vDNS closed-loop control: A framework for an elastic control plane service

Futamura, Kenichi; Karasaridis, Anestis; Noël, Eric; Reeser, Paul; Sridharan, Ashwin; Johnson, Carolyn; Velardo, Pat

doi:10.1109/nfv-sdn.2015.7387423

Cited by 4 publications

(7 citation statements)

References 4 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…There are a number of investigations considering the victim‐based perspective for deployment location in the application plane 43,51,62,65,96 . In Maccherani et al., 51 Ha et al., 43 and Li et al., 143 the detection mechanisms are implemented on switches or middleboxes close to the victim.…”

Section: Solutions Focused On the Application Planementioning

confidence: 99%

“…A number of research efforts do not depend on any other system to detect or mitigate DDoS attacks and can be considered autonomous, such as Maccherani et al., 51 Futamura et al., 62 Lopez et al., 64 Kumar et al., 141 and Li et al. 143 .…”

Section: Solutions Focused On the Application Planementioning

confidence: 99%

“…propose a mechanism that operates in the SDN controller protecting victims from DDoS attacks, using all the facilities offered by the controller such as traffic statistics, global network view and easy communication with other components. The solution proposed by Futamura et al 62 . operates on the DNS resolver, which is a frequent target of reflective DDoS attacks.…”

Section: Solutions Focused On the Application Planementioning

confidence: 99%

“…The proposed mechanism relies on the use of a correlation matrix, Shannon entropy, and chi-square goodness-of-fit techniques. Futamura et al 62 use traffic rerouting to change traffic routes in order to minimize DDoS activity in the context of DNS resolvers, allowing reaction to different scenarios. In particular, the authors propose a framework with a control-loop to monitor network resources.…”

Section: Activity Levelmentioning

confidence: 99%

“…Morales et al 65 propose a mechanism that operates in the SDN controller protecting victims from DDoS attacks, using all the facilities offered by the controller such as traffic statistics, global network view and easy communication with other components. The solution proposed by Futamura et al 62 operates on the DNS resolver, which is a frequent target of reflective DDoS attacks. Finally, Kalliola et al 96 use an approach based on honeypots, which can also be considered as the victim perspective, since the honeypots act like legitimate network components.…”

Section: Deployment Locationmentioning

confidence: 99%

See 4 more Smart Citations

A systematic review on distributed denial of service attack defense mechanisms in programmable networks

Dalmazo¹,

Marques

Costa

et al. 2021

Int J Network Mgmt

View full text Add to dashboard Cite

Summary Design flaws and vulnerabilities inherent to network protocols, devices, and services make Distributed Denial of Service (DDoS) a persisting threat in the cyberspace, despite decades of research efforts in the area. The historical vertical integration of traditional IP networks limited the solution space, forcing researchers to tweak network protocols while maintaining global compatibility and proper service to legitimate flows. The advent of Software‐Defined Networking (SDN) and advances in Programmable Data Planes (PDP) changed the state of affairs and brought novel possibilities to deal with such attacks. In summary, the ability of bringing together network intelligence to a control plane, and offloading flow processing tasks to the forwarding plane, opened up interesting opportunities for network security researchers unlike ever. In this article, we dive into recent research that relies on SDN and PDP to detect, mitigate, and prevent DDoS attacks. Our literature review takes into account the SDN layered view as defined in RFC7426 and focuses on the data, control, and application planes. We follow a systematic methodology to capture related articles and organize them into a taxonomy of DDoS defense mechanisms focusing on three facets: activity level, deployment location, and cooperation degree. From the analysis of existing work, we also highlight key research gaps that may foster future research in the field.

show abstract

Section: Solutions Focused On the Application Planementioning

confidence: 99%