Mitigation of Controller induced DDoS Attack on Primary Server in High Traffic Scenarios of Software Defined Networks

Sanjeetha, R; Prasanna, A.; Kumar, Dinesh; Kanavalli, Anita

doi:10.1109/ants.2018.8710066

Cited by 5 publications

(3 citation statements)

References 6 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Sanjeetha et al [16] focused in their research on DDoS attacks on primary victim servers flooded by high traffic. DDoS attack can be instigated on a primary server present in SDN during high traffic scenarios.…”

Section: Introductionmentioning

confidence: 99%

Encountering distributed denial of service attack utilizing federated software defined network

Abdelhadi,

Alsafasfeh,

Alqudah

2024

IJECE

View full text Add to dashboard Cite

This research defines the distributed denial of service (DDoS) problem in software-defined-networks (SDN) environments. The proposes solution uses Software defined networks capabilities to reduce risk, introduces a collaborative, distributed defense mechanism rather than server-side filtration. Our proposed network detection and prevention agent (NDPA) algorithm negotiates the maximum amount of traffic allowed to be passed to server by reconfiguring network switches and routers to reduce the ports' throughput of the network devices by the specified limit ratio. When the passed traffic is back to normal, NDPA starts network recovery to normal throughput levels, increasing ports' throughput by adding back the limit ratio gradually each time cycle. The simulation results showed that the proposed algorithms successfully detected and prevented a DDoS attack from overwhelming the targeted server. The server was able to coordinate its operations with the SDN controllers through a communication mechanism created specifically for this purpose. The system was also able to determine when the attack was over and utilize traffic engineering to improve the quality of service (QoS). The solution was designed with a sophisticated way and high level of separation of duties between components so it would not be affected by the design aspect of the network architecture.

show abstract

Section: Introductionmentioning

confidence: 99%

Encountering distributed denial of service attack utilizing federated software defined network

Abdelhadi,

Alsafasfeh,

Alqudah

2024

IJECE

View full text Add to dashboard Cite

show abstract

“…Business competition is straightforward with DDoS attack tricks because all business processes use computer networks and the internet [9][10][11][12]. Delivery of DDoS in large quantities or often referred to as botnets will cause servers to freeze and last for days, causing companies, agencies, and business people to lose big [13][14][15]. Kaspersky Laboratories and International B2B stated the results of their research on DDoS caused enormous losses to the company's online resources by crippling the company's online services with an average loss of $52,000 to $444,000 [16].…”

Section: Introductionmentioning

confidence: 99%

Network Forensics Against Volumetric-Based Distributed Denial of Service Attacks on Cloud and the Edge Computing

Yudhana¹,

Riadi²,

Suharti³

2022

IJSSE

View full text Add to dashboard Cite

Cyber attacks are increasingly rampant and even damage the reputation of companies, agencies, and services. DDoS attacks have been overgrowing in the last year, which has resulted in substantial losses. Volumetric-based Distributed Denial of Service (DDoS) is a hazardous attack type because it can consume server resources, causing the server to be unable to serve customer requests. The network design consisting of hardware and software becomes the essential capital that is a determinant of the quality of a network in the long term. A firewall is one way to stop the occurrence of DDoS. Forensics and mitigation in this study apply Packet Filtering Firewall and Circuit Level Gateway Firewall against ICMP-Flood DDoS attacks. The research methodology is a simulated experiment on cloud and edge computing networks. Forensics and mitigation in cloud computing are carried out at layer 3, the Internet Protocol layer TCP/IP model, by applying a Packet-Filtering Firewall with a success rate of 64%-69% traffic reduction. In contrast, the success of reducing server resource usage is 73.75%. At the same time, Edge computing is carried out at layer 4, namely the Transport Protocol layer TCP/IP model, by applying a Circuit-Level Gateway Firewall with a success rate of reducing traffic by 55%-98.88%. In comparison, the success of lowering server resource usage is 96% and restoring traffic and paralyzed servers to normal position.

show abstract

“…This solution has no different from traditional network solutions which forwarding traffic to centralize firewall. [10] In this paper, show how a DDoS attack can be instigated on a primary server. The attack is instigated by generating a huge number of packets with destination IP addresses to switch which connects the primary server.…”

mentioning

confidence: 99%

Ddos Attack Detection and Mitigation at SDN Enviroment

Abdulkarem¹,

Alethawy²

2021

Iraqi Journal of ICT

View full text Add to dashboard Cite

Abstract- Software-Defined Networking (SDN) is a promising sample that allows the programming behind the network’s operation with some abstraction level from the underlying networking devices .the insistence to detect and mitigate Distributed Denial of Service (DDoS) which introduced by network devices tries to discover network security weaknesses and the negative effects of some types of Distributed Denial of Service (DDoS) attacks. An SDN-based generic solution to mitigate DDoS attacks when and where they originate. Briefly, it compares at runtime the expected trend of normal traffic against the trend of abnormal traffic; if big deviation on the traffic trend is detected, then an event is created; as an event associated to a DDoS attack is produced, an SDN (OpenDayLight) controller creates flow rules for blocking the malign traffic, By designing and implementing an application that reactively impairs the attacks at its origin, ensuring the “normal operation” of the network infrastructure. The evaluation results suggest that the proposal timely detect the characteristics of a flooding DDoS attacks, and mitigates their negative impacts on the network performance, and ensures the correct data delivery of normal traffic. The work sheds light on the programming relevance over an abstracted view of the network infrastructure.

show abstract

Mitigation of Controller induced DDoS Attack on Primary Server in High Traffic Scenarios of Software Defined Networks

Cited by 5 publications

References 6 publications

Encountering distributed denial of service attack utilizing federated software defined network

Encountering distributed denial of service attack utilizing federated software defined network

Network Forensics Against Volumetric-Based Distributed Denial of Service Attacks on Cloud and the Edge Computing

Ddos Attack Detection and Mitigation at SDN Enviroment

Contact Info

Product

Resources

About