SDNTruth: Innovative DDoS Detection Scheme for Software-Defined Networks (SDN)

Linhares, Tiago; Patel, Ahmed; Barros, Ana Luiza Bessa de Paula; Fernandez, Marcial Porto

doi:10.1007/s10922-023-09741-4

Cited by 7 publications

(2 citation statements)

References 44 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The CDCA system deployment within an ISP opens an opportunity with varying degrees of risk for external and internal security attacks of various kinds. It is possible that the CDCA critical infrastructure is susceptible to Distributed Denial of Service (DDoS) attacks affecting server provision and slowing down (or completely shutting down) the service, thereby frustrating the end user [38]. The distributed and open structure of a Cache system and its associated services can make it an attractive target for potential cyber-attacks.…”

Section: Security Issuesmentioning

confidence: 99%

CDCA: Transparent Cache Architecture to Improve Content Delivery by Internet Service Providers

Bamhdi

2023

IJACSA

View full text Add to dashboard Cite

The popularity of on-demand multimedia such as video streaming services has been rapidly increasing the overall Internet traffic volume in the world. As of the beginning of 2023, almost 82% of this global Internet traffic came from video transmission through on-demand online services, trending towards changing the Internet paradigm from location-based to content-based, culminating in a new paradigm of Information-Centric Networking (ICN). ICN focuses on content distribution based on name rather than location, allowing Internet Service Providers (ISP) to implement local content caching systems for faster delivery and reduced transmission delays and unnoticeable jitter or distortions. ICN can be implemented over a Software-Defined Networking (SDN) infrastructure. SDN enables flexible programming and implementation of forwarding packet rules within a network domain seamlessly. This paper proposes a hybrid architecture that combines ICN and SDN to create a transparent in-network caching system for content distribution over the traditional IP network. The architecture aims to improve the performance of Video-on-Demand (VoD) services for customers while efficiently utilizing network provider resources. A prototype called CDCA was developed and evaluated in a Mininet emulation environment. The results of the evaluation demonstrate that the CDCA hybrid architecture to create a caching system for content distribution enhances VoD service performance and optimizes network resource utilization.

show abstract

Section: Security Issuesmentioning

confidence: 99%

CDCA: Transparent Cache Architecture to Improve Content Delivery by Internet Service Providers

Bamhdi

2023

IJACSA

View full text Add to dashboard Cite

show abstract

“…A software defined network (SDN) provides a variety of network connection ports for various computing terminals or device terminals ( Du et al, 2013 ; Elaheh, 2023 ; Linhares et al, 2023 ), making the research and application of network multipath transmission technology a hot spot ( Alcardo & Andrew, 2022 ; Intidhar, Meriem & Taoufik, 2023 ; Huang et al, 2023 ). In SDN networks, multipath transmission technology is inseparable from the multipath transmission control protocol (MPTCP) ( Vikas & Samayveer, 2023 ).…”

Section: Introductionmentioning

confidence: 99%

Research on the control strategies of data flow transmission paths for MPTCP-based communication networks

Shu,

Du,

Zhu

et al. 2023

PeerJ Computer Science

View full text Add to dashboard Cite

The performance of multipath transmission control protocol (MPTCP) subflow through the enhancement mechanism of the MPTCP communication is improved. When dealing with multiple MPTCP subflows occupying the same transmission path, critical issues such as selection and optimization of multipath, and efficient scheduling of available multiple tracks are effectively addressed by incorporating the technology called software defined network (SDN) that is constructed based on four key parameters, namely, network transmission bandwidth, transmission paths, path capacity, and network latency. Besides, critical equipment such as the network physical device layer and SDN controller are integrated with the four parameters. So, the network model defines the transmission control process and data information. Considering the predetermined total network bandwidth capacity to select multiple paths, the adequate bandwidth capacity is determined by defining the data transfer rate between MPTCP terminals and MPTCP servers. However, the processing latency of the OpenFlow switch and the SDN controller is excluded. The effective network transmission paths are calculated through two rounds of path selection algorithms. Moreover, according to the demand capacity of the data transmission and the supply capacity of the required occupied network resource, a supply and demand strategy is formulated by considering the bandwidth capacity of the total network and invalid network latency factors. Then, the available network transmission path from the valid network transmission path is calculated. The shortest path calculation problem, which is the calculation and sorting of the shortest path, is transformed into a clustering, Inter-Cluster Average Classification (ICA), problem. The instruction of the OpenFlow communication flow is designed to schedule MPTCP subflows. Thus, various validation objectives, including the network model, effective network latency, effective transmission paths, supply-demand strategies, ineffective transmission paths, shortest feasible paths, and communication rules are addressed by the proposed method whose reliability, stability, and data transmission performance are validated through comparative analysis with other conventional algorithms. Found that the network latency is around 20 s, the network transmission rate is approximately 10 Mbps, the network bandwidth capacity reaches around 25Mbps, the network resource utilization rate is about 75%, and the network swallowing volume is approximately 3 M/s.

show abstract

Evaluating the impact of filter-based feature selection in intrusion detection systems

Zouhri,

Idri,

Ratnani

2023

Int. J. Inf. Secur.

View full text Add to dashboard Cite

SDNTruth: Innovative DDoS Detection Scheme for Software-Defined Networks (SDN)

Cited by 7 publications

References 44 publications

CDCA: Transparent Cache Architecture to Improve Content Delivery by Internet Service Providers

CDCA: Transparent Cache Architecture to Improve Content Delivery by Internet Service Providers

Research on the control strategies of data flow transmission paths for MPTCP-based communication networks

Evaluating the impact of filter-based feature selection in intrusion detection systems

Contact Info

Product

Resources

About