scholarly journals Mitigation of DDoS attack instigated by compromised switches on SDN controller by analyzing the flow rule request traffic

2018 ◽  
Vol 7 (2.6) ◽  
pp. 46 ◽  
Author(s):  
Sanjeetha R ◽  
Shikhar Srivastava ◽  
Rishab Pokharna ◽  
Syed Shafiq ◽  
Dr Anita Kanavalli
Keyword(s):  
Network Architecture ◽  
Flow Rule ◽  
Software Defined Network ◽  
Ddos Attacks ◽  
Control Plane ◽  
Ddos Attack ◽  
Flow Table ◽  
Data Plane ◽  
Ddos Detection ◽  
Sdn Controller

Software Defined Network (SDN) is a new network architecture which separates the data plane from the control plane. The SDN controller implements the control plane and switches implement the data plane. Many papers discuss about DDoS attacks on primary servers present in SDN and how they can be mitigated with the help of controller. In our paper we show how DDoS attack can be instigated on the SDN controller by manipulating the flow table entries of switches, such that they send continuous requests to the controller and exhaust its resources. This is a new, but one of the possible way in which a DDoS attack can be performed on controller. We show the vulnerability of SDN for this kind of attack. We further propose a solution for mitigating it, by running a DDoS Detection module which uses variation of flow entry request traffic from all switches in the network to identify compromised switches and blocks them completely.

IMPLEMENTASI DAN ANALISIS EFEKTIVITAS FIREWALL PADA SOFTWARE DEFINED NETWORK BERBASIS OPENFLOW

2018 ◽  
Vol 4 (2) ◽  
pp. 46-57
Author(s):  
Fathul Muiin ◽  
Henry Saptono
Keyword(s):  
Software Defined Network ◽  
Control Plane ◽  
Flow Table ◽  
Data Plane

Penggunaan akses internet di dunia semakin berkembang, dan selaras dengan perkembangan teknologi jaringan komputer yang semakin kompleks. Oleh karena itu, keamanan data pada sebuah komputer menjadi salah satu bagian yang sangat penting dalam sebuah jaringan. Dan SDN merupakan sebuah solusi untuk menyediakan kebutuhan jaringan komputer saat ini. Software Defined Network (SDN) merupakan pendekatan pada teknologi jaringan yang melakukan penyederhanaan terhadap kontrol dan manajemen jaringan. Pada jaringan ini nantinya akan menggunakan protokol openflow, yang prinsip utamanya memisahkan fungsi control plane dan data plane pada perangkat. Kontrol jaringan pada sebuah controller bersifat programmable, jadi dengan adanya SDN maka jaringan akan mudah diatur dan lebih fleksibel. Implementasi dan analisis firewall ini menggunakan emulator mininet untuk membuat topologi jaringan yang sederhana. Dalam pengujian firewall menggunakan bahasa XML untuk implementasi aliran data, lalu menggunakan aplikasi postman sebagai alat untuk menambahkan flow table baru pada switch, dan controller yang digunakan adalah opendaylight.

scholarly journals ADAPTIVE ENTROPY-BASED DETECTION AND MITIGATION OF DDOS ATTACKS IN SOFTWARE DEFINED NETWORKS

2020 ◽  
pp. 399-410
Author(s):  
Jawad Dalou' ◽  
Basheer Al-Duwairi ◽  
Mohammad Al-Jarrah
Keyword(s):  
Denial Of Service ◽  
Attack Detection ◽  
Point Of View ◽  
Software Defined Networks ◽  
Distributed Denial Of Service ◽  
Ddos Attacks ◽  
Control Plane ◽  
Data Plane ◽  
And Control ◽  
Sdn Controller

Software Defined Networking (SDN) has emerged as a new networking paradigm that is based on the decoupling between data plane and control plane providing several benefits that include flexible, manageable, and centrally controlled networks. From a security point of view, SDNs suffer from several vulnerabilities that are associated with the nature of communication between control plane and data plane. In this context, software defined networks are vulnerable to distributed denial of service attacks. In particular, the centralization of the SDN controller makes it an attractive target for these attacks because overloading the controller with huge packet volume would result in bringing the whole network down or degrade its performance. Moreover, DDoS attacks may have the objective of flooding a network segment with huge traffic volume targeting single or multiple end systems. In this paper, we propose an entropy-based mechanism for Distributed Denial of Service (DDoS) attack detection and mitigation in SDN networks. The proposed mechanism is based on the entropy values of source and destination IP addresses of flows observed by the SDN controller which are compared to a preset entropy threshold values that change in adaptive manner based on network dynamics. The proposed mechanism has been evaluated through extensive simulation experiments.

