DDoS attack defence mechanism using sFlow

An upcoming communication network is software-defined networking (SDN). The idea of keeping the control plane and data plane separate has given researchers a significant amount of space to experiment with novel ideas. Strong security is needed since the central controller handles all network control operations. SDN security becomes more important since this dynamic network architecture encounters a variety of design complexity and frequent open-flow flaws, such as problems with a control system, in addition to having a bright future ahead of it. It is becoming the new standard in modern networks, and as part of our research, we looked at what impact they might have on security and privacy. The most common cyberattack, known as Distributed denial of service (DDoS) attacks is another of the major problems facing modern networks, and DDoS attacks can be very difficult to defend against and causes the system resources to be depleted, making the services unavailable to fulfil valid requests. Open Daylight (ODL) and Ryu, two of the most potent and well-known SDN controllers, are experimentally compared in this study. The Mininet emulator is used for the experimentation. Wireshark is used to record and analyze live packets. Additionally, early DDoS attack detection in the controller is a crucial area for research. There are numerous methods suggested to find DDoS attacks. In this study, we suggest a one-level protection DDoS attack detection method for SDN controllers. sFlow is used to initially identify attacks.