As the demand and utilization of network infrastructure is increasing, traditional network architecture has become inefficient. We need to shift to the Software Defined Network architecture which separates the control plane and data plane of the router. This separation of these planes has given birth to several security threats to the network and one of the most harmful one is Distributed Denial -of-Service attack on the control plane which shuts the entire network down. This paper proposes non-linear flow installation algorithm which changes the behaviour of the controller from single to multiple routing rules installation. Installation of this algorithm reduces the traffic flowing towards the controller due to which its resource consumption decreases. This algorithm’s installation decreases the traffic by 37% compared to the normal traffic of traditional controller.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Designing Secure Software-Defined Network, Resistant to DDoS Attack Using Non-linear Routing Rule Installation

  • Anoop Kumar Patel,
  • Prince Raj

摘要

As the demand and utilization of network infrastructure is increasing, traditional network architecture has become inefficient. We need to shift to the Software Defined Network architecture which separates the control plane and data plane of the router. This separation of these planes has given birth to several security threats to the network and one of the most harmful one is Distributed Denial -of-Service attack on the control plane which shuts the entire network down. This paper proposes non-linear flow installation algorithm which changes the behaviour of the controller from single to multiple routing rules installation. Installation of this algorithm reduces the traffic flowing towards the controller due to which its resource consumption decreases. This algorithm’s installation decreases the traffic by 37% compared to the normal traffic of traditional controller.