An SDNFV-Based DDoS Defense Technology for Smart Cities

Abstract

A software defined networking (SDN)-enabled smart city is a new paradigm that can effectively improve the cost efficiency and flexibility of data management through data-control separation. However, it faces significant security threats such as distributed denial of service (DDoS) attacks which jeopardize the security and availability of data and services by overloading the system with excessive traffic from distributed sources. To improve the DDoS defense capability and enhance the security of data management in SDN-enabled smart cities, this paper proposes a DDoS attack Defense strategy based on Traffic Classification (DDTC). We use software defined network function virtualization (SDNFV) architecture and traffic classification strategy, to improve the flexibility and reduce the load of SDN against DDoS attacks. Experimental results show that the proposed DDTC can not only launch DDoS attacks detection quickly, but also accurately track the sources of DDoS attacks. More importantly, it can reduce the risk of attack on the controller of SDN and improve the effectiveness of the system.

Machine Learning-based Distributed Denial of Service Attacks Detection Technique using New Features in Software-defined Networks

“…6. show comparisons of accuracy, detection rate, and false-positive rate for SOM [12], entropy technique implemented in [6], Sguard [14], Two-stage approach proposed in [16], DPTCM-KNN [17], RL-RF [18], K-FKNN [13], detection systems implemented in [19], LSTM-FUZZY [20], detection technique implemented in [21], detection technique implemented in [22], as well as the technique introduced in this paper. It can be shown from the results that the proposed technique in this paper gives the best results compared with other techniques.…”

“…Besides, the attack backtracking module needs to be tested in case of a high traffic load. For that, the technique lacks stability and being fit to different network conditions [18].…”

Secure Software-Defined Networking Communication Systems for Smart Cities: Current Status, Challenges, and Trends

“…Smart City Application Details SmartCityWare [76] Cloud and fog-enabled middleware Propose a service-oriented middleware for cloud and fog-enabled smart city services with the possibility of SDN extension Wu et al [77] Safety extension Propose a safety extension for critical cyber-physical systems using SDN Munir et al [78] QoS improvement Propose a resilient SDN-based mechanism for QoS fulfilment of smart services Taylor et al [79] Resiliency Propose a cloud-based SDN design for residential networks SUPC [80] Policy checking Propose an SDN/NFV-enabled approach for universal policy checking in cloud networks Condoluci et al [81] Softwarization/virtualization Discuss Softwarization and virtualization in 5G networks for smart cities and implications of SDN resiliency DistBlackNet [82] IoT communication architecture Propose an SDN-enabled distributed secure black IoT architecture for smart cities Xu et al [83] Data management Propose an SDN-based DDoS defense solution to improve data management in smart city networks by leveraging NFV and traffic classification strategy techniques, respectively. Qazi et al [92] and Fayazbakhsh et al [93] deployed TE techniques to handle VNFs in SDNenabled environments.…”

Machine Learning Approaches for Combating Distributed Denial of Service Attacks in Modern Networking Environments

“…An SDN is a new network paradigm that enables the network topology to be controlled or programmed via various software applications [69]. An SDN provides a centralized controller to manage the entire network.…”