A  Review on DDoS Attack in Controller Environment of Software Defined Network

Gunjani Vaghela; Nishant Sanghani; Bhavesh Borisaniya

doi:10.4108/eetsis.5823

Authors

Gunjani Vaghela Atmiya University
Nishant Sanghani Gujarat Technological University
Bhavesh Borisaniya Shantilah Shah Engineering College https://orcid.org/0000-0002-3599-9278

DOI:

https://doi.org/10.4108/eetsis.5823

Keywords:

Software Defined Networks, DDoS, Detection, Machine learning

Abstract

Distributed Denial of Service (DDoS) attacks pose a significant threat to the security and availability of networks. With the increasing adoption of Software-Defined Networking (SDN) and its multi-controller architectures, there is a need to explore effective DDoS attack detection mechanisms tailored to these environments. An overview of the current research on detecting DDoS attacks in SDN environments, with a focus on different detection techniques, methodologies and problems is presented in this survey paper. The survey attempt to identify the limitations and strengths of current approaches and propose potential research directions for improving DDoS detection in this context.

References

[1] Cui, Y., Qian, Q., Guo, C., Shen, G., Tian, Y., Xing, H. and Yan, L. (2021) Towards ddos detection mechanisms in software-defined networking. Journal of Network and Computer Applications 190: 103-156.

[2] Jain, S., Kumar, A., Mandal, S., Ong, J., Poutievski, L., Singh, A., Venkata, S. et al. (2013) B4: Experience with a globally-deployed software defined wan. ACM SIGCOMM Computer Communication Review 43(4): 3–14.

[3] Dayal, N., Maity, P., Srivastava, S. and Khondoker, R. (2016) Research trends in security and ddos in sdn. Security and Communication Networks 9(18): 6386–6411. doi: https://doi.org/10.1002/sec.1759, URL https://onlinelibrary.wiley.com/doi/abs/10.1002/sec.1759.

[4] Wood, A.D. and Stankovic, J.A. (2002) Denial of service in sensor networks. computer 35(10): 54–62.

[5] Singh, J. and Behal, S. (2020) Detection and mitigation of ddos attacks in sdn: A comprehensive review, research challenges and future directions. Computer Science Review 37: 100279.

[6] Foster, N., Harrison, R., Freedman, M.J., Monsanto, C., Rexford, J., Story, A. and Walker, D. (2011) Frenetic: A network programming language. ACM Sigplan Notices 46(9): 279–291.

[7] Anderson, C.J., Foster, N., Guha, A., Jeannin, J.B., Kozen, D., Schlesinger, C. and Walker, D. (2014) Netkat: Semantic foundations for networks. Acm sigplan notices 49(1): 113–126.

[8] Voellmy, A., Kim, H. and Feamster, N. (2012) Procera: a language for high-level reactive network control. In Proceedings of the first workshop on Hot topics in software defined networks: 43–48.

[9] Khan, S., Gani, A., Wahab, A.W.A., Abdelaziz, A. and Bagiwa, M.A. (2016) Fml: A novel forensics management layer for software defined networks. In 2016 6th international conference-cloud system and big data engineering (confluence) (IEEE): 619–623.

[10] Gude, N., Koponen, T., Pettit, J., Pfaff, B., Casado, M., McKeown, N. and Shenker, S. (2008) Nox: towards an operating system for networks. ACM SIGCOMM computer communication review 38(3): 105–110.

[11] Priya, A.V. and Radhika, N. (2019) Performance comparison of sdn openflow controllers. International Journal of Computer Aided Engineering and Technology 11(4-5): 467–479.

[12] Mishra, A., Gupta, N. and Gupta, B. (2021) Defense mechanisms against ddos attack based on entropy in sdn-cloud using pox controller. Telecommunication systems 77: 47–62.

[13] Daha, M.Y., Zahid, M.S.M., Husain, K. and Ousta, F.(2021) Performance evaluation of software defined net-works with single and multiple link failure scenario under floodlight controller. In 2021 International Conference on Computing, Communication, and Intelligent Systems (ICCCIS) (IEEE): 959–965.

[14] Chouhan, R.K., Atulkar, M. and Nagwani, N.K.(2022) A framework to detect ddos attack in ryu controller based software defined networks using feature extraction and classification. Applied Intelligence : 1–21.

[15] Manuel, T. and Goswami, B.H. (2019) Experimenting with scalability of beacon controller in software defined network. International Journal of Recent Technology and Engineering 7(5S2): 550–555.

