FloodDefender: Protecting data and control plane resources under SDN-aimed DoS attacks

Proceedings - IEEE INFOCOM

Volumn , Issue , 2017, Pages

  Shang, Gao ^a   Zhe, Peng ^a   Bin, Xiao ^a   Aiqun, Hu ^b   Kui, Ren ^c  

^a HONG KONG POLYTECHNIC UNIVERSITY   (Hong Kong)

^b SOUTHEAST UNIVERSITY   (China)

^c the State University of New York   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER CRIME; CONTROLLERS; DENIAL-OF-SERVICE ATTACK; FLOODS; INFORMATION MANAGEMENT; PACKET LOSS;

COMMUNICATION BANDWIDTH; COMPUTATIONAL RESOURCES; CONTROL NETWORK; PACKET FILTERS; PACKET LOSS RATES; PROGRAMMABILITY; SOFTWARE AND HARDWARES; SOFTWARE DEFINED NETWORKING (SDN);

PACKET NETWORKS;

EID: 85029717283     PISSN: 0743166X     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/INFOCOM.2017.8057009     Document Type: Conference Paper

References (16)

1. N. McKeown, T. Anderson, H. Balakrishnan, G. Parulkar, L. Peterson, J. Rexford, S. Shenker, and J. Turner, "OpenFlow: Enabling Innovation in Campus Networks," in ACM SIGCOMM Computer Communication Review, vol. 38, pp. 69-74, 2008.
2. Polaris networks Co. ltd., "Polaris xSwitch." http://www.polarisdn.com/ en/product/html/?80.html.
3. S. Shin, V. Yegneswaran, P. Porras, and G. Gu, "AVANT-GUARD: Scalable and Vigilant Switch Flow Management in Software-Defined Networks," in Proc. of the ACM Conference on Computer & Communications Security (CCS), 2013.
4. H. Wang, L. Xu, and G. Gu, "FloodGuard: A DoS Attack Prevention Extension in Software-Defined Networks," in Proc. of the IEEE/IFIP Dependable Systems and Networks (DSN), 2015.
5. S. Song, S. Hong, X. Guan, B.-Y. Choi, and C. Choi, "NEOD: Network Embedded On-line Disaster Management Framework for Software Defined Networking," in Proc. of the IFIP/IEEE International Symposium on Integrated Network Management (IM), 2013.
6. V. N. Vapnik and V. Vapnik, "Statistical Learning Theory," vol. 1, 1998.
7. A. Demers, S. Keshav, and S. Shenker, "Analysis and Simulation of a Fair Queueing Algorithm," in ACM SIGCOMM Computer Communication Review, vol. 19, pp. 1-12, 1989.
8. RYU SDN Framework Community, "RYU Controller." https://osrg. github.io/ryu/.
9. Mininet Team, "Mininet." http://mininet.org/.
10. Z. Hu and J. Luo, "Cracking Network Monitoring in DCNs with SDN," in Proc. of the IEEE International Conference on Computer Communications (INFOCOM), 2015.
11. Y. Xu and Y. Liu, "DDoS Attack Detection Under SDN Context," in Proc. of the IEEE International Conference on Computer Communications (INFOCOM), 2016.
12. C. R. Taylor, D. C. MacFarland, D. R. Smestad, and C. A. Shue, "Contextual, Flow-Based Access Control with Scalable Host-Based SDN Techniques," in Proc. of the IEEE International Conference on Computer Communications (INFOCOM), 2016.
13. J. Sonchack, A. J. Aviv, E. Keller, and J. M. Smith, "Enabling Practical Software-defined Networking Security Applications with OFX," in Proc. of the Network and Distributed System Security (NDSS), 2016.
14. S. Hong, L. Xu, H. Wang, and G. Gu, "Poisoning Network Visibility in Software-Defined Networks: New Attacks and Countermeasures," in Proc. of the Network and Distributed System Security (NDSS), 2015.
15. X. Wen, B. Yang, Y. Chen, C. Hu, Y. Wang, B. Liu, and X. Chen, "SDNShield: Reconciliating Configurable Application Permissions for SDN App Markets," in Proc. of the IEEE/IFIP Dependable Systems and Networks (DSN), 2016.
16. K. Bu, X. Wen, B. Yang, Y. Chen, L. E. Li, and X. Chen, "Is Every Flow on The Right Track?: Inspect SDN Forwarding with RuleScope," in Proc. of the IEEE International Conference on Computer Communications (INFOCOM), 2016.