Attacks In Software-Defined Networking Research Articles

Software-Defined Networking (SDN) and Distributed Denial of Service (DDoS) Attacks in Cloud Computing Environments: A Survey, Some Research Issues, and Challenges

Distributed denial of service (DDoS) attacks in cloud computing environments are growing due to the essential characteristics of cloud computing. With recent advances in software-defined networking (SDN), SDN-based cloud brings us new chances to defeat DDoS attacks in cloud computing environments. Nevertheless, there is a contradictory relationship between SDN and DDoS attacks. On one hand, the capabilities of SDN, including software-based traffic analysis, centralized control, global view of the network, dynamic updating of forwarding rules, make it easier to detect and react to DDoS attacks. On the other hand, the security of SDN itself remains to be addressed, and potential DDoS vulnerabilities exist across SDN platforms. In this paper, we discuss the new trends and characteristics of DDoS attacks in cloud computing, and provide a comprehensive survey of defense mechanisms against DDoS attacks using SDN. In addition, we review the studies about launching DDoS attacks on SDN, as well as the methods against DDoS attacks in SDN. To the best of our knowledge, the contradictory relationship between SDN and DDoS attacks has not been well addressed in previous works. This work can help to understand how to make full use of SDN's advantages to defeat DDoS attacks in cloud computing environments and how to prevent SDN itself from becoming a victim of DDoS attacks, which are important for the smooth evolution of SDN-based cloud without the distraction of DDoS attacks.

Defending DDoS Attacks in Software-Defined Networking Based on Legitimate Source and Destination IP Address Database

Defending DDoS Attacks in Software-Defined Networking Based on Legitimate Source and Destination IP Address Database

Distributed denial of service attacks in software-defined networking with cloud computing

Although software-defined networking (SDN) brings numerous benefits by decoupling the control plane from the data plane, there is a contradictory relationship between SDN and distributed denial-of-service (DDoS) attacks. On one hand, the capabilities of SDN make it easy to detect and to react to DDoS attacks. On the other hand, the separation of the control plane from the data plane of SDN introduces new attacks. Consequently, SDN itself may be a target of DDoS attacks. In this paper, we first discuss the new trends and characteristics of DDoS attacks in cloud computing environments. We show that SDN brings us a new chance to defeat DDoS attacks in cloud computing environments, and we summarize good features of SDN in defeating DDoS attacks. Then we review the studies about launching DDoS attacks on SDN and the methods against DDoS attacks in SDN. In addition, we discuss a number of challenges that need to be addressed to mitigate DDoS attached in SDN with cloud computing. This work can help understand how to make full use of SDN's advantages to defeat DDoS attacks in cloud computing environments and how to prevent SDN itself from becoming a victim of DDoS attacks.

Impact on SDN Powered Network Services Under Adversarial Attacks

Abstract Logically centralized nature of the controller in Software-defined Networking (SDN) makes it vulnerable to various adversarial attacks. These attacks have capabilities to degrade the performance of the managed network or bring it down in the worst case. For this reason, a large-scale deployment of SDN needs evaluation of the impact of adversarial attacks on network services. In this work, we implement various attacks in SDN and analyze their impact on the performance of web-based services running over it. Prior to that, we briefly discuss different kinds of vulnerabilities and threats in SDN. We consider the connection set-up latency and loss, for web-client requests, as metrics for the evaluation. We observe a significant degradation in the performances of web services, in terms of response time and availability, in the presence of implemented attacks.