Detection and defense of DDoS attack-based on deep learning in OpenFlow-based SDN

被引:119
|
作者
Li, Chuanhuang [1 ]
Wu, Yan [1 ]
Yuan, Xiaoyong [2 ]
Sun, Zhengjun [1 ]
Wang, Weiming [1 ]
Li, Xiaolin [2 ]
Gong, Liang [1 ]
机构
[1] Zhejiang Gongshang Univ, Sch Informat & Elect Engn, Hangzhou 310000, Zheiang, Peoples R China
[2] Univ Florida, Large Scale Intelligent Syst Lab, Gainesville, FL 32611 USA
基金
中国国家自然科学基金;
关键词
DDoS defense; DDoS detection; deep learning; distributed denial of service; Software-Defined Network;
D O I
10.1002/dac.3497
中图分类号
TM [电工技术]; TN [电子技术、通信技术];
学科分类号
0808 ; 0809 ;
摘要
Distributed denial of service (DDoS) is a special form of denial of service attack. In this paper, a DDoS detection model and defense system based on deep learning in Software-Defined Network (SDN) environment are introduced. The model can learn patterns from sequences of network traffic and trace network attack activities in a historical manner. By using the defense system based on the model, the DDoS attack traffic can be effectively cleaned in Software-Defined Network. The experimental results demonstrate the much better performance of our model compared with conventional machine learning ways. It also reduces the degree of dependence on environment, simplifies the real-time update of detection system, and decreases the difficulty of upgrading or changing detection strategy.
引用
收藏
页数:15
相关论文
共 50 条
  • [1] DDoS attack detection and defense based on hybrid deep learning model in SDN
    Li C.
    Wu Y.
    Qian Z.
    Sun Z.
    Wang W.
    2018, Editorial Board of Journal on Communications (39): : 176 - 187
  • [2] Cooperative defense of DDoS attack based on machine learning in SDN
    Shang L.
    Chen M.
    Zhang L.
    Liu X.
    Shi T.
    Li B.
    Dianli Xitong Baohu yu Kongzhi/Power System Protection and Control, 2021, 49 (16): : 170 - 176
  • [3] BEADS: Automated Attack Discovery in OpenFlow-Based SDN Systems
    Jero, Samuel
    Bu, Xiangyu
    Nita-Rotaru, Cristina
    Okhravi, Hamed
    Skowyra, Richard
    Fahmy, Sonia
    RESEARCH IN ATTACKS, INTRUSIONS, AND DEFENSES (RAID 2017), 2017, 10453 : 311 - 333
  • [4] A DDoS Attack Detection Method Based on Information Entropy and Deep Learning in SDN
    Wang, Lu
    Liu, Ying
    PROCEEDINGS OF 2020 IEEE 4TH INFORMATION TECHNOLOGY, NETWORKING, ELECTRONIC AND AUTOMATION CONTROL CONFERENCE (ITNEC 2020), 2020, : 1084 - 1088
  • [5] Deep Learning-based Slow DDoS Attack Detection in SDN-based Networks
    Nugraha, Beny
    Murthy, Rathan Narasimha
    2020 IEEE CONFERENCE ON NETWORK FUNCTION VIRTUALIZATION AND SOFTWARE DEFINED NETWORKS (NFV-SDN), 2020, : 51 - 56
  • [6] Packet_In message based DDoS attack detection in SDN network using OpenFlow
    You, Xiang
    Feng, Yaokai
    Sakurai, Kouichi
    2017 FIFTH INTERNATIONAL SYMPOSIUM ON COMPUTING AND NETWORKING (CANDAR), 2017, : 522 - 528
  • [7] Research on OpenFlow-based SDN technologies
    Zuo, Qing-Yun
    Chen, Ming
    Zhao, Guang-Song
    Xing, Chang-You
    Zhang, Guo-Min
    Jiang, Pei-Cheng
    Ruan Jian Xue Bao/Journal of Software, 2013, 24 (05): : 1078 - 1097
  • [8] SDN Interactive Manager: An OpenFlow-Based SDN Manager
    Isolani, Pedro Heleno
    Wickboldt, Juliano Araujo
    Both, Cristiano Bonato
    Rochol, Juergen
    Granville, Lisandro Zambenedetti
    PROCEEDINGS OF THE 2015 IFIP/IEEE INTERNATIONAL SYMPOSIUM ON INTEGRATED NETWORK MANAGEMENT (IM), 2015, : 1157 - 1158
  • [9] A Novel OpenFlow-Based DDoS Flooding Attack Detection and Response Mechanism in Software-Defined Networking
    Wang, Rui
    Zhang, Zhiyong
    Ju, Lei
    Jia, Zhiping
    INTERNATIONAL JOURNAL OF INFORMATION SECURITY AND PRIVACY, 2015, 9 (03) : 21 - 40
  • [10] DDOS Attack Detection & Prevention in SDN using OpenFlow Statistics
    Ahuja, Nisha
    Singal, Gaurav
    PROCEEDINGS OF THE 2019 IEEE 9TH INTERNATIONAL CONFERENCE ON ADVANCED COMPUTING (IACC 2019), 2019, : 147 - 152