Source-based Defense Mechanism In Sdn With Support Vector Machine
DOI:
https://doi.org/10.34818/eoe.v8i3.14895Abstract
Abstract DDoS (Distributed Denial of Service) is one of the cyber-attacks that make the network service unavailable. SDN (Software Defined Network) has tools to defeat the DDoS, because SDN has good features in defeating DDoS such as logically centralized controller, separation control plan, and programmability network. This journal purposed SVM (Support Vector Machine) that combined with Ryu controller that can predict the incoming packet based on the learned traffic, whether it is a normal packet or DDoS packet, and blocking the packet if the packet indicating the DDoS traffic. The result of the simulation was that SVM can mitigate the DDoS attack even with the biggest attack sequence. Index Terms: Software-Defined Network (SDN), Source-Based Defense Mechanism, Distributed Denial of Service (DDoS), Support Vector Machine (SVM)References
[1] Yan, Qiao, F. Richard Yu, Qingxiang Gong, and Jianqiang Li., “Software-Defined Networking (SDN) and Distributed Denial of Service (DDoS) Attacks in Cloud Computing Environments: A Survey, Some Research Issues, and Challenges.” IEEE Communications Surveys & Tutorials., vol. 18, no. 1, pp. 602-622. OCT, 2016.
[2] S. Qadir and Quadri, ”Information Availability: An Insight into the MostImportant Attribute of Information Security,”Journal of Information Security,vol. 07, no. 03, 2016.)
[3] J. Li, H. Jiang, W. Jiang, J. Wu and W. Du, ”SDN-based Stateful Firewall for Cloud,” 2020 IEEE 6th Intl Conference on Big Data Security on Cloud (BigDataSecurity), IEEE Intl Conference on High Performance and Smart Computing, (HPSC) and IEEE Intl Conference on Intelligent Data and Security (IDS), Baltimore, MD, USA, 2020, pp. 157-161, doi: 10.1109/BigDataSecurity-HPSC-IDS49724.2020.00037.
[4]K. Park and H. Lee, “On the effectiveness of route-based packet filtering for distributed DoS attack preventiCommun. Rev, vol. 31, no. 4, pp. 15–26, Aug. 2001.
[5]K. Argyraki and D. R. Cheriton, “Scalable network-layer defense against internet bandwidth-flooding attacks,” IEEE/ACM Trans. Netw., vol. 17, no. 4, pp. 1284–1297, Apr. 2009.
