Ldos attack detection and mitigation method based on fgd-fm in sdn

Abstract

The invention discloses an LDoS attack detection and mitigation method based on FGD-FM in SDN, belonging to the field of computer network security. This method calls the API of the SDN control plane to obtain the traffic sequence of the switch, uses the FGD method to detect the LDoS attack, and uses the FM method to mitigate the LDoS attack based on the detection result. The FGD method combines sequence alignment algorithms with machine learning to accurately detect every attack burst. The FM method analyzes the port traffic sequence, locates the attacked port by calculating the suspicious score of each port, and installs flow rules on the switch to discard the attack traffic from the attacker. The method disclosed in the present invention can realize fine-grained LDoS attack detection, has higher accuracy, lower false alarm rate and false negative rate, lower complexity and better real-time performance, and can effectively filter out Attack traffic and ensure the transmission of benign traffic.

Description

technical field [0001] The invention belongs to the field of computer network security, and in particular relates to an FGD-FM-based LDoS attack detection and mitigation method in SDN. Background technique [0002] With the rapid development of the Internet, the security problems faced by the Internet have become more and more complex and serious. DoS (Denial of Service, denial of service) attack is one of the most common security threats, it prevents the target server from providing normal services to legitimate users, and causes huge damage to network performance. [0003] LDoS (Low-rate Denial of Service) attack is a variant of DoS attack proposed by Kuzmanovic and Knightly at the SIGCOMM conference in 2003. It uses the congestion control mechanism of TCP (Transmission Control Protocol) to periodically send short-term high-speed bursts, and adjusts the attack cycle to repeatedly trigger the RTO (Retransmission Timeout, retransmission over time) mechanism to achieve the a...

AI Technical Summary

Problems solved by technology

[0005] The research on the detection and mitigation of LDoS attacks in SDN mainly has the following problems: there are many studies on detecting and mitigating traditional DoS attacks using SDN, but few studies on LDoS attacks, and the methods for traditional DoS attacks cannot effectively detect and mitigate LDoS attacks. ease

Images