Software-defined network flow table overflow attacks and countermeasures

Abstract

Software-defined network (SDN) is proposed as a new concept in computer networks, which separates the control plane from the data plane. And it provides a programmable network architecture that could facilitate rapid network innovation. OpenFlow is a network protocol that standardises the communications between OpenFlow controllers and OpenFlow switches. It is considered as an enabler of SDN. The flow table in OpenFlow switches plays a critical role in OpenFlow-based SDN, which stores the rules populated by the controllers for controlling and directing the packet flows in SDN. Nevertheless, they also become a new target of malicious attacks. This paper analyses the flow table overflow attack, a type of denial of service attacks, and proposes a novel eviction algorithm, dynamic in/out balancing with least frequently used eviction (DIOB/LFU), at service level to defend against the flow table overflow attacks.

An efficient algorithm for modelling and dynamic prediction of network traffic

“…Given the importance of this problem, there are a number of researches related to the network interconnect and flow (You et al, 2016;Asakura, 2007;Divakaran and Chinnagounder, 2015;Su et al, 2016;Nakayama and Gang, 2013;Chuang and Jiang, 2006;Ye et al, 2015;Abraham and Rao, 2008;Todinov, 2012). For example, traffic prediction models are available, such as autoregressive integrated moving average model (ARIMA), as well a Comment [T4]: Author: Please reduce biographical details of M.D.…”