DDoS Mitigation by Software-Defined Network (SDN) in the Context of ICMP And SYP Approach

Authors

  • Laxmi Poonia JECRC University, Jaipur-303905, India
  • Seema Tinker JECRC University, Jaipur-303905, India,

Keywords:

Advancement, Attack, Blockchain, DDoS, SDN

Abstract

DDoS attacks have never been easier than they are today, thanks to the advancement of technology and the widespread availability of the internet. The primary goal of a DDoS assault is to shut down or disrupt any internet services that could be using the victim's computer. There are a variety of reasons why it may be done, including personal gain, professional advancement, and political gain. Recent attacks include the largest ever packet per second DDoS attack on Akamai servers, the attack on Amazon, and the strikes on the US Department of Health and Human Services website One can use SDN and Blockchain to verify a legitimate IP address, and Blockchain can be used to store a legitimate user in a trust list with the support of a complicated architecture made up of several helper Blockchains. This research presents three possible network topologies that integrate the usage of Blockchain technology with software-defined networking for the prevention of DDOS attacks.

Downloads

Download data is not yet available.

References

Mohammed, S.S., Hussain, R., Senko, O., Bimaganbetov, B., Lee, J., Hussain, F., Kerrache, C.A., Barka, E. and Bhuiyan, M.Z.A., 2018, October. A new machine learning-based collaborative DDoS mitigation mechanism in software-defined network. In 2018 14th International Conference on Wireless and Mobile Computing, Networking and Communications (WiMob) (pp. 1-8). IEEE.

Giri, N., Jaisinghani, R., Kriplani, R., Ramrakhyani, T. and Bhatia, V., 2019, December. Distributed denial of service (DDoS) mitigation in software defined network using blockchain. In 2019 Third International Conference on I-SMAC (IoT in Social, Mobile, Analytics and Cloud)(I-SMAC) (pp. 673-678). IEEE.

Bhushan, K. and Gupta, B.B., 2019. Distributed denial of service (DDoS) attack mitigation in software defined network (SDN)-based cloud computing environment. Journal of Ambient Intelligence and Humanized Computing, 10(5), pp.1985-1997.

Bhushan, K. and Gupta, B.B., 2018, February. Detecting DDoS attack using software defined network (SDN) in cloud computing environment. In 2018 5th international conference on signal processing and integrated networks (SPIN) (pp. 872-877). IEEE.

Tayfour, O.E. and Marsono, M.N., 2020. Collaborative detection and mitigation of distributed denial-of-service attacks on software-defined network. Mobile Networks and Applications, 25(4), pp.1338-1347.

Hugues-Salas, E., Ntavou, F., Ou, Y., Kennard, J.E., White, C., Gkounis, D., Nikolovgenis, K., Kanellos, G., Erven, C., Lord, A. and Nejabati, R., 2018, March. Experimental demonstration of DDoS mitigation over a quantum key distribution (QKD) network using software defined networking (SDN). In Optical fiber communication conference (pp. M2A-6). Optica Publishing Group.

Khairi, M.H., Ariffin, S.H., Latiff, N.A., Abdullah, A.S. and Hassan, M.K., 2018. A review of anomaly detection techniques and distributed denial of service (DDoS) on software defined network (SDN). Engineering, Technology & Applied Science Research, 8(2), pp.2724-2730.

Yadav, S.K., Suguna, P. and Velusamy, R.L., 2019, July. Entropy based mitigation of Distributed-Denial-of-Service (DDoS) attack on control plane in software-defined-network (SDN). In 2019 10th International Conference on Computing, Communication and Networking Technologies (ICCCNT) (pp. 1-7). IEEE.

Shah, S.Q.A., Khan, F.Z. and Ahmad, M., 2021. The impact and mitigation of ICMP based economic denial of sustainability attack in cloud computing environment using software defined network. Computer Networks, 187, p.107825.

Ubale, T. and Jain, A.K., 2020. Survey on DDoS attack techniques and solutions in software-defined network. In Handbook of computer networks and cyber security (pp. 389-419). Springer, Cham.

Novaes, M.P., Carvalho, L.F., Lloret, J. and Proença, M.L., 2020. Long short-term memory and fuzzy logic for anomaly detection and mitigation in software-defined network environment. IEEE Access, 8, pp.83765-83781.

Ur Rasool, R., Wang, H., Ashraf, U., Ahmed, K., Anwar, Z. and Rafique, W., 2020. A survey of link flooding attacks in software defined network ecosystems. Journal of Network and Computer Applications, 172, p.102803.

Zhai, P., Song, Y., Zhu, X., Cao, L., Zhang, J. and Yang, C., 2020, August. Distributed denial of service defense in software defined network using OpenFlow. In 2020 IEEE/CIC International Conference on Communications in China (ICCC) (pp. 1274-1279). IEEE.

