On Denial of Service Attacks in Software Defined Networks
On Denial of Service Attacks in Software Defined Networks
复制标题
软件定义网络中的拒绝服务攻击
DOI：
10.1109/mnet.2016.1600109nm
复制
发表时间：
2016-11-01
期刊：
影响因子：
9.3
通讯作者：
Lin, Chuang
中科院分区：
文献类型：
--
作者：
Zhang, Peng;Wang, Huanzhao;Lin, Chuang
Software defined networking greatly simplifies network management by decoupling control functions from the network data plane. However, such a decoupling also opens SDN to various denial of service attacks: an adversary can easily exhaust network resources by flooding short-lived spoofed flows. Toward this issue, we present a comprehensive study of DoS attacks in SDN, and propose multi-layer fair queueing (MLFQ), a simple but effective DoS mitigation method. MLFQ enforces fair sharing of an SDN controller's resources with multiple layers of queues, which can dynamically expand and aggregate according to controller load. Both testbed-based and emulation-based experiments demonstrate the effectiveness of MLFQ in mitigating DoS attacks targeted at SDN controllers.
