Online traffic anomaly detection method for SDN
Zuo Qingyu · Journal of Xidian University · 2015
Based on the centralized control plane in SDN,an online traffic anomaly detection method(OpenTAD)is proposed.Firstly the flow table statistic is collected from the controller online,and the traffic matrix and sample entropy matrix are constructed and assembled.Then the PCA method is used to detect the abnormal traffic.The result of experiments show that,compared with the traditional PCA method which disposes the traffic matrix or the entropy matrix respectively offline,the OpenTAD is simple and effective,and traffic anomaly could be isolated rapidly.This method is a lightweight online traffic anomaly detection method for SDN.