Please use this identifier to cite or link to this item:
Title: Detection of Control Layer DDoS Attack using Entropy metrics in SDN: An Empirical Investigation
Authors: Sahoo, Kshira Sagar
Vankayala, Manikanta
Sahoo, Bibhudatta
Dash, Ratnakar
Keywords: SDN
General Entropy
Issue Date: Dec-2017
Citation: 9th International Conference on Advanced Computing, Chennai, Tamilnadu, India, 14 - 16 December, 2017
Abstract: The Software Defined Networks (SDN) and OpenFlow technologies become the emerging networking technology that supports the dynamic nature of the network functions through simplified network management. The main innovation behind SDN is the decoupling of forwarding plane and control plane. In control plane, the controller provides a pivotal point of control to distribute the policy information throughout the network through a standard protocol like OpenFlow. Despite numerous benefits, SDN security is still a matter of concern among the research communities. The Distributed Denial-of-Service (DDoS) attack have been posing a tremendous threat to the Internet since a long back. The variant of this attack is quickly becoming more and more complex. With the advancement in network technologies, on the one hand SDN become an important tool to defeat DDoS attacks, but on another hand, it becomes a victim of DDoS attacks due to the potential vulnerabilities exist across various SDN layer. Moreover, this article focuses on the DDoS threat to control plane which is the central point of SDN. The entropy-based DDoS detection method is a wildly used technique in the traditional network. For detection of DDoS attack in control layer of SDN, few works have employed entropy method. In this paper, taking the advantages of flow based nature of SDN, we proposed General Entropy (GE) based DDoS attack detection mechanism. The experimental results show that our detection mechanism can detect the attack quickly and achieve a high detection accuracy with a low false positive rate.
Description: Copyright of this document belongs to proceedings publisher.
Appears in Collections:Conference Papers

Files in This Item:
File Description SizeFormat 
2017_ICoAC_KSSahoo_Detection.pdfConference Paper581.32 kBAdobe PDFView/Open

Items in DSpace are protected by copyright, with all rights reserved, unless otherwise indicated.