SDN-Based LDoS Mitigation System

Software Defined Networking (SDN) is an emerging network architecture that features a separation of control plane and data plane, as well as strong centralized management capability and scalability. However, the centralized control mode of SDN also exposes unique vulnerabilities. When a Low-rate Denial of Service (LDoS) attack occurs in an SDN architecture, the entire network is also affected. Based on the feature of OpenFlow flow tables for classifying and statistics of each flow, this article proposes a SAX-DSW mitigation system that combines the PAA-SAX and DSW-DT algorithm to locate the attack source and victim port. A LDoS attack defense strategy is also designed that combines finding the attack port and blocking the attack path. To better demonstrate the functions and metrics of the attack detection and defense system, a Python-based Graphical User Interface (GUI) system is developed.