Software-defined Network with SNMP Monitoring Sensor Against SYN Flooding Attack

Software-defined networking (SDN) is a technique for operating networks through parting the forwarding plane from the control plane, with employing a controller to manipulate network functions via a centralized control point. An SYN flood is a network issue in which all available server resources are consumed, hence making a server unavailable to legitimate traffic. Thus, this paper studies the problem of SYN flood within the SDN environment and the use of the SDN specifications by taking the advantage of the Open vSwitch (OVS) in terms of programmability’s feature for flooding stop. Also, the paper proposes the revealing and mitigation of attacks in the SDN through employing an application of SDN plus using simple network management protocol (SNMP) monitoring sensors through paessler router traffic grapher (PRTG) enterprise monitor, according to the abnormal behavior of malicious traffic. The proposed application shows effectiveness against SYN flooding attacks via systematic steps starting from attack detection to alarm launch to application run which deters the traffic to its normal status.