Distributed Denial of Service (DDoS) attacks are one of the biggest concerns for security professionals. Traditional middle-box based DDoS attack defense is lack of network-wide monitoring flexibility. With the development of software-defined networking (SDN), it becomes prevalent to exploit centralized controllers to defend against DDoS attacks. However, current solutions suffer with serious southbound communication overhead and detection delay. In this paper, we propose a cross-plane DDoS attack defense framework in SDN, called OverWatch, which exploits collaborative intelligence between data plane and control plane with high defense efficiency. Attack detection and reaction are two key procedures of the proposed framework. We develop a collaborative DDoS attack detection mechanism, which consists of a coarse-grained flow monitoring algorithm on the data plane and a fine-grained machine learning based attack classification algorithm on the control plane. We propose a novel defense strategy offloading mechanism to dynamically deploy defense applications across the controller and switches, by which rapid attack reaction and accurate botnet location can be achieved. We conduct extensive experiments on a real-world SDN network. Experimental results validate the efficiency of our proposed OverWatch framework with high detection accuracy and real-time DDoS attack reaction, as well as reduced communication overhead on SDN southbound interface.
from #AlexandrosSfakianakis via Alexandros G.Sfakianakis on Inoreader http://ift.tt/2n5LSrs
via IFTTT
Εγγραφή σε:
Σχόλια ανάρτησης (Atom)
Δημοφιλείς αναρτήσεις
-
Background Hyperthyroidism is associated with increased thrombotic risk. As contact system activation through formation of neutrophil extrac...
-
UM-Chor1: establishment and characterization of the first validated clival chordoma cell line. J Neurosurg. 2017 Apr 21;:1-9 Authors:...
-
Publication date: Available online 10 May 2017 Source: Journal of Dairy Science Author(s): R.E. Vibart, M. Tavendale, D. Otter, B.H. Schw...
-
Competency-based psychiatric education for Indian medical undergraduates Vijayalakshmi Pernenkil Archives of Mental Health 2019 20(1):1-2 Be...
-
Related Articles Developmental control of macrophage function. Curr Opin Immunol. 2017 Dec 13;50:64-74 Authors: Bonnardel J, Guillia...
-
from #AlexandrosSfakianakis via Alexandros G.Sfakianakis on Inoreader http://ift.tt/2tcPIjn via IFTTT
-
Abstract: Epidermolytic ichthyosis (EI) is a rare disorder of cornification caused by mutations in KRT1 and KRT10, encoding two suprabasal e...
-
Bloomberg Celgene Settles Whistle-Blower Fraud Suit for $280 Million Bloomberg Even after the FDA approved Thalomid for multiple myelo...
-
Related Articles Chinese version of the Constant-Murley questionnaire for shoulder pain and disability: a reliability and validation ...
Δεν υπάρχουν σχόλια:
Δημοσίευση σχολίου