An Intrusion Prevention Scheme for Malicious Network Traffic Based on SDN
Xiaofeng Xu, Jiahao Dai, Yifang Zhi · IOP Conference Series Materials Science and Engineering · 2020
Abstract In recent years, SDN technology has developed rapidly, and the security of SDN is the key to its further development and application. Intrusion prevention system possesses both the features of intrusion detection and protection, which is one of the important methods to ensure the security of SDN network. In this paper, we proposed a SDN-based intrusion prevention scheme for SDN security. The scheme utilizes the programmability of SDN to create four modules on the application plane of the controller, including the network monitoring module, IP address detection module, destructive packets detection and Snort linkage module. The scheme also provides users with Web UI and manual/automatic operation mode. Finally, we deployed the scheme on the Mininet platform with the Floodlight controller.