DDoS Attack Detection Approaches in on Software Defined Network

Muzafar, Saira; Jhanjhi, N. Z.; Khan, Navid Ali; Ashfaq, Farzeen

doi:10.1109/macs56771.2022.10022653

Cited by 16 publications

(8 citation statements)

References 19 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Konsep SDN adalah memisahkan control plane dan data plane [1]. Dengan memisahkan control plane dan data plane, logika kontrol diimplemestasikan dalam contoller, sedangkan switch bertindak sebagai forwarding device yang dihubungkan oleh protokol OpenFlow [2]. OpenFlow adalah protokol utama yang digunakan pada jaringan SDN.…”

Section: Pendahuluanunclassified

“…DDoS (Distributed Denial of Service) adalah serangan yang dilakukan terhadap sebuah sistem komputer atau jaringan dengan cara membanjiri resource yang ada sehingga membuat sistem tersebut tidak lagi dapat merespon permintaan dari pengguna yang sah [5] [6] [7]. [2], [4]- [12] Pada penelitian ini dibuat sebuah sistem untuk mengatasi kerentanan keamanan antara control plane dan data plane dalam arsitektur jaringan Software Defined Network (SDN) terhadap serangan DDoS [8] [9] [10]. Pendekatan utama melibatkan pengembangan mekanisme deteksi dan mitigasi DDoS yang terintegrasi secara langsung dengan controller SDN, serta penguatan keamanan pada interaksi antara control plane dan data plane melalui implementasi firewall pada server [11] [12].…”

Section: Pendahuluanunclassified

See 1 more Smart Citation

Deteksi Dan Mitigasi Serangan Distributed Denial of Service Pada Software Defined Network

Pratiwi,

Adrian

2024

JuTISI

View full text Add to dashboard Cite

Software Defined Network (SDN) merupakan pendekatan dalam pengelolaan jaringan yang memisahkan lapisan kontrol (control plane) dan lapisan pengiriman (data plane) dalam jaringan. Pada jaringan SDN, control plane dikendalikan secara sentral melalui perangkat lunak yang disebut controller, sementara data plane terdiri dari perangkat jaringan fisik seperti switch dan router. Akan tetapi, pemisahan ini menimbulkan banyak masalah keamanan. Oleh karena itu, kebutuhan untuk melindungi jaringan dari berbagai serangan menjadi hal yang wajib dilakukan. Distributed Denial of Service (DDoS) adalah salah satu serangan yang menjadi rintangan bagi pengguna SDN. Upaya melindungi jaringan SDN dari serangan DDoS diperlukan sebuah sistem yang dapat mendeteksi dan mencegah serangan tersebut. Pada penelitian sini, dibuat sebuah sistem yang digunakan untuk mendeteksi adanya serangan DDOS dengan menggunakan Snort IDS (Intrusion Detection System) dan pencegahannya dengan implementasi firewall pada server dengan menggunakan Iptables. Implementasi Snort pada sistem SDN mampu mendeteksi serangan DDoS dengan akurasi mencapai 95% serangan slowhttptest, 90% serangan slowloris dan 100% serangan LOIC. Rata-rata penggunaan waktu yang diperlukan untuk mendeteksi adanya serangan slowhttptest sebesar 0.72 detik, serangan slowloris sebesar 0,36 detik, dan serangan LOIC sebasar 0,3 detik. Implementasi iptables pada sistem SDN mampu memblokir serangan DDoS dengan rata – rata waktu pemblokiran 0.91 detik terhadap serang slowhttptest, 1,89 detik terhadap serangan slowloris, 0,77 detik terhadap serangan LOIC, dan sistem mampu mengelola volume koneksi yang besar sehingga mampu menjaga ketersediaan sistem SDN.

show abstract

Section: Pendahuluanunclassified

Deteksi Dan Mitigasi Serangan Distributed Denial of Service Pada Software Defined Network

Pratiwi,

Adrian

2024

JuTISI

View full text Add to dashboard Cite

show abstract

“…Threat modelling at Microsoft is often based on the STRIDE model which account for Spoofing (S), Tampering (T), Repudiation (R), Information disclosure (I), Denial-of-service (D), and Elevation of privilege (E) [27]. Some of the most prevalent security vulnerabilities that impede the process of secure authorization and authentication include tampering, spoofing, repudiation, information exposure, denial-of-services [28] [29], privilege elevation, and failure to restrict URL access or access control. Table 2.…”

Section: C) Development/coding Phasementioning

confidence: 99%

Secure Software Development Best Practices

Fauzi,

Mohan,

et al. 2023

IJEMD-CSAI

View full text Add to dashboard Cite

This research aims to explore optimal strategies for fortified software, enhancing the implementation of secure software development practices. Software security involves crafting and designing software that guarantees the integrity, confidentiality, and availability of its code, data, and functionalities. Often, in prioritizing functionality, security takes a back seat when organizations embark on system development. Yet, it's imperative to embed security at every phase of the Software Development Life Cycle (SDLC). Numerous methodologies and models exist for addressing software security, but only a few substantiate creating secure software applications effectively. Despite advancements, software security remains inadequately addressed, posing a challenge to integrating security protocols into the SDLC seamlessly. This review advocates specific security measures to be integrated at each SDLC level, fostering a secure SDLC. Efficient amalgamation of these processes ensures the delivery of secure software systems with minimized resource expenditure. Additionally, it highlights hurdles encountered in employing agile development methodologies for crafting secure software. These challenges stem from assessing agile ideals, principles, and security assurance procedures. These findings underscore the urgency for research facilitating safe software development, addressing barriers inhibiting its adoption. The paper serves as a valuable reference, shedding light on the significance of establishing secure software development processes.

show abstract

“…If AWS has failed to uphold the SLA's specified by them, they would then be required to compensate their customers. In the context of failing to maintain an uptime 99.0% or more, they are required to provide customers service credits worth up to 10% of the customer's cost [27][28][29][30][31][32][33][34][35].…”

Section: H) Aws Service Level Agreementmentioning

confidence: 99%

Cloud Computing Migration: A Thoughtful Decision

Xuan,

Xuen,

Muzafar

2023

Preprint

View full text Add to dashboard Cite

The reliance on cloud computing services and related technologies has increased due to their many benefits, including resource sharing and the need for organizations to maintain their competitive advantage in the digital market. Also, the pace of cloud growth has significantly increased because of COVID-19. Many companies and businesses have shifted their core processes to the cloud for seamless operations during the pandemic. This migration of legacy systems to the cloud creates many opportunities for businesses. However, on the other hand, it may also bring substantial challenges. Hence, a careful decision is needed to align with company goals. In this paper, we demonstrate the need and advantages of cloud computing, followed by highlighting AWS's characteristics as one of the leading cloud service providers. We also discuss the merger of AWS with SDN to improve cloud data security and performance. The outcomes of this study can provide a data migration strategy and guide decision-makers toward a secure and sustainable migration to a cloud computing environment.

show abstract

DDoS Attack Detection Approaches in on Software Defined Network

Cited by 16 publications

References 19 publications

Deteksi Dan Mitigasi Serangan Distributed Denial of Service Pada Software Defined Network

Deteksi Dan Mitigasi Serangan Distributed Denial of Service Pada Software Defined Network

Secure Software Development Best Practices

Cloud Computing Migration: A Thoughtful Decision

Contact Info

Product

Resources

About