Title
Defending Blind DDoS Attack on SDN Based on Moving Target Defense.
Abstract
Software Defined Networking (SDN) provides a new network solution by decoupling control plane and data plane from the closed and proprietary implementations of traditional network devices. With its promisingly advanced architecture, SDN represents the future development trend of network. In its typical structure, collaborative interaction between one controller and multiple switches forms a centralized network topology. As playing a key role in this network architecture, the controller in SDN is very vulnerable to single point of failure. What is worse, the emergence of Blind DDoS attack against SDN's special structure increases its risks. To address this challenge, we introduce a Moving Target Defense(MTD) system to defend Blind DDoS attack. The approach adopts a multi-controller pool to solve the saturation problem, and it can dynamically shift controllers connecting to switches according to the density of flood flow. By randomly delaying the scanning packets and filtering the flood with route-map, this MTD system can effectively resist the Blind DDoS attack and protect the availability and reliability of SDN.
Year
DOI
Venue
2014
10.1007/978-3-319-23829-6_32
Lecture Notes of the Institute for Computer Sciences Social Informatics and Telecommunications Engineering
Keywords
Field
DocType
Blind DDoS attack,Software defined networking,Moving target defense
Forwarding plane,Single point of failure,Denial-of-service attack,Computer science,Networking hardware,Network packet,Network architecture,Computer network,Network topology,Software-defined networking
Conference
Volume
ISSN
Citations 
152
1867-8211
1
PageRank 
References 
Authors
0.41
17
3
Name
Order
Citations
PageRank
Duohe Ma112.10
Zhen Xu22117.33
Dongdai Lin376298.54