Software-Defined Networking (SDN) is an emerging networking paradigm that provides an advanced programming capability and moves the control functionality to a centralized controller. This paper proposes a two-stage novel intelligent approach that takes advantage of the SDN approach to detect Denial of Service (DoS) flooding attacks based on calculation of packet rate as the first step and followed by Support Vector Machine (SVM) classification as the second step. Flow concept is an essential idea in OpenFlow protocol, which represents a common interface between an SDN switch and an SDN controller. Therefore, our system calculates the packet rate of each flow based on flow statistics obtained by SDN controller. Once the packet rate exceeds a predefined threshold, the system will activate the packet inspection unit, which, in turn, will use the (SVM) algorithm to classify the previously collected packets. The experimental results showed that our system was able to detect DoS flooding attacks with 96.25% accuracy and 0.26% false alarm rate. © 2018, Universitas Ahmad Dahlan. All rights reserved.


    Access

    Download


    Export, share and cite



    Title :

    A novel intelligent approach for detecting DoS flooding attacks in software-defined networks


    Contributors:

    Publication date :

    2018-01-01


    Remarks:

    20



    Type of media :

    Article (Journal)


    Type of material :

    Electronic Resource


    Language :

    English



    Classification :

    DDC:    629





    Intelligent Optimizing Scheme for Load Balancing in Software Defined Networks

    Yu, Chen / Zhao, Zhifeng / Zhou, Yifan et al. | IEEE | 2017


    Demonstrating ADS-B AND CPDLC Attacks with Software-Defined Radio

    Eskilsson, Sofie / Gustafsson, Hanna / Khan, Suleman et al. | IEEE | 2020


    Software Defined Satellite Networks

    Gopal, Rajeev / Ravishankar, Channasandra | AIAA | 2014