A method for alleviating ddos ​​attack, programmable switch and sdn controller

Abstract

The invention provides a method for mitigating DDoS attacks, a programmable switch and an SDN controller. The method includes: adding an INT header to a data packet forwarded by the switch, and after the data packet reaches the destination switch, the INT message is sent to the SDN control The SDN controller converts the corresponding switch state in the INT message into a three-dimensional tensor; constructs a DDoS attack detection model based on CNN and graph convolutional neural network, and extracts the time and space features in the three-dimensional tensor through the DDoS attack detection model. Determine the switch containing the attack flow, and determine the forwarding path of the attack flow in the network; publish the corresponding discarding policy to mitigate DDoS attacks, add the source and destination IP to the whitelist, and the SDN controller will publish the whitelist to all switch. Through this solution, the DDoS attack path can be accurately found, the distributed denial of service attack can be mitigated, and the access of legal network traffic can be guaranteed.

Description

technical field [0001] The invention relates to the field of network security, in particular to a method for mitigating DDoS attacks, a programmable switch and an SDN controller. Background technique [0002] Distributed Denial of Service (DDoS) is an easy and destructive network attack. Attackers usually invade vulnerable nodes in the Internet, then turn these nodes into botnets, and use these large-scale distributed The host creates a large number of data packets with forged IP addresses to launch an access attack on the victim server. DDoS can quickly consume a victim server's resources and crash it, making the victim server unable to respond to normal requests. close In recent years, DDoS attacks have become more and more frequent. The servers of many large Internet companies such as Apple, Amazon, and Alibaba have suffered from DDoS attacks, which has caused huge economic losses to Internet companies and the entire society. [0003] Researchers have done a lot of work...

AI Technical Summary

Problems solved by technology

[0004] In view of this, the embodiment of the present invention provides a method for mitigating DDoS attacks, a programmable switch and an SDN controller to solve the problem that the DDoS attack path cannot be accurately found, resulting in poor network defense effect

Images