scholarly journals The Deployment of Routing Protocols in Distributed Control Plane of SDN

2014 ◽  
Vol 2014 ◽  
pp. 1-8 ◽  
Author(s):  
Zhou Jingjing ◽  
Cheng Di ◽  
Wang Weiming ◽  
Jin Rong ◽  
Wu Xiaochun
Keyword(s):  
Distributed Control ◽  
Closed System ◽  
Routing Protocols ◽  
Network Architecture ◽  
Software Defined Network ◽  
Control Plane ◽  
Data Plane ◽  
Simulation Results ◽  
Routing Control ◽  
Programmable Network

Software defined network (SDN) provides a programmable network through decoupling the data plane, control plane, and application plane from the original closed system, thus revolutionizing the existing network architecture to improve the performance and scalability. In this paper, we learned about the distributed characteristics of Kandoo architecture and, meanwhile, improved and optimized Kandoo’s two levels of controllers based on ideological inspiration of RCP (routing control platform). Finally, we analyzed the deployment strategies of BGP and OSPF protocol in a distributed control plane of SDN. The simulation results show that our deployment strategies are superior to the traditional routing strategies.

scholarly journals A Review on Software-Defined Networking Distributed Controllers

2020 ◽  
Vol 9 (2) ◽  
pp. 24953-24961
Author(s):  
Worku Muluye
Keyword(s):  
Network Architecture ◽  
Computer Network ◽  
Software Defined Networking ◽  
Critical Issue ◽  
Software Defined Network ◽  
Control Plane ◽  
Second Best ◽  
Distributed Controller ◽  
Data Plane ◽  
Distributed Controllers

A computer network is a critical issue in our day to day activity; however, today it works under various problems. Since in the current network architecture the control plane and data plane are vertically bundled on the same device. To solve this problem programmable Software-Defined Network is released. OpenFlow is a protocol that vertically separates control plane and data plane of the network devices. In SDN the controllers are the brains of the network that controls the network devices. Today’s network required successful integration of distributed controllers to make the network more consistent. SDN distributed controller is a controller that we can add or remove the controllers according to the number of devices change. Distributed controller architecture has investigated and compared the 6 recent distributed controllers by using 26 criteria. Orion is the first best controller and ONOS is the second best controller.

scholarly journals Detection and Mitigation of Flood Attacks in IPv6 Enabled Software Defined Networks

2020 ◽  
pp. 1-9
Author(s):  
O. Ashimi Quadri ◽  
Adeniji Oluwashola David
Keyword(s):  
Network Architecture ◽  
Denial Of Service ◽  
Cost Effective ◽  
Centralized Control ◽  
Ddos Attacks ◽  
Control Plane ◽  
Network Resources ◽  
Effective Manner ◽  
Data Plane ◽  
Experimental Testbed

Software-defined networking (SDN) is an emerging technology, which provides network architecture that decouples the control plane from the data plane. Due to the centralized control, the network becomes more dynamic, and the network resources are managed in a more efficient and cost-effective manner. The centralization of the control plane requires robust and real-time security techniques. The security Techniques will protect it from any sign of vulnerabilities associated with the network such as a distributed denial of service (DDoS) attacks. The problem of the data-plane is that the attack is hard to be tracked by the SDN controlling plane. This makes the switches to be more susceptible against these types of attacks and hence it is very important to have quick provisional methods in place to prevent the switches from breaking down as soon as first signs of an attack are detected. To resolve this problem, the research developed a mechanism that detects and mitigates flood attacks in IPv6 enabled software to define networks. An experimental testbed was developed using sFlow technique, floodlight controller, and OpenFlow version 1.3. A mitigation algorithm was also developed and was tested with a simulation tool Mininet. The real network traffic was tested on the testbed to investigate the effective mitigation of a DDoS attack. The mitigation time performance for IPv6 was 46.6% while IPv4 was 66.6%. Also, The result gathered from the experiment showed that both the response and detection times were 4 secs while the mitigation time was 7secs respectively. The overall control time being 11 secs. The experimental Testbed result shows that the developed testbed outperformed the previous methods with the ability to detect threats on the network faster. The result from the IPv6 testbed is a probable solution to mitigate the threats posed by DDoS attacks on the IPv6 enabled SDN network resources.

scholarly journals Improving the Fault Tolerance of Elements of Modern Infocommunication Networks with the Use of Default Gateway Redundancy Protocols

2020 ◽  
pp. 68-81
Author(s):  
Oleksandra Yeremenko ◽  
Amal Mersni
Keyword(s):  
Fault Tolerance ◽  
Network Architecture ◽  
Fault Tolerant ◽  
Future Research ◽  
Software Defined Network ◽  
Control Plane ◽  
Network Resources ◽  
Data Plane ◽  
Recent Developments ◽  
Control Traffic

