Improved Network Monitoring Using Software-Defined Networking for DDoS Detection and Mitigation Evaluation

Abstract

The Software-Defined Networking (SDN) is termed to be a promising paradigm since it provides a perfect administration for the network separating the data plane from the control plane. This is unlike the traditional network that has worked with the coupled data and the control plane that allows no scope for innovation. The decoupling of the forwarding and the control plane allows many advantages, such as a programmable control plane, migration, protocols, etc. Despite the provisions in the SDN that provides flexibility and agility in the performance of the network. The network environment suffers from security threats that occur due to DDoS. As the traditional methods prove to be insufficient for DDoS detection and mitigation since they lag in simple and autonomous management. The article presents the fast and flexible method for the early identification of the abnormal traffic flow for detecting the DDoS attacks and the mitigation techniques in SDN will reduce the severity of the DDoS attacks. The proposed method is simulated using the Mininet to show the proficiency of the system in terms of reliability, flexibility, processing overhead, cost, and throughput.