DDoS attack identification based on SDN

Abstract

The framework that we are proposing is based on Virtual Security Functions (VSF), Openflow, Software Define Network, Mininet, Pox Controller, Virtual Switches. By using Openflow protocol through virtualized environment of SDN, we are able to analyze entire data stream in network environment. By creating DDoS identification virtual security functions, we are capable of increasing the entire network security. VSF will allow for using the capability of this framework in order to protect against different attacks such as DoS, DDoS, MAC address spoofing, NTP amplification attack. All security functions can be activated concurrently, and anomaly detection can be included as well. All functions can run in parallel and based on stream analyses of the Openflow table we can identify anomalies.