Emerging DDoS attack detection and mitigation strategies in software-defined networks: Taxonomy, challenges and future directions

【Author】 Valdovinos, Ismael Amezcua; Perez-Diaz, Jesus Arturo; Choo, Kim-Kwang Raymond; Botero, Juan Felipe

【Source】JOURNAL OF NETWORK AND COMPUTER APPLICATIONS

【影响因子】7.574

【Abstract】Software-defined networking (SDN) is a network paradigm that decouples control and data planes from network devices and places them into separate entities. In SDN, the controller is responsible for controlling the logic of the entire network while network switches become forwarding elements that follow rules to dispatch flows. There are, however, several limitations in such a paradigm, as compared to conventional networking. For example, the controller is sensitive to a broad range of attacks, including distributed denial of service (DDoS) attacks. In this paper, we provide a systematic survey of existing DDoS detection and mitigation strategies in SDN. Based on the review of articles published between 2013 and May 2020, we provide a taxonomy of DDoS detection strategies (e.g., statistical, SDN architecture, and machine learning) and emerging approaches (e.g., network function virtualization, blockchain, honeynet, network slicing, and moving target defense). We also discuss existing challenges associated with SDN security and the implementation of security solutions, prior to identifying future research opportunities.

【Keywords】Software-defined network (SDN); Denial of Service (DoS); Cyberattacks; Machine learning; Blockchain; Network Virtual Function (NFV); Honeynet; Network Slicing (NS); Moving Target Defense (MTD)

【发表时间】2021 44774

【收录时间】2022-01-02

【文献类型】

【主题类别】

--