[16] Dallaglio, M., Sambo, N., Cugini, F. and Castoldi, P.(2017) Control and management of transponders with netconf and yang. Journal of Optical Communications and Networking 9(3): B43–B52.

[17] Kukreja, N., Alvizu, R., Kos, A., Maier, G., Morro, R., Capello, A. and Cavazzoni, C. (2016) Demonstration of sdn-based orchestration for multi-domain segment routing networks. In 2016 18th International Conference on Transparent Optical Networks (ICTON) (IEEE): 1–4.

[18] Song, H. (2013) Protocol-oblivious forwarding: Unleash the power of sdn through a future-proof forwarding plane. In Proceedings of the second ACM SIGCOMM workshop on Hot topics in software defined networking: 127–132.

[19] Deepa, V., Sudar, K.M. and Deepalakshmi, P. (2019) Design of ensemble learning methods for ddos detection in sdn environment. In 2019 International Conference on Vision Towards Emerging Trends in Communication and Networking (ViTECoN) (IEEE): 1–6.

[20] Zhang, B., Zhang, T. and Yu, Z. (2017) Ddos detection and prevention based on artificial intelligence techniques. In 2017 3rd IEEE International Conference on Computer and Communications (ICCC) (IEEE): 1276–1280.

[21] Gupta, B.B., Joshi, R.C. and Misra, M. (2009) Defending against distributed denial of service attacks: issues and challenges. Information Security Journal: A Global Perspective 18(5): 224–247.

[22] Mehr, S.Y. and Ramamurthy, B. (2019) An svm based ddos attack detection method for ryu sdn controller. In Proceedings of the 15th international conference on emerging networking experiments and technologies: 72–73.

[23] Chin, T., Mountrouidou, X., Li, X. and Xiong, K. (2015) An sdn-supported collaborative approach for ddos flooding detection and containment. In MILCOM 2015-2015 IEEE Military Communications Conference (IEEE): 659–664.

[24] Nadeem, M.W., Goh, H.G., Ponnusamy, V. and Aun, Y. (2022) Ddos detection in sdn using machine learning techniques. Comput. Mater. Contin. 71(1): 771–789.

[25] Sahoo, K.S., Iqbal, A., Maiti, P. and Sahoo, B. (2018) A machine learning approach for predicting ddos traffic in software defined networks. In 2018 International Conference on Information Technology (ICIT) (IEEE): 199–203.

[26] Yungaicela-Naula, N.M., Vargas-Rosales, C. and Perez-Diaz, J.A. (2021) Sdn-based architecture for transport and application layer ddos attack detection by using machine and deep learning. IEEE Access 9: 108495–108512.

[27] Zargar, S.T., Joshi, J. and Tipper, D. (2013) A survey of defense mechanisms against distributed denial of service (ddos) flooding attacks. IEEE communications surveys & tutorials 15(4): 2046–2069.

[28] Tonkal, Ö., Polat, H., Başaran, E., Cömert, Z. and Kocaoğlu, R. (2021) Machine learning approach equipped with neighbourhood component analysis for ddos attack detection in software-defined networking. Electronics 10(11): 1227.

[29] Dong, S. and Sarem, M. (2019) Ddos attack detection method based on improved knn with the degree of ddos attack in software-defined networks. IEEE Access 8: 5039–5048.

[30] Yang, L. and Zhao, H. (2018) Ddos attack identification and defense using sdn based on machine learning method. In 2018 15th international symposium on pervasive systems, algorithms and networks (I-SPAN)(IEEE): 174–178.

[31] Deepa, V., Sudar, K.M. and Deepalakshmi, P. (2018) Detection of ddos attack on sdn control plane using hybrid machine learning techniques. In 2018 Interna-tional Conference on Smart Systems and Inventive Technology (ICSSIT) (IEEE): 299–303.

[32] Sudar, K.M., Beulah, M., Deepalakshmi, P., Nagaraj, P. and Chinnasamy, P. (2021) Detection of distributed denial of service attacks in sdn using machine learning techniques. In 2021 international conference on Computer Communication and Informatics (ICCCI) (IEEE): 1–5.

[33] Haider, S., Akhunzada, A., Mustafa, I., Patel, T.B., Fernandez, A., Choo, K.K.R. and Iqbal, J. (2020) A deep cnn ensemble framework for efficient ddos attack detection in software defined networks. Ieee Access 8: 53972–53983.

[34] Tuan, N.N., Hung, P.H., Nghia, N.D., Tho, N.V., Phan, T.V. and Thanh, N.H. (2020) A ddos attack mitigation scheme in isp networks using machine learning based on sdn. Electronics 9(3): 413.

