Attacks In Software-Defined Networking Research Articles

Defending DDoS Attacks in Software-Defined Networking Based on Legitimate Source and Destination IP Address Database

Defending DDoS Attacks in Software-Defined Networking Based on Legitimate Source and Destination IP Address Database

Distributed denial of service attacks in software-defined networking with cloud computing

Although software-defined networking (SDN) brings numerous benefits by decoupling the control plane from the data plane, there is a contradictory relationship between SDN and distributed denial-of-service (DDoS) attacks. On one hand, the capabilities of SDN make it easy to detect and to react to DDoS attacks. On the other hand, the separation of the control plane from the data plane of SDN introduces new attacks. Consequently, SDN itself may be a target of DDoS attacks. In this paper, we first discuss the new trends and characteristics of DDoS attacks in cloud computing environments. We show that SDN brings us a new chance to defeat DDoS attacks in cloud computing environments, and we summarize good features of SDN in defeating DDoS attacks. Then we review the studies about launching DDoS attacks on SDN and the methods against DDoS attacks in SDN. In addition, we discuss a number of challenges that need to be addressed to mitigate DDoS attached in SDN with cloud computing. This work can help understand how to make full use of SDN's advantages to defeat DDoS attacks in cloud computing environments and how to prevent SDN itself from becoming a victim of DDoS attacks.

Impact on SDN Powered Network Services Under Adversarial Attacks

Abstract Logically centralized nature of the controller in Software-defined Networking (SDN) makes it vulnerable to various adversarial attacks. These attacks have capabilities to degrade the performance of the managed network or bring it down in the worst case. For this reason, a large-scale deployment of SDN needs evaluation of the impact of adversarial attacks on network services. In this work, we implement various attacks in SDN and analyze their impact on the performance of web-based services running over it. Prior to that, we briefly discuss different kinds of vulnerabilities and threats in SDN. We consider the connection set-up latency and loss, for web-client requests, as metrics for the evaluation. We observe a significant degradation in the performances of web services, in terms of response time and availability, in the presence of implemented attacks.