Saba Bashir Ahmed, Yasir Abdelgadir Mohamed, "An Approach for Software-Defined Networks Security", 2023 Second International Conference on Electrical, Electronics, Information and Communication Technologies (ICEEICT), pp.1-8, 2023

Kyaw, A.T., Oo, M.Z. and Khin, C.S., 2020, June. Machine-Learning Based DDOS Attack Classifier in Software Defined Network. In 2020 17th International Conference on Electrical Engineering/Electronics, Computer, Telecommunications and Information Technology (ECTI-CON) (pp. 431-434). IEEE.

Lawal, B.H. and Nuray, A.T., 2018, May. Real-time detection and mitigation of distributed denial of service (DDoS) attacks in software defined networking (SDN). In 2018 26th Signal Processing and Communications Applications Conference (SIU) (pp. 1-4). IEEE.

Guha Roy, D. and Srirama, S.N., 2021. A blockchain‐based cyber attack detection scheme for decentralized Internet of Things using software‐defined network. Software: practice and experience, 51(7), pp.1540-1556.

Pillutla, H. and Arjunan, A., 2019. Fuzzy self organizing maps-based DDoS mitigation mechanism for software defined networking in cloud computing. Journal of Ambient Intelligence and Humanized Computing, 10(4), pp.1547-1559.

Bavani, K., Ramkumar, M.P. and GSR, E.S., 2020, March. Statistical Approach Based Detection of Distributed Denial of Service Attack in a Software Defined Network. In 2020 6th International Conference on Advanced Computing and Communication Systems (ICACCS) (pp. 380-385). IEEE.

Ali, A. and Yousaf, M.M., 2020. Novel three-tier intrusion detection and prevention system in software defined network. IEEE Access, 8, pp.109662-109676.

Lukaseder, T., Ghosh, S. and Kargl, F., 2018. Mitigation of flooding and slow DDoS attacks in a software-defined network. arXiv preprint arXiv:1808.05357.

Al-Sakran, H., Alharbi, Y. and Serguievskaia, I., 2019, October. Framework architecture for securing IoT using blockchain, smart contract and software defined network technologies. In 2019 2nd International Conference on new Trends in Computing Sciences (ICTCS) (pp. 1-6). IEEE.

Tu, Z., Zhou, H., Li, K., Li, M. and Tian, A., 2020. An energy-efficient topology design and DDoS attacks mitigation for green software-defined satellite network. IEEE access, 8, pp.211434-211450.

Dharmadhikari, C., Kulkarni, S., Temkar, S., Bendale, S. and Student, B.E., 2019. A study of DDoS attacks in software defined networks. IRJET, 6(12).

Fenil, E. and Mohan Kumar, P., 2022. ShChain_3D-ResNet: Sharding Blockchain with 3D-Residual Network (3D-ResNet) Deep Learning Model for Classifying DDoS Attack in Software Defined Network. Symmetry, 14(6), p.1254.

Patil, J., Tokekar, V., Rajan, A. and Rawat, A., 2022. Discriminate, locate and mitigate DDoS traffic in presence of Flash Crowd in Software Defined Network. The Journal of Supercomputing, pp.1-24.

Joshi, B.K., Joshi, N. and Joshi, M.C., 2018, August. Early detection of distributed denial of service attack in era of software-defined network. In 2018 Eleventh International Conference on Contemporary Computing (IC3) (pp. 1-3). IEEE.

Mohammadi, R., Lal, C., Conti, M. and Sharma, L., 2022. Software defined network-based HTTP flooding attack defender. Computers and Electrical Engineering, 101, p.108019.

Alanazi, F., Jambi, K., Eassa, F., Khemakhem, M., Basuhail, A. and Alsubhi, K., 2022. Ensemble Deep Learning Models for Mitigating DDoS Attack in Software-Defined Network, Intelligent Automation and Soft Computing, 32(2):923-938.

Susilo, B. and Sari, R.F., 2021, January. Intrusion Detection in Software Defined Network Using Deep Learning Approach. In 2021 IEEE 11th Annual Computing and Communication Workshop and Conference (CCWC) (pp. 0807-0812). IEEE.

S. G. Rawat et al., "A Survey of DDoS Attacks Detection Schemes in SDN Environment," 2023 International Conference on Computer, Information and Telecommunication Systems (CITS), Genoa, Italy, 2023, pp. 01-06, doi: 10.1109/CITS58301.2023.10188707.

N. Gupta, R. Agarwal, S. S. Dari, S. Malik, R. Bhatt and D. Dhabliya, "DDoS and Cyber Attacks Detection and Mitigation in SDN: A Comprehensive Research of Moving Target Defense Systems," 2023 International Conference on Data Science and Network Security (ICDSNS), Tiptur, India, 2023, pp. 1-8, doi: 10.1109/ICDSNS58469.2023.10245455.

A. R and K. S, "Deep Learning Approach for Intrusion Detection and Mitigation in IoT Environment: A Comprehensive Study," 2023 International Conference on Recent Advances in Electrical, Electronics, Ubiquitous Communication, and Computational Intelligence (RAEEUCCI), Chennai, India, 2023, pp. 1-6, doi: 10.1109/RAEEUCCI57140.2023.10134161.

