点击次数：

所属单位：计算机科学与技术学院/人工智能学院/软件学院

发表刊物：Tongxin Xuebao

摘要：DDoS attack extensively existed have been mortal threats for the software-defined networking (SDN) controllers and there is no any security mechanism which can prevent them yet. Combining SDN and network function virtualization (NFV), a novel preventing mechanism against DDoS attacks on SDN controller called upfront detection middlebox (UDM) was proposed. The upfront detection middlebox was deployed between SDN switch interfaces and user hosts distributed, and DDoS attack packets were detected and denied. An NFV-based method of implementing the upfront middlebox was put forward, which made the UDM mechanism be economical and effective. A prototype system based on this mechanism was implemented and lots experiments were tested. The experimental results show that the UDM mechanism based on NFV can real-time and effectively detect and prevent against DDoS attacks on SDN controllers. © 2019, Editorial Board of Journal on Communications. All right reserved.

ISSN号：1000-436X

是否译文：否

发表时间：2019-03-25

合写作者：Xue, Hao,华学好,Chen, Ming,陈明和

通讯作者：钱红燕