Woodpecker: Detecting and mitigating link-flooding attacks via SDN

Wang, Lei1; Li, Qing2; Jiang, Yong1; Jia, Xuya1; Wu, Jianping3

2018-12-24

10.1016/j.comnet.2018.09.021

Computer Networks   影响因子和分区

1389-1286

1872-7069

Link-flooding attack (LFA), as a new type of DDoS attack, can degrade or even cut off network connectivity of a target area. This attack employs legitimate, low-density flows to flood a group of selected links. Therefore, these malicious flows can hardly be distinguished by traditional defense technologies. In our scheme, we first select M routers and upgrade them into SDN switches to maximize the network connectivity. Then, we propose a proactive probe approach to rapidly locate the congested links. Next, our scheme employs a global judgment algorithm to determine whether the network is under LFA or not. Finally, Woodpecker employs the core defense measure that based on the centralized traffic engineering to make the traffic balanced and eliminate the routing bottlenecks that are likely to be utilized by the adversary. We evaluate our scheme through comprehensive experiments. The results show that the bandwidth utilization of LFA-attacked links can be reduced by around 50% and that the average packet loss rate and jitter can be effectively decreased under LFA attacks. (C) 2018 Elsevier B.V. All rights reserved.

Link-flooding attack DDoS Software-defined networking

SCI ; EI

英语

通讯

Shenzhen RD Program[JCYJ20170307153157440]

Computer Science ; Engineering ; Telecommunications

Computer Science, Hardware & Architecture ; Computer Science, Information Systems ; Engineering, Electrical & Electronic ; Telecommunications

WOS:000452934000001

ELSEVIER SCIENCE BV

20184105917669

Denial-of-service attack ; Network security ; Software defined networking

Computer Software, Data Handling and Applications:723

Web of Science

1.Tsinghua Univ, Grad Sch Shenzhen, Shenzhen, Peoples R China
2.Southern Univ Sci & Technol, Shenzhen, Peoples R China
3.Tsinghua Univ, Dept Comp Sci & Technol, Beijing, Peoples R China

Wang, Lei,Li, Qing,Jiang, Yong,et al. Woodpecker: Detecting and mitigating link-flooding attacks via SDN[J]. Computer Networks,2018,147:1-13.

Wang, Lei,Li, Qing,Jiang, Yong,Jia, Xuya,&Wu, Jianping.(2018).Woodpecker: Detecting and mitigating link-flooding attacks via SDN.Computer Networks,147,1-13.

Wang, Lei,et al."Woodpecker: Detecting and mitigating link-flooding attacks via SDN".Computer Networks 147(2018):1-13.