Research on Security of UDP Reflection Attack in Civil Aviation Information Network Based on SDN
Su Lin · 2020 IEEE 2nd International Conference on Civil Aviation Safety and Information Technology (ICCASIT · 2020
Be aimed at generator protocol, domain name system protocol, network clock protocol, simple network management protocol, simple service discovery protocol. These five types of user datagram protocol (UDP) reflection attack amplifiers are proposed, and a UDP reflection attack response scheme based on IDS is proposed. On the premise of locating the reflection attack amplifier, combining with the software defined network technology of network boundary, the response rules based on OpenFlow flow table are used to filter the control command message, so as to prevent UDP reflection attack. The test results on the boundary of civil aviation information network verify the operability and effectiveness of the response scheme.