DAAD: DNS Amplification Attack Defender in SDN
Myoungbo Han, Thang Nguyen Canh, Sichul Kevin Noh, Junmin Yi, Minho Park · 2019
Public DNS servers have been deployed more and more because of some reasons such as faster web browsing or censorship bypassing. However, they are open to anyone, which can be used as a tool for network attacks. A typical attack using public DNS servers is a DNS amplification attack. In this paper, we propose a DNS amplification attack defense system which can block response messages from unsolicited DNS queries in the SDN environment by using the flow control technique. The system is emerged into the SDN controller to manages all the flow rules of the switches. The results show that our system can maintain stable bandwidth and prevent the DNS amplification attack effectively.