FMD: A DoS mitigation scheme based on flow migration in software‐defined networking. (8th March 2018)

• Record Type: Journal Article
• Authors: Wu, Pengpeng; Yao, Lin; Lin, Chi; Wu, Guowei; Obaidat, Mohammad S.
• Is Part Of: International journal of communication systems. Volume 31:Number 9(2018)
• Page Start: n/a
• Page End: n/a
• Publication Date: 2018-03-08
• Subjects: attack mitigation -- denial of service attack -- OpenFlow -- software‐defined networking; Telecommunication systems -- Periodicals; 621.382
• DOI: 10.1002/dac.3543
• Languages: English
• ISSNs: 1074-5351

Abstract

Summary: Software‐defined networking (SDN) emerges as the next generation of networking architecture, aiming to improve the network manageability and adaptability. However, because of the centralized control policy, SDN is liable to suffering from the denial of service attack in both the data plane and the control plane. To resist the attack and prevent the network from being paralyzed, we propose a novel mitigation scheme named flow migration defense, which uses a slave controller as a substitution to endure flooding requests mitigated from the master controller. Considering the special case that the normal requests may be regarded as the malicious ones, these requests are reforwarded back to the master controller on the basis of the round‐robin scheduling. To prevent the master controller from being flooded by the reforwarded requests, we design the adaptive rate adjustment method to adjust the reforwarding rate. Compared with multilevel feedback queue and FloodDefender, simulations demonstrate that flow migration defense can mitigate the SDN‐aimed denial of service attack efficiently with a better performance in terms of request response time, packet loss rate, and mitigation time. Abstract : This paper propose a novel mitigation scheme named flow migration defense against the SDN‐aimed DoS attack. Flow migration defense uses a slave controller to sustain attacks while the master controller maintains its stability and functionality. The simulation results show that flow migration defense is superior in requests response time, packet loss rate, and mitigation time.