The article is devoted to the Network Layer means to ensure resilience during designing an infocommunication system that can counteract faults and failures. A review of the default gateway redundancy protocols concept and analysis of recent developments to overcome fault tolerance challenges in the Software-Defined Networks (SDN) control plane are conducted. In addition, an approach to the use of default gateway redundancy protocols in the existing Software-Defined Network architecture is proposed. Therefore, within the approach, the redundancy of the virtual controller is organized based on the current protocol implemented in traditional IP networks, and the SDN switch interacts with the virtual controller. This mechanism aims to reduce the amount of circulating overhead (control traffic), and the backup controller’s organization increases the control plane’s reliability. Whereas in hybrid and hierarchical SDN networks with border routers, the GLBP mechanism can be applied, which increases the reliability of the controller connected to the data plane. In addition, there are several scenarios where the controller that manages the operation of the SDN data plane may have multiple backup controllers to switch in case of failure, or a controller pool is used to manage each network that makes up the SDN data plane. It also highlights promising future areas for research and development to improve Software-Defined Network resilience, which contributes to the emergence of new solutions. Thus, future research directions are seen in proposing mathematical flow-based models of fault-tolerant interaction of the control plane and the data plane based on redundancy. At the same time, setting the problem in an optimization form with the implementation of load balancing will help to use available network resources effectively.

ANALISA PERFORMANSI CONTROLLER PADA ARSITEKTUR JARINGAN SOFTWARE DEFINED NETWORK (SDN)

Repositor ◽  
2020 ◽  
Vol 2 (12) ◽  
pp. 1727
Author(s):  
Agung Dwi Rahmawan ◽  
Syaifuddin Syaifuddin ◽  
Diah Risqiwati
Keyword(s):  
Packet Loss ◽  
Network Architecture ◽  
Computer Network ◽  
Destination Node ◽  
Software Defined Network ◽  
Control Plane ◽  
Value Analysis ◽  
Background Traffic ◽  
Data Plane

AbstrakSoftware Defined Network (SDN) merupakan sebuah konsep pendekatan baru dalam jaringan untuk mendesain, membangun serta mengelola suatu jaringan komputer. Konsep ini melakukan pemisahan terhadap Data Plane dan Control Plane. Dalam konsep SDN ini terdapat suatu komponen penting yang bertanggung jawab terhadap segala aturan dalam pengelolaan dan pendistribusian informasi terhadap seluruh perangkat jaringan yaitu Controller. Karena peran Controller yang penting maka performa dari Controller perlu diuji sehingga dapat mengetahui kemampuan dari Controller yang digunakan. Dalam penelitian ini dilakukan perbandingan analisis nilai Quality of Services (QoS) terhadap implementasi SDN menggunakan Controller Floodlight dan Ryu dengan menjalankan topologi linear dan mesh dalam jumlah Switch yang beragam mulai dari 4, 8, 12 dan 16 Switch. Selama pengujian berlangsung dari node sumber ke node tujuan yang sama juga dialiri variasi background traffic mulai dari 50 hingga 200 Mbps.  Hasil yang didapatkan yaitu Controller Ryu memiliki nilai QoS yang lebih baik dari floodlight pada semua topologi yang diujikan, nilai latency dan jitter pada floodlight lebih tinggi dari ryu serta cenderung meningkat pada traffic 100 Mbps Pada throughput, ryu memiliki nilai lebih tinggi dengan kisaran 856-933 Kbps. Sedangkan pada packet loss floodlight lebih tinggi sementara ryu hanya memiliki rata-rata packet loss sebesar 0,5%. Namun pada pengujian hanya pada jumlah switch, floodlight menjamin dalam tingkat respons serta pengelolaan data yang besar di dalam arsitektur jaringan SDN.Abstract Software Defined Network (SDN) is a concept of a new approach in networking to design, build and manage a computer network. This concept separates the Data Plane and Control Plane. In this SDN concept there is an important component that is responsible for all rules in the management and distribution of information to all network devices that is Controller. Due to the important Controller role then the performance of the Controller needs to be tested so as to know the ability of the Controller to use. In this study, a comparison of Quality of Service (QoS) value analysis on SDN implementation using Floodlight and Ryu Controller by running linear and mesh topology in varying number of Switches ranging from 4, 8, 12 and 16 Switch. During the test from the source node to the same destination node is also varies background traffic ranging from 50 to 200 Mbps. The result is that Controller Ryu has better QoS value than floodlight on all tested topologies, the latency and jitter values on the floodlight are higher than ryu and tend to increase on 100 Mbps traffic. Throughput On ryu. have a higher value with the range of 856-933 Kbps. While the packet loss floodlight higher while ryu only have an average packet loss of 0.5%. But on testing only on the number of switches, the floodlight guarantees great response rates and data management within the SDN network architecture.

