Hits:

Affiliation of Author(s):计算机科学与技术学院/人工智能学院/软件学院

Journal:Tongxin Xuebao

Abstract:DDoS attack extensively existed have been mortal threats for the software-defined networking (SDN) controllers and there is no any security mechanism which can prevent them yet. Combining SDN and network function virtualization (NFV), a novel preventing mechanism against DDoS attacks on SDN controller called upfront detection middlebox (UDM) was proposed. The upfront detection middlebox was deployed between SDN switch interfaces and user hosts distributed, and DDoS attack packets were detected and denied. An NFV-based method of implementing the upfront middlebox was put forward, which made the UDM mechanism be economical and effective. A prototype system based on this mechanism was implemented and lots experiments were tested. The experimental results show that the UDM mechanism based on NFV can real-time and effectively detect and prevent against DDoS attacks on SDN controllers. © 2019, Editorial Board of Journal on Communications. All right reserved.

ISSN No.:1000-436X

Translation or Not:no

Date of Publication:2019-03-25

Co-author:Xue, Hao,hxh,Chen, Ming,cmh

Correspondence Author:Qian Hongyan