title: Adaptive Suspicious Prevention for Defending DoS Attacks in SDN-Based Convergent Networks.
abstract: The convergent communication network will play an important role as a single platform to unify heterogeneous networks and integrate emerging technologies and existing legacy networks. Although there have been proposed many feasible solutions, they could not become convergent frameworks since they mainly focused on converting functions between various protocols and interfaces in edge networks, and handling functions for multiple services in core networks, e.g., the Multi-protocol Label Switching (MPLS) technique. Software-defined networking (SDN), on the other hand, is expected to be the ideal future for the convergent network since it can provide a controllable, dynamic, and cost-effective network. However, SDN has an original structural vulnerability behind a lot of advantages, which is the centralized control plane. As the brains of the network, a controller manages the whole network, which is attractive to attackers. In this context, we proposes a novel solution called adaptive suspicious prevention (ASP) mechanism to protect the controller from the Denial of Service (DoS) attacks that could incapacitate an SDN. The ASP is integrated with OpenFlow protocol to detect and prevent DoS attacks effectively. Our comprehensive experimental results show that the ASP enhances the resilience of an SDN network against DoS attacks by up to 38%.
authors: School of Computer Science and Engineering, Chung-Ang University, Seoul, South Korea.
authors: Nhu-Ngoc
authors: NN
authors: Dao
authors: School of Computer Science and Engineering, Chung-Ang University, Seoul, South Korea.
authors: Joongheon
authors: J
authors: Kim
authors: Department of Information Communication, Materials, and Chemistry Convergence Technology, Soongsil University, Seoul, South Korea.
authors: Minho
authors: M
authors: Park
authors: School of Computer Science and Engineering, Chung-Ang University, Seoul, South Korea.
authors: Sungrae
authors: S
authors: Cho
mesh_terms: D000465:Algorithms; D003195:Computer Communication Networks; D016494:Computer Security; D012984:Software; D057188:Workflow