DeMi: A Solution to Detect and Mitigate DoS Attacks in SDN

Eliyan, Lubna Fayez; Pietro, Roberto Di

doi:10.1109/access.2023.3301994

Cited by 11 publications

(1 citation statement)

References 77 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…An attack that floods a network or server with data or internet traffic is referred to as a DoS/DDoS attack [28]. We have, therefore, integrated a message filtering mechanism into our architecture, taking our inspiration from the solutions described in the literature for managing DoS attacks in SDN-based systems [29,30]. On this point, our contribution consists of adapting these solutions to the environment under consideration (interconnection of heterogeneous rail-road systems) and proposing an open-source implementation that can be reused by other researchers in the future, both in rail and road environments and in other environments.…”

mentioning

confidence: 99%

SDN-Based Secure Common Emergency Service for Railway and Road Co-Existence Scenarios

Singh,

Mendiboure,

Soler

et al. 2024

Future Internet

View full text Add to dashboard Cite

In the near future, there will be a greater emphasis on sharing network resources between roads and railways to improve transportation efficiency and reduce infrastructure costs. This could enable the development of global Cooperative Intelligent Transport Systems (C-ITSs). In this paper, a software-defined networking (SDN)-based common emergency service is developed and validated for a railway and road telecommunication shared infrastructure. Along with this, the developed application is capable of reducing the chances of distributed denial-of-service (DDoS) situations. A level-crossing scenario is considered to demonstrate the developed solution where railway tracks are perpendicular to the roads. Two cases are considered to validate and analyze the developed SDN application for common emergency scenarios. In case 1, no cross-communication is available between the road and railway domains. In this case, emergency message distribution is carried out by the assigned emergency servers with the help of the SDN controller. In case 2, nodes (cars and trains) are defined with two wireless interfaces, and one interface is reserved for emergency data communication. To add the DDoS resiliency to the developed system the messaging behavior of each node is observed and if an abnormality is detected, packets are dropped to avoid malicious activity.

show abstract

mentioning

confidence: 99%