Software-Defined Networking Integrated with Cloud Native and Proxy Mechanism: Detection and Mitigation System for TCP SYN Flooding Attack
Chun‐I Fan, Jun-Huei Wang, Cheng-Han Shie, Yu-Lung Tsai · 2023 17th International Conference on Ubiquitous Information Management and Communication (IMCOM) · 2023
SDN is a new network architecture that still faces traditional network attacks. Among the attacks, Distributed-Denial-of-Service is one of the most severe attacks, especially the TCP SYN Flooding attack, which has a more significant impact. This paper is mainly to mitigate the impact of the SYN Flood attack and will combine Kubernetes and design a unique component: SDN Controller Manager, which exists in K8s as a microservices. The proxy mechanism is used to resist the SYN Flooding attack, and the K8s feature is further utilized. If the SDN Controller Manager is attacked and the service is terminated abnormally, K8s will automatically create a new SDN Controller Manager component to continue to provide services.