SDN-Based ARP Attack Detection for Cloud Centers
Huan Ma, Hao Ding, Yang Yang, Zhenqiang Mi, Miao Zhang · 2015
To address the issue of internal network security, Software-Defined Network technology has been introduced to large-scale cloud centers, as it could not only improve network performance but also deal with network attacks. In order to prevent man-in-the-middle (MITM) and denial of service (DoS) attack caused by Address Resolution Protocol (ARP) bug in the cloud center, this paper proposed an algorithm using SDN technology to calculate the probability of a host being an attacker, and further give out a detect model based on the algorithm. Experiments prove the validity of this method.