Conceptual Review of DoS Attacks in Software Defined Networks

Nisa, Najmun; Khan, Adnan Shahid; Ahmad, Zeeshan; Aqeel, Sehrish; Asim, Jamil; Afzal, Shehroz

doi:10.1109/aiic54368.2022.9914598

Cited by 1 publication

(4 citation statements)

References 19 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…At this time, many security techniques, such as firewalls, authentication systems, various encryption methods, and various antiviruses, are utilized in order to shield sensitive data from the possibility of being compromised by a security breach. 10,[43][44][45] The network was protected from DoS attacks by Shoeb and Chithralekha 46 using a trust-based method. For each new packet, an IP-based trust value was applied based on the packet's communication history.…”

Section: Related Workmentioning

confidence: 99%

“…Each procedure will separately and jointly generate a solution based on different attributes, all of which will be used to identify and react to the messages. At this time, many security techniques, such as firewalls, authentication systems, various encryption methods, and various antiviruses, are utilized in order to shield sensitive data from the possibility of being compromised by a security breach 10,43–45 …”

Section: Related Workmentioning

confidence: 99%

“…Interfaces play a crucial role in facilitating the exchange of information and promoting effective communication across the realms of data, control, and application planes. [8][9][10] The SDN architecture has three interfaces: the eastbound/ westbound interface, which establishes connections between distributed controllers; the southbound interface, which links the control plane to the data plane; and the northbound interface, which connects the control plane to the application plane. 3,11 Typically, the establishment of communication between the controller and switches is facilitated using a standardized protocol known as OpenFlow.…”

Section: Introductionmentioning

confidence: 99%

“…The control plane, alternatively referred to as the controllers, has responsibility for all network operations, while the data plane only concentrates on the transmission of traffic based on instructions received from the control plane. Interfaces play a crucial role in facilitating the exchange of information and promoting effective communication across the realms of data, control, and application planes 8–10 . The SDN architecture has three interfaces: the eastbound/westbound interface, which establishes connections between distributed controllers; the southbound interface, which links the control plane to the data plane; and the northbound interface, which connects the control plane to the application plane 3,11 .…”

Section: Introductionmentioning

confidence: 99%

See 3 more Smart Citations

TPAAD: Two‐phase authentication system for denial of service attack detection and mitigation using machine learning in software‐defined network

Nisa,

Khan,

Ahmad

et al. 2024

Int J Network Mgmt

Self Cite

View full text Add to dashboard Cite

Software‐defined networking (SDN) has received considerable attention and adoption owing to its inherent advantages, such as enhanced scalability, increased adaptability, and the ability to exercise centralized control. However, the control plane of the system is vulnerable to denial‐of‐service (DoS) attacks, which are a primary focus for attackers. These attacks have the potential to result in substantial delays and packet loss. In this study, we present a novel system called Two‐Phase Authentication for Attack Detection that aims to enhance the security of SDN by mitigating DoS attacks. The methodology utilized in our study involves the implementation of packet filtration and machine learning classification techniques, which are subsequently followed by the targeted restriction of malevolent network traffic. Instead of completely deactivating the host, the emphasis lies on preventing harmful communication. Support vector machine and K‐nearest neighbours algorithms were utilized for efficient detection on the CICDoS 2017 dataset. The deployed model was utilized within an environment designed for the identification of threats in SDN. Based on the observations of the banned queue, our system allows a host to reconnect when it is no longer contributing to malicious traffic. The experiments were run on a VMware Ubuntu, and an SDN environment was created using Mininet and the RYU controller. The results of the tests demonstrated enhanced performance in various aspects, including the reduction of false positives, the minimization of central processing unit utilization and control channel bandwidth consumption, the improvement of packet delivery ratio, and the decrease in the number of flow requests submitted to the controller. These results confirm that our Two‐Phase Authentication for Attack Detection architecture identifies and mitigates SDN DoS attacks with low overhead.

show abstract

Section: Related Workmentioning

confidence: 99%

Section: Related Workmentioning

confidence: 99%