OverWatch: A Cross-Plane DDoS Attack Defense Framework with Collaborative Intelligence in SDN

Joint Authors

Su, Jinshu
Han, Biao
Yang, Xiangrui
Sun, Zhigang
Huang, Jinfeng

Source

Security and Communication Networks

Issue

Vol. 2018, Issue 2018 (31 Dec. 2018), pp.1-15, 15 p.

Publisher

Hindawi Publishing Corporation

Publication Date

2018-01-24

Country of Publication

Egypt

No. of Pages

15

Main Subjects

Information Technology and Computer Science

Abstract EN

Distributed Denial of Service (DDoS) attacks are one of the biggest concerns for security professionals.

Traditional middle-box based DDoS attack defense is lack of network-wide monitoring flexibility.

With the development of software-defined networking (SDN), it becomes prevalent to exploit centralized controllers to defend against DDoS attacks.

However, current solutions suffer with serious southbound communication overhead and detection delay.

In this paper, we propose a cross-plane DDoS attack defense framework in SDN, called OverWatch, which exploits collaborative intelligence between data plane and control plane with high defense efficiency.

Attack detection and reaction are two key procedures of the proposed framework.

We develop a collaborative DDoS attack detection mechanism, which consists of a coarse-grained flow monitoring algorithm on the data plane and a fine-grained machine learning based attack classification algorithm on the control plane.

We propose a novel defense strategy offloading mechanism to dynamically deploy defense applications across the controller and switches, by which rapid attack reaction and accurate botnet location can be achieved.

We conduct extensive experiments on a real-world SDN network.

Experimental results validate the efficiency of our proposed OverWatch framework with high detection accuracy and real-time DDoS attack reaction, as well as reduced communication overhead on SDN southbound interface.

American Psychological Association (APA)

Han, Biao& Yang, Xiangrui& Sun, Zhigang& Huang, Jinfeng& Su, Jinshu. 2018. OverWatch: A Cross-Plane DDoS Attack Defense Framework with Collaborative Intelligence in SDN. Security and Communication Networks،Vol. 2018, no. 2018, pp.1-15.
https://search.emarefa.net/detail/BIM-1214557

Modern Language Association (MLA)

Han, Biao…[et al.]. OverWatch: A Cross-Plane DDoS Attack Defense Framework with Collaborative Intelligence in SDN. Security and Communication Networks No. 2018 (2018), pp.1-15.
https://search.emarefa.net/detail/BIM-1214557

American Medical Association (AMA)

Han, Biao& Yang, Xiangrui& Sun, Zhigang& Huang, Jinfeng& Su, Jinshu. OverWatch: A Cross-Plane DDoS Attack Defense Framework with Collaborative Intelligence in SDN. Security and Communication Networks. 2018. Vol. 2018, no. 2018, pp.1-15.
https://search.emarefa.net/detail/BIM-1214557

Data Type

Journal Articles

Language

English

Notes

Includes bibliographical references

Record ID

BIM-1214557