IPR: Intelligent Proactive Routing model toward DDoS attack handling in SDN

Abstract

Software-Defined Networking (SDN) is a contemporary and growing technology in the field of networking. It has the benefit of decoupling the infrastructure layer and the control layer thus enabling automated provisioning. Though the SDN offers numerous benefits, such as dynamic programmability, elevated bandwidth, and cost-effectiveness, it is exposed to several security issues. The most significant issue that needs to be addressed in SDN is the Distributed Denial of Service (DDoS) attack. We propose an Intelligent Proactive Routing (IPR) model to detect and mitigate the DDOS attack. The objective of our proposed model is to reduce the controller overhead, improve accuracy of detecting attacks in minimum time period, and also minimize performance degradation. The novelty of this approach is to integrate the SFlow with the Open Flow controller to lower the overhead of the control layer. And the flow rules are inserted proactively, to avoid packet loss and unavailability of service during an attack. We evaluated our proposed model with standard algorithms, and the results reveal less detection and computational time with an average of 5secs and high accuracy of 99%. The overall results show how large the network is, in which this model can perform efficiently.