A Detection Method for DDoS Attack against SDN Controller
LinHai Meng · 2018
through the data plane and control plane isolation, SDN network architecture framework helps to simplify network configuration and management, improves the development efficiency, and the centralized logic controller to give more control over the entire network, the network has full visibility.These advantages of SDN also expose the network security vulnerabilities.Compared with the conventional network, the impact of the attack is more serious.A Distribute Denial of Service attack against controller is one of the serious security threats of SDN.Slow attack is more difficult to protect.The destruction of the controller may break whole SDN network.In order to mitigate this threat, this paper introduces a lightweight detection scheme based on entropy of the destination IP address and SPRT.We first calculate the entropy of the destination IP address in SDN, then make a decision by using SPRT (Sequential Probability Ratio Test).Our paper plays a very good protection against DDoS slow attack in SDN.