L. N. Kamalesh, P. Kumar and N. Pradhan, "Threats to Control Plane of Software Defined Networks: An Extensive Study," 2023 4th International Conference on Computing and Communication Systems (I3CS), Shillong, India, 2023, pp. 1-10, doi: 10.1109/I3CS58314.2023.10127564.

A. R and K. S, "Deep Learning Approach for Intrusion Detection and Mitigation in IoT Environment: A Comprehensive Study," 2023 International Conference on Recent Advances in Electrical, Electronics, Ubiquitous Communication, and Computational Intelligence (RAEEUCCI), Chennai, India, 2023, pp. 1-6, doi: 10.1109/RAEEUCCI57140.2023.10134161.

S. G. Rawat et al., "A Survey of DDoS Attacks Detection Schemes in SDN Environment," 2023 International Conference on Computer, Information and Telecommunication Systems (CITS), Genoa, Italy, 2023, pp. 01-06, doi: 10.1109/CITS58301.2023.10188707.

Rai, A., D Vyavahare, P. and Jain, A., 2019. Disatributed DoS attack detection and mitigation in software defined network (SDN). Proceedings of Recent Advances in Interdisciplinary Trends in Engineering & Applications (RAITEA).

Kousar, H., Mulla, M.M., Shettar, P. and Narayan, D.G., 2021, June. Detection of DDoS Attacks in Software Defined Network using Decision Tree. In 2021 10th IEEE International Conference on Communication Systems and Network Technologies (CSNT) (pp. 783-788). IEEE.

Matsa, L.S., Zodi-Lusilao, G.A. and Bhunu-Shava, F., 2021, November. Forward Feature Selection for DDoS Detection on Cross-Plane of Software Defined Network Using Hybrid Deep Learning. In 2021 3rd International Multidisciplinary Information Technology and Engineering Conference (IMITEC) (pp. 1-7). IEEE.

Scaranti, G.F., Carvalho, L.F., Junior, S.B., Lloret, J. and Proença Jr, M.L., 2022. Unsupervised online anomaly detection in Software Defined Network environments. Expert Systems with Applications, 191, p.116225.

Harikrishna, P. and Amuthan, A., 2021. Rival-Model Penalized Self-Organizing Map enforced DDoS attack prevention mechanism for software defined network-based cloud computing environment. Journal of Parallel and Distributed Computing, 154, pp.142-152.

Ahmed, Z., Afaqui, N. and Humayan, O., 2019. Detection and prevention of DDoS attacks on software defined networks controllers for smart grid. International Journal of Computer Applications, 975, p.8887.

Tayfour, O.E. and Marsono, M.N., 2021. Collaborative detection and mitigation of DDoS in software-defined networks. The Journal of Supercomputing, 77(11), pp.13166-13190.

Fouladi, R.F., Ermiş, O. and Anarim, E., 2022. A Novel Approach for distributed denial of service defense using continuous wavelet transform and convolutional neural network for software-Defined network. Computers & Security, 112, p.102524.

X. Chen et al., "Empowering DDoS Attack Mitigation with Programmable Switches," in IEEE Network, vol. 37, no. 3, pp. 112-117, May/June 2023, doi: 10.1109/MNET.107.2100643.

Rambabu, B. ., Vikranth, B. ., Anupkanth, S. ., Samya, B. ., & Satyanarayana, N. . (2023). Spread Spectrum based QoS aware Energy Efficient Clustering Algorithm for Wireless Sensor Networks . International Journal on Recent and Innovation Trends in Computing and Communication, 11(1), 154–160. https://doi.org/10.17762/ijritcc.v11i1.6085

Juan Garcia, Guðmundsdóttir Anna, Johansson Anna, Maria Jansen, Anna Wagner. Intelligent Decision Support using Neural Networks in Decision Science. Kuwait Journal of Machine Learning, 2(3). Retrieved from http://kuwaitjournals.com/index.php/kjml/article/view/203

Downloads

Published

25.12.2023

How to Cite

Poonia, L. ., & Tinker, S. . (2023). DDoS Mitigation by Software-Defined Network (SDN) in the Context of ICMP And SYP Approach. International Journal of Intelligent Systems and Applications in Engineering, 12(1), 173–182. Retrieved from https://ijisae.org/index.php/IJISAE/article/view/3775

Issue

Vol. 12 No. 1 (2024)

Section

Research Article

License

Creative Commons License

This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.

All papers should be submitted electronically. All submitted manuscripts must be original work that is not under submission at another journal or under consideration for publication in another form, such as a monograph or chapter of a book. Authors of submitted papers are obligated not to submit their paper for publication elsewhere until an editorial decision is rendered on their submission. Further, authors of accepted papers are prohibited from publishing the results in other publications that appear before the paper is published in the Journal unless they receive approval for doing so from the Editor-In-Chief.

IJISAE open access articles are licensed under a Creative Commons Attribution-ShareAlike 4.0 International License. This license lets the audience to give appropriate credit, provide a link to the license, and indicate if changes were made and if they remix, transform, or build upon the material, they must distribute contributions under the same license as the original.