[35] Tan, L., Pan, Y., Wu, J., Zhou, J., Jiang, H. and Deng, Y. (2020) A new framework for ddos attack detection and defense in sdn environment. IEEE Access 8: 161908–161919.

[36] Sahoo, K.S., Tripathy, B.K., Naik, K., Ramasubbareddy, S., Balusamy, B., Khari, M. and Burgos, D. (2020) An evolutionary svm model for ddos attack detection in software defined networks. IEEE Access 8: 132502–132513.

[37] Musumeci, F., Fidanci, A.C., Paolucci, F., Cugini, F. and Tornatore, M. (2022) Machine-learning-enabled ddos attacks detection in p4 programmable networks. Journal of Network and Systems Management 30: 1–27.

[38] Sangodoyin, A.O., Akinsolu, M.O., Pillai, P. and Grout, V. (2021) Detection and classification of ddos flooding attacks on software-defined networks: A case study for the application of machine learning. IEEE Access 9: 122495–122508. doi:10.1109/ACCESS.2021.3109490.

[39] Polat, H., Polat, O. and Cetin, A. (2020) Detecting ddos attacks in software-defined networks through feature selection methods and machine learning models. Sustainability 12(3). URL https://www.mdpi.com/ 2071-1050/12/3/1035.

[40] Hu, T., Guo, Z., Yi, P., Baker, T. and Lan, J. (2018) Multi-controller based software-defined networking: A survey. IEEE access 6: 15980–15996.

[41] Bannour, F., Souihi, S. and Mellouk, A. A self-adaptive consistency model for distributed sdn controllers.

[42] Aslan, M. and Matrawy, A. (2018) A clustering-based consistency adaptation strategy for distributed sdn controllers. In 2018 4th IEEE Conference on Network Softwarization and Workshops (netsoft) (IEEE): 441–448.

[43] Koponen, T., Casado, M., Gude, N. and Stribling, J. (2014), Distributed control platform for large-scale production networks. US Patent 8,830,823.

[44] Zhang, Y., Cui, L., Wang, W. and Zhang, Y. (2018) A survey on software defined networking with multiple controllers. Journal of Network and Computer Applications 103: 101–118.

[45] Dumitras, T., Neamtiu, I. and Tilevich, E. (2009) Second acm workshop on hot topics in software upgrades (hotswup 2009). In OOPSLA Companion: 705–706.

[46] Dixit, A., Hao, F., Mukherjee, S., Lakshman, T. and Kompella, R. (2013) Towards an elastic distributed sdn controller. ACM SIGCOMM computer communication review 43(4): 7–12.

[47] Curtis, A.R., Mogul, J.C., Tourrilhes, J., Yalagandula, P., Sharma, P. and Banerjee, S. (2011) Devoflow: Scaling flow management for high-performance networks. In Proceedings of the ACM SIGCOMM 2011 Conference: 254–265.

[48] Koponen, T., Casado, M., Gude, N., Stribling, J., Poutievski, L., Zhu, M., Ramanathan, R. et al. (2010) Onix: A distributed control platform for large-scale production networks. In 9th USENIX Symposium on Operating Systems Design and Implementation (OSDI 10).

[49] Sridharan, V., Gurusamy, M. and Truong-Huu, T.(2017) Multi-controller traffic engineering in software defined networks. In 2017 IEEE 42nd Conference on Local Computer Networks (LCN) (IEEE): 137–145.

[50] Matsumoto, S., Hitz, S. and Perrig, A. (2014) Fleet: Defending sdns from malicious administrators. In Proceedings of the third workshop on Hot topics in software defined networking: 103–108.

[51] Wang, J., Shou, G., Hu, Y. and Guo, Z. (2016) A multi-domain sdn scalability architecture implementation based on the coordinate controller. In 2016 International Conference on Cyber-Enabled Distributed Computing and Knowledge Discovery (CyberC) (IEEE): 494–499.

[52] Yusuf, M.N., Bin Abu Bakar, K., Isyaku, B., Mukhlif, F. et al. (2023) Distributed controller placement in software-defined networks with consistency and interoperability problems. Journal of Electrical and Computer Engineering 2023.

[53] Bannour, F., Souihi, S. and Mellouk, A. (2017) Software-defined networking: a self-adaptive consistency model for distributed sdn controllers. RESCOM 2017 .

[54] Muqaddas, A.S., Giaccone, P., Bianco, A. and Maier, G.(2017) Inter-controller traffic to support consistency in onos clusters. IEEE Transactions on Network and Service Management 14(4): 1018–1031.