UDM:NFV-based prevention mechanism against DDoS attack on SDN controller
DDoS attack extensively existed have been mortal threats for the software-defined networking (SDN) controllers and there is no any security mechanism which can prevent them yet.Combining SDN and network function virtualization (NFV),a novel preventing mechanism against DDoS attacks on SDN controller...
Saved in:
| Main Authors: | , , |
|---|---|
| Format: | Article |
| Language: | zho |
| Published: |
Editorial Department of Journal on Communications
2019-03-01
|
| Series: | Tongxin xuebao |
| Subjects: | |
| Online Access: | http://www.joconline.com.cn/zh/article/doi/10.11959/j.issn.1000-436x.2019067/ |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1841539387997814784 |
|---|---|
| author | Hongyan QIAN Hao XUE Ming CHEN |
| author_facet | Hongyan QIAN Hao XUE Ming CHEN |
| author_sort | Hongyan QIAN |
| collection | DOAJ |
| description | DDoS attack extensively existed have been mortal threats for the software-defined networking (SDN) controllers and there is no any security mechanism which can prevent them yet.Combining SDN and network function virtualization (NFV),a novel preventing mechanism against DDoS attacks on SDN controller called upfront detection middlebox (UDM) was proposed.The upfront detection middlebox was deployed between SDN switch interfaces and user hosts distributed,and DDoS attack packets were detected and denied.An NFV-based method of implementing the upfront middlebox was put forward,which made the UDM mechanism be economical and effective.A prototype system based on this mechanism was implemented and lots experiments were tested.The experimental results show that the UDM mechanism based on NFV can real-time and effectively detect and prevent against DDoS attacks on SDN controllers. |
| format | Article |
| id | doaj-art-e5fd3287d8a540a6b2e76a6feb16999c |
| institution | Kabale University |
| issn | 1000-436X |
| language | zho |
| publishDate | 2019-03-01 |
| publisher | Editorial Department of Journal on Communications |
| record_format | Article |
| series | Tongxin xuebao |
| spelling | doaj-art-e5fd3287d8a540a6b2e76a6feb16999c2025-01-14T07:16:33ZzhoEditorial Department of Journal on CommunicationsTongxin xuebao1000-436X2019-03-014011612459725810UDM:NFV-based prevention mechanism against DDoS attack on SDN controllerHongyan QIANHao XUEMing CHENDDoS attack extensively existed have been mortal threats for the software-defined networking (SDN) controllers and there is no any security mechanism which can prevent them yet.Combining SDN and network function virtualization (NFV),a novel preventing mechanism against DDoS attacks on SDN controller called upfront detection middlebox (UDM) was proposed.The upfront detection middlebox was deployed between SDN switch interfaces and user hosts distributed,and DDoS attack packets were detected and denied.An NFV-based method of implementing the upfront middlebox was put forward,which made the UDM mechanism be economical and effective.A prototype system based on this mechanism was implemented and lots experiments were tested.The experimental results show that the UDM mechanism based on NFV can real-time and effectively detect and prevent against DDoS attacks on SDN controllers.http://www.joconline.com.cn/zh/article/doi/10.11959/j.issn.1000-436x.2019067/DDoS attackcontroller securitySDN and NFVupfront detection middlebox |
| spellingShingle | Hongyan QIAN Hao XUE Ming CHEN UDM:NFV-based prevention mechanism against DDoS attack on SDN controller Tongxin xuebao DDoS attack controller security SDN and NFV upfront detection middlebox |
| title | UDM:NFV-based prevention mechanism against DDoS attack on SDN controller |
| title_full | UDM:NFV-based prevention mechanism against DDoS attack on SDN controller |
| title_fullStr | UDM:NFV-based prevention mechanism against DDoS attack on SDN controller |
| title_full_unstemmed | UDM:NFV-based prevention mechanism against DDoS attack on SDN controller |
| title_short | UDM:NFV-based prevention mechanism against DDoS attack on SDN controller |
| title_sort | udm nfv based prevention mechanism against ddos attack on sdn controller |
| topic | DDoS attack controller security SDN and NFV upfront detection middlebox |
| url | http://www.joconline.com.cn/zh/article/doi/10.11959/j.issn.1000-436x.2019067/ |
| work_keys_str_mv | AT hongyanqian udmnfvbasedpreventionmechanismagainstddosattackonsdncontroller AT haoxue udmnfvbasedpreventionmechanismagainstddosattackonsdncontroller AT mingchen udmnfvbasedpreventionmechanismagainstddosattackonsdncontroller |