Looking for breakthrough ideas for innovation challenges? Try Patsnap Eureka!

DDoS attack detection system and method in SDN environment

An attack detection and environmental technology, applied in the transmission system, electrical components, etc., can solve problems such as single point failure and network vulnerability

Active Publication Date: 2020-10-20
NORTHEASTERN UNIV
View PDF9 Cites 3 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

Although the use of a centralized controller will have a relatively large effect, the controller itself also has some defects, that is, it may generate a single point of failure. Compared with the traditional network architecture, this will make the network using a centralized controller become more vulnerable

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • DDoS attack detection system and method in SDN environment
  • DDoS attack detection system and method in SDN environment
  • DDoS attack detection system and method in SDN environment

Examples

Experimental program
Comparison scheme
Effect test

Embodiment

[0037] The Mininet used in this embodiment is the virtual host required to create the topology in a standard Linux environment. The experimental environment uses ubuntu16.04. At the same time, Mininet also supports OpenFlow switches, OpenFlow controllers and secure link networks, and supports SDN and OpenFlow custom topology.

[0038] The present invention uses the OpenDaylight open source controller as the controller module under the SDN environment, and this controller is implemented based on the Java language, so before the design and development of the corresponding modules, it is necessary to install and configure the corresponding Java environment in the Ubuntu16.04 environment , that is, jdk, maven and other environments. In addition, before installing all software, you must first update apt, and then install git, which will be used as tools in subsequent installations.

[0039] The communication between two hosts requires a three-way TCP handshake. All requests from th...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention belongs to the field of intrusion detection algorithms in SDN, and discloses a DDoS attack detection system and method in an SDN environment. In order to timely and effectively identifyabnormal traffic in a network and reduce consumption of network resources by DDoS attacks, an MD-SAL framework is combined, and a DDoS attack defense system is designed. The system comprises an exception detection module, an anti-misjudgment module, a flow processing module, an exception storage module and an information viewing module. The system can identify traffic abnormality in a network, timely gives an alarm to notify the system to make corresponding defense measures, and finally checks attack information according to RPC preset values in advance such as a source IP and a destination IP, and realizes accurate classification of suspicious traffic based on a TDMC algorithm.

Description

technical field [0001] The invention belongs to the field of intrusion detection algorithms in SDN, and in particular relates to a DDoS attack detection system and method in an SDN environment. Background technique [0002] Nowadays, the development of Internet technology is changing with each passing day. Internet technology has brought great convenience to life, but at the same time it is also facing very serious problems in terms of security. Among them, DDoS attacks are seriously threatening the normal services of the Internet. DDoS is caused by many zombies. The large-scale distributed coordinated attack initiated by the host is the main factor that threatens the security of Internet services, and it also poses a great security problem to the security operation of major enterprises. Typical victims in this regard include large popular websites such as CNN, Yahoo, and Amazon, but more Internet companies increasingly rely on the stability, security, and availability of th...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Applications(China)
IPC IPC(8): H04L29/06
CPCH04L63/101H04L63/1416H04L63/1425H04L63/1458
Inventor 毕远国郅明见郑文举项天敖胡兵陈香伊
Owner NORTHEASTERN UNIV
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Patsnap Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Patsnap Eureka Blog
Learn More
PatSnap group products