A Port Hopping Based DoS Mitigation Scheme in SDN Network
Liancheng Zhang, Yi Min Guo, Huiqiang Yuwen, Yu Wang · 2016
In order to resist DoS attack, taking advantages of SDN network's logically centralized control and network programmable features, a port hopping based DoS mitigation scheme in SDN network is proposed, which moves port hopping function forward to SDN controller and presents a timestamp feedback based hopping synchronization method. This proposed scheme not only can reduce protected server's cost caused by port hopping, earlier detect and filter malicious packets than traditional port hopping schemes, but also can resist port scanning and internal attack. Theoretical analysis and experimental results show that this proposed scheme can effectively defend against DoS attack and port scanning without consuming many resources on SDN controller.