TY - GEN
T1 - A Defense Mechanism for Distributed Denial of Service Attack in Software-Defined Networks
AU - Luo, Shibo
AU - Wu, Jun
AU - Li, Jianhua
AU - Pei, Bei
N1 - Publisher Copyright:
© 2015 IEEE.
PY - 2015/10/30
Y1 - 2015/10/30
N2 - Distributed Denial of Service (DDoS) attack is a major threat to Internet based killer applications, such as independent news web sites, e-business and online games. Detecting and blocking such clever attacks has become difficult. Software-Defined Networks (SDN) has emerged as a future communication network architecture which decouples network control and forwarding. It has some particular features such as central control and programmability to combat against DDoS attack. In this paper, we survey DDoS attacks and existing defense mechanisms, and draw a conclusion of the needs of defense mechanism for successful combating against DDoS. Then, we analyze the particular features of SDN and conclude it is conducive to countermeasure DDoS attack. According the analysis, we construct a defense mechanism for DDoS in SDN. At last, we illustrate how this mechanism could combat against DDoS attacks through a working example.
AB - Distributed Denial of Service (DDoS) attack is a major threat to Internet based killer applications, such as independent news web sites, e-business and online games. Detecting and blocking such clever attacks has become difficult. Software-Defined Networks (SDN) has emerged as a future communication network architecture which decouples network control and forwarding. It has some particular features such as central control and programmability to combat against DDoS attack. In this paper, we survey DDoS attacks and existing defense mechanisms, and draw a conclusion of the needs of defense mechanism for successful combating against DDoS. Then, we analyze the particular features of SDN and conclude it is conducive to countermeasure DDoS attack. According the analysis, we construct a defense mechanism for DDoS in SDN. At last, we illustrate how this mechanism could combat against DDoS attacks through a working example.
KW - Central Control
KW - Distributed Denial of Service
KW - Programmability
KW - Software-Defined Networks
UR - http://www.scopus.com/inward/record.url?scp=84961730142&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=84961730142&partnerID=8YFLogxK
U2 - 10.1109/FCST.2015.11
DO - 10.1109/FCST.2015.11
M3 - Conference contribution
AN - SCOPUS:84961730142
T3 - Proceedings - 2015 9th International Conference on Frontier of Computer Science and Technology, FCST 2015
SP - 325
EP - 329
BT - Proceedings - 2015 9th International Conference on Frontier of Computer Science and Technology, FCST 2015
A2 - Jia, Xiaohua
A2 - Zhang, Yong
A2 - Dillion, Tharam
A2 - Kato, Nei
A2 - Zhang, Yunquan
A2 - Li, Kuan Ching
A2 - Wu, Kui
PB - Institute of Electrical and Electronics Engineers Inc.
T2 - 9th International Conference on Frontier of Computer Science and Technology, FCST 2015
Y2 - 26 August 2015 through 28 August 2015
ER -