A Link Flood Attack Detection and Response Mechanism in Software-Defined Networks

Abstract

The present invention provides a link flooding attack detection and response mechanism in a software-defined network, including: a potential target link identification module, a link congestion monitoring module, a traffic engineering module, and a malicious host identification module, including the following steps: the potential target The link identification module obtains the flow path in the network topology through head space analysis by the SDN controller, and analyzes and identifies the attacker's target link in the network topology; the link congestion monitoring module identifies the identified attacker's target link After the traffic engineering module learns the situation of the congested link, it collects and analyzes the link topology information and load distribution information of the network, and relieves the congested link through multiple rerouting, while the source host information The recorded malicious host identification module analyzes the malicious host in the source host. The link flood attack detection and response system proposed by the present invention can be applied to network scenarios of various scales.

Description

technical field [0001] The invention relates to the technical field of link flood attack detection and response, in particular to a link flood attack detection and response mechanism in a software-defined network. Background technique [0002] SDN (Software-Defined Networking, software-defined network) originated from the Clean Slate project of Professor Nick McKeown of Stanford University in the United States. In order to conduct experiments using large-scale real traffic and applications in the network, Professor Nick McKeown and others proposed the concept of software-defined network architecture, and on this basis, studied how to separate logic control and data forwarding, and improve network flexibility, reliability, efficiency and network security issues. The proposal of the concept of SDN has enabled various research institutes, enterprises, and manufacturers to have a clear direction for the research of next-generation networks. However, due to their own developmen...

AI Technical Summary

Problems solved by technology

However, due to their own development and different needs, each research group has added its own corresponding needs and understandings to the SDN network architecture, and the implementation methods are various and even uneven. Although this situation makes SDN more diverse and has There are many possibilities, but it also makes it difficult to unify the standards

Images