Dynamical Traffic Engineering in Software-Defined Network

2014 ◽  
Vol 610 ◽  
pp. 954-958 ◽  
Author(s):  
Yi Fan Yu ◽  
Yong Li ◽  
De Peng Jin
Keyword(s):  
Linear Programming ◽  
Real Time ◽  
Traffic Engineering ◽  
Network Architecture ◽  
Optimal Solution ◽  
Software Defined Network ◽  
Software Defined Networks ◽  
Control Plane ◽  
Two Stage ◽  
Data Plane

Software-Defined Networks (SDN), as newly proposed network architecture, has a great potential in optimizing network traffics. In SDN, the control plane is separated from the data plane. With the help of the centralized controller, we can gather information of the network in real time. In this work, we propose a practical two-stage approach for traffic engineering that takes advantages of SDN. The approach not only assures every newly injected flow gets a suitable route that does not have too much payload on it, but also schedules the overall flows so that they are distributed more equally in the network. Furthermore, we demonstrate its efficiency in terms of port speed and compared it with port speed under the default routing decision. We also use linear programming to find the optimal solution and compare it with our result.

Neural Network-Based Approach for Detection and Mitigation of DDoS Attacks in SDN Environments

2020 ◽  
Vol 14 (3) ◽  
pp. 50-71
Author(s):  
Oussama Hannache ◽  
Mohamed Chaouki Batouche
Keyword(s):  
Neural Network ◽  
Performance Metrics ◽  
Denial Of Service ◽  
Distributed Denial Of Service ◽  
Ddos Attacks ◽  
Analysis Method ◽  
Organizational Network ◽  
Ddos Attack ◽  
Data Plane ◽  
Ddos Detection

Software defined networking (SDN) is a networking paradigm that allows for the easy programmability of network devices by decoupling the data plane and the control plane. On the other hand, Distributed Denial of Service (DDoS) attacks remains one of the major concerns for organizational network infrastructures and Cloud providers. In this article, the authors propose a Neural Network based Traffic Flow Classifier (TFC-NN) for live DDoS detection in SDN environments. This study provides a live traffic analysis method with a neural network. The training of the TFC-NN model is performed by a labelled dataset constructed from SDN normal traffic and an-under DDoS traffic. The study also provides a live mitigation process combined with the live TFC-NN-based DDoS detection. The approach is deployed and evaluated on an SDN architecture based on different performance metrics with different under-DDoS attack scenarios.

scholarly journals OverWatch: A Cross-Plane DDoS Attack Defense Framework with Collaborative Intelligence in SDN

2018 ◽  
Vol 2018 ◽  
pp. 1-15 ◽  
Author(s):  
Biao Han ◽  
Xiangrui Yang ◽  
Zhigang Sun ◽  
Jinfeng Huang ◽  
Jinshu Su
Keyword(s):  
Denial Of Service ◽  
Attack Detection ◽  
Coarse Grained ◽  
Communication Overhead ◽  
Ddos Attacks ◽  
Control Plane ◽  
Flow Monitoring ◽  
Ddos Attack ◽  
Data Plane ◽  
Collaborative Intelligence

Distributed Denial of Service (DDoS) attacks are one of the biggest concerns for security professionals. Traditional middle-box based DDoS attack defense is lack of network-wide monitoring flexibility. With the development of software-defined networking (SDN), it becomes prevalent to exploit centralized controllers to defend against DDoS attacks. However, current solutions suffer with serious southbound communication overhead and detection delay. In this paper, we propose a cross-plane DDoS attack defense framework in SDN, called OverWatch, which exploits collaborative intelligence between data plane and control plane with high defense efficiency. Attack detection and reaction are two key procedures of the proposed framework. We develop a collaborative DDoS attack detection mechanism, which consists of a coarse-grained flow monitoring algorithm on the data plane and a fine-grained machine learning based attack classification algorithm on the control plane. We propose a novel defense strategy offloading mechanism to dynamically deploy defense applications across the controller and switches, by which rapid attack reaction and accurate botnet location can be achieved. We conduct extensive experiments on a real-world SDN network. Experimental results validate the efficiency of our proposed OverWatch framework with high detection accuracy and real-time DDoS attack reaction, as well as reduced communication overhead on SDN southbound interface.

Sign in / Sign up

Export Citation Format

Share Document