Foundation. Software-defined networking: The new norm for networks. ONF White Paper. 2012 Apr 13.
35. Shin S, Gu G. Attacking software-defined networks: A first feasibility study. InProceedings of the second ACM SIGCOMM workshop on Hot topics in software defined networking 2013 Aug 16 (pp. 165-166). ACM. doi: 10.1145/2491185.2491220
36. Open Networking Foundation. Specification OS Version 1.5.1. 2015 Mar.
37. DDOSIM tool. [cited 2015 Nov 23]. Available: http://sourceforge.net/projects/ddosim/
38. Walsworth C, Aben E, Claffy K, Andersen D. The CAIDA UCSD anonymized Internet traces 2015 [cited 2015 Nov 23]. Available: http://www.caida.org/data/passive/passive-2015-dataset.xml