Performance Evaluation of Packet Injection and DOS Attack Controller Software (PDACS) Module

Abstract

AbstractNetwork management is a process where the networks are monitored and their performance is enhanced. Software defined networking (SDN) is one of the methodologies for network management which is used to obtain network configuration which is efficient programmatically so that the network performance can be monitored and improved. The industries make use of the technology based on software defined networking for fault tolerance and network enhancement. The security of the network is the only question which has been more challenging in research community, whenever attacks are performed by the malicious users. The service level will be compromised by the network. Due to such attacks, data plane resources are consumed, and it affects functionality of the control plane of software defined network. In order to maintain the software defined network’s secure and efficient, We proposed a packet injection and DOS attack controller software (PDACS) module. PDACS module will protect the controller of the network when it is attacked by remote malicious users. In this proposed work, the attacks like packet injection and denial of service attack will be stopped, and thereby, controller performance is enhanced using PDACS module. The real-time implementation of the SDN in the proposed work is done using Zodiac FX switch. The hosts and controller system of the software defined network is connected using Zodiac FX switch. We created a test bed in order to carry out this work, we considered various host like attacker, controller with Zodiac FX switch, preventer. The attackers host flood huge number of packets to the controller to stop its functionality. When the controller is down, the PDACS module identifies the port and IP address of the attacker and blocks it permanently. Thus, the controller resumes its operation. It is guaranteed that there is no compromise in the performance of PDACS even though the network is exposed to high packet injection and DOS attack as there is a threshold bit rate at every port of the switch. If threshold is exceeded, it is considered as attack and is blocked. Hence, we can say performance of PDACS module in detecting and preventing DOS and packet injection attacks in SDN is more efficient.KeywordsSoftware defined network (SDN)MininetZodiac FX switchPDACS moduleDOS attackPerformancePacket injection attack