Multidimensional detection and dynamic defense method for link flooding attack

Yang WANG; Guangming TANG; Cheng LEI; Dong HAN

doi:10.11959/j.issn.2096-109x.2019040

您当前的位置：

首页 >

文章列表页 >

Multidimensional detection and dynamic defense method for link flooding attack

Papers | 更新时间：2024-06-03

- Multidimensional detection and dynamic defense method for link flooding attack
- Chinese Journal of Network and Information Security Vol. 5, Issue 4, Pages: 80-90(2019)
- 作者机构：
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2019040
  CLC： TP393
- Online First：2019-08，
  
  Published：15 August 2019
- 稿件说明：
移动端阅览
Yang WANG, Guangming TANG, Cheng LEI, et al. Multidimensional detection and dynamic defense method for link flooding attack[J]. Chinese Journal of Network and Information Security, 2019, 5(4): 80-90.
DOI：

Yang WANG, Guangming TANG, Cheng LEI, et al. Multidimensional detection and dynamic defense method for link flooding attack[J]. Chinese Journal of Network and Information Security, 2019, 5(4): 80-90. DOI： 10.11959/j.issn.2096-109x.2019040.

摘要

针对现有链路洪泛攻击检测存在的不足，提出了多维指标检测算法，通过会话连接时长、数据分组低速比例、数据分组距离均匀性、平均低速率数据分组占比、低速数据分组占比变化率5维要素对存在异常的转发链路进行多维检测，改善了现有方法误报率高的情况。进一步，提出基于染色理论的“控制器-交换机”动态部署方法，解决了现有防御缓解机制存在的“难以实际部署在交换机变体类型受限的实际环境中”问题。最后，实验验证所提方法的有效性。

Abstract

Aiming at the shortcomings of the existing link flooding attack defense methods

a multi-dimensional index detection algorithm is proposed

which performs multi-dimensional detection on the abnormal forwarding links through the five-dimensional elements of connection length

low-speed ratio of data packets

uniformity of data packet distance

average low-speed ratio of data packets

and change rate of low-speed ratio of data packets

thus effectively solving the problem of high false alarm rate of the existing detection methods.Furthermore

a controller switch dynamic deployment method based on coloring theory is proposed

which solves the problem of difficult to be actually deployed in the actual environment with limited switch variant types existing in the existing defense mitigation mechanisms.Experimental analysis show the feasibility of the proposed method.

关键词

Keywords

references

谭晶磊 , 张红旗 , 雷程 , 等 . 面向SDN的移动目标防御技术研究进展 [J ] . 网络与信息安全学报 , 2018 , 4 ( 7 ): 5 - 16 .

TAN J L , ZHANG H Q , LEI C , et al . Research progress on moving target defense or SDN [J ] . Chinese journal of Network and Information Security , 2018 , 4 ( 7 ): 5 - 16 .

STUDER A , PERRIG A . The coremelt attack [C ] // European Symposium on Research in Computer Security (ESORICS) . 2009 : 37 - 52 .

KANG M S , LEE S B . The crossfire attack [C ] // IEEE Security and Privacy symposium (SP) . 2013 : 127 - 141 .

XUE L , LUO Z , CHAN W , et al . Towards detecting target link flooding attack [C ] // USENIX Conference . 2014 : 81 - 96 .

LEE S B , KANG M S , GLIGOR V D . CoDef:collaborative defense against large-scale link-flooding attacks [C ] // ACM CoNEXT . 2013 : 417 - 428 .

KANG M S , GLIGOR V D , SEKAR V , et al . SPIFFY:inducing cost-detectability tradeoffs for persistent link-flooding attacks [C ] // Network and Distributed System Security Symposium . 2016 .

KIM J , SHIN S . Software-defined honeynet:towards mitigating link flooding attacks [C ] // IEEE/IFIP International Conference on Dependable Systems and Networks Workshop,IEEE Computer Society . 2017 : 99 - 100 .

刘世辉 . 基于SDN和NFV的链路洪泛攻击检测与防御 [D ] . 武汉:武汉大学 , 2017 .

LIU S H . Detecting and mitigating target link-flooding attacks using SDN and NFV [D ] . Wuhan:Wuhan University , 2017 .

MISRA S , TAN M , REZAZAD M , et al . Early detection of crossfire attacks using deep learning [C ] // 2017 Deep Learning Security Workshop . 2017 .

LIASKOS C , KOTRONIS V , DIMITROPOULOS X . A novel framework for modeling and mitigating distributed link flooding attacks [C ] // IEEE International Conference on Computer Communications . 2016 .

AYDEGER A , SAPUTRO N , AKKAYA K , et al . Mitigating crossfire attacks using SDN-based moving target defense [C ] // IEEE Local Computer Networks . 2016 : 627 - 630 .

LIASKOS C , IOANNIDIS S . Network topology effects on the detectability of crossfire attacks [J ] . IEEE Transactions on Information Forensics ＆ Security , 2018 ,( 99 ): 1 - 1 .

蔡佳晔 , 张红旗 , 宋佳良 . 基于 Renyi 熵的 Openflow 信道链路洪泛攻击主动防御方法 [J ] . 计算机应用研究 , 2019 , 36 ( 6 ): 1767 - 1770 .

CAI J Y , ZHANG H Q , SONG J L . Active defense method of OpenFlow channel link flooding attack based on Renyi entropy [J ] . Application Research of Computers , 2019 , 36 ( 6 ): 1767 - 1770 .

Views

556

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Efficient and safe software defined network topology discovery protocol

Research progress on dynamic hopping technology for network layer

SDN self-protection system based on Renyi entropy

Low failure recovery cost controller placement strategy in software defined networks

Design and implementation of the controller scheduling-time in SDN

Related Author

Pengcheng ZHAO

Yongpu GU

Junqing YU

Dong LI

Guozhen CHENG

Shumin HUO

Jinglei TAN

Jie NIU

Related Institution

Network and Computation Center, Huazhong University of Science and Technology

School of Cyber Science and Engineering, Huazhong University of Science and Technology

Information Engineering University

Unit 61212 of the Chinese People's Liberation Army

College of Computer, National University of Defense Technology

⁰