Efficient DDoS attack detection and prevention scheme based on SDN in cloud environment |
| |
Authors: | Heng HE Yan HU Lianghan ZHENG Zhengyuan XUE |
| |
Affiliation: | 1. School of Computer Science and Technology,Wuhan University of Science and Technology,Wuhan 430065,China;2. Hubei Province Key Laboratory of Intelligent Information Processing and Real Time Industrial System,Wuhan University of Science and Technology,Wuhan 430065,China;3. School of Computer Science and Technology,Huazhong University of Science and Technology,Wuhan 430074,China |
| |
Abstract: | For addressing the problem of two typical types of distributed denial of service (DDoS) attacks in cloud environment,a DDoS attack detection and prevention scheme called SDCC based on software defined network (SDN) architecture was proposed.SDCC used a combination of bandwidth detection and data flow detection,utilized confidence-based filtering (CBF) method to calculate the CBF score of packets,judged the packet of CBF score below the threshold as an attacking packet,added its attribute information to the attack flow feature library,and sent the flow table to intercept it through SDN controller.Simulation results show that SDCC can detect and prevent different types of DDoS attacks effectively,and it has high detection efficiency,reduces the controller’s computation overhead,and achieves a low false positive rate. |
| |
Keywords: | cloud environment DDoS attack software defined network confidence-based filtering |
|
| 点击此处可从《通信学报》浏览原始摘要信息 |
|
点击此处可从《通信学报》下载全文 |
|