Oo, Nan Haymarn and Risdianto, Aris Cahyadi and Ling, Teck Chaw and Maw, Aung Htein (2020) Flooding Attack Detection and Mitigation in SDN with Modified Adaptive Threshold Algorithm. International Journal of Computer Networks & Communications, 12 (3). pp. 75-95. ISSN 0975-2293, DOI https://doi.org/10.5121/ijcnc.2020.12305.
Full text not available from this repository.Abstract
Flooding attack is a network attack that sends a large amount of traffic to the victim networks or services to cause denial-of-service. In Software-Defined Networking (SDN) environment, this attack might not only breach the hosts and services but also the SDN controller. Besides, it will also cause a disconnection of links between the controller and the switches. Thus, an effective detection and mitigation technique of flooding attacks is required. Statistical analysis techniques are widely used for the detection and mitigation of flooding attacks. However, the effectiveness of these techniques strongly depends on the defined threshold. Defining the static threshold is a tedious job and most of the time produces a high false positive alarm. In this paper, we proposed the dynamic threshold which is calculated using modified adaptive threshold algorithm (MATA). The original ATA is based on the Exponential Weighted Moving Average (EWMA) formula which produces the high number of false alarms. To reduce the false alarms, the alarm signal will only be generated after a minimum number of consecutive violations of the threshold. This, however, has increased the false negative rate when the network is under attack. In order to reduce this false negative rate, MATA adapted the baseline traffic info of the network infrastructure. The comparative analysis of MATA and ATA are performed through the measurement of false negative rate, and accuracy of detection rate. Our experimental results show that MATA is able to reduce false negative rates up to 17.74% and increase the detection accuracy of 16.11%over the various types of flooding attacks at the transport layer. © 2020, Academy and Industry Research Collaboration Center (AIRCC).
| Item Type: | Article |
|---|---|
| Funders: | UNSPECIFIED |
| Uncontrolled Keywords: | Adaptive threshold; Flooding attack; Software-defined networking |
| Subjects: | Q Science > QA Mathematics > QA75 Electronic computers. Computer science Q Science > QA Mathematics > QA76 Computer software |
| Divisions: | Faculty of Computer Science & Information Technology |
| Depositing User: | Ms. Juhaida Abd Rahim |
| Date Deposited: | 25 Aug 2020 06:44 |
| Last Modified: | 25 Aug 2020 06:44 |
| URI: | http://eprints.um.edu.my/id/eprint/25450 |
Actions (login required)
 |
View Item |
