Information Theory-based Techniques to Detect DDoS in SDN: A Survey

Software Defined Networking (SDN) is a centralized network management technology, which gives total control as well as security over the entire network from a single point Controller. An SDN controller offers versatile flows control. It normally runs on a server and uses procedures to inform switches where and how to send packets. To interrupt smooth functionalities of the SDN, the controller is the central and target point of attackers. There are various network security solutions are given still, the security of the network is an open research challenge. The SDN is a modern networking architecture that separated the control plane from the data forwarding plane and, as a result, offers improved abstract services and functionalities for detecting and dealing with security threats, where distributed denial of service (DDoS) attacks are one of the most troubling security issues, because it can disrupt the services of any network including the SDN. This paper reviews major known DDoS attacks and their information theory-based detection techniques in the SDN. Also, it can help researchers and professionals working in this field to recognize these threats and to see the latest scenarios.