Visible to the public BDF-SDN: A Big Data Framework for DDoS Attack Detection in Large-Scale SDN-Based Cloud

TitleBDF-SDN: A Big Data Framework for DDoS Attack Detection in Large-Scale SDN-Based Cloud
Publication TypeConference Paper
Year of Publication2021
AuthorsDinh, Phuc Trinh, Park, Minho
Conference Name2021 IEEE Conference on Dependable and Secure Computing (DSC)
Date Publishedjan
KeywordsBig Data, DDoS Attack, Deep Learning, denial-of-service attack, enterprise networks, machine learning, pubcrawl, Reliability engineering, Resiliency, Robustness, Scalability, SDN security, software-defined networking, Task Analysis
AbstractSoftware-defined networking (SDN) nowadays is extensively being used in a variety of practical settings, provides a new way to manage networks by separating the data plane from its control plane. However, SDN is particularly vulnerable to Distributed Denial of Service (DDoS) attacks because of its centralized control logic. Many studies have been proposed to tackle DDoS attacks in an SDN design using machine-learning-based schemes; however, these feature-based detection schemes are highly resource-intensive and they are unable to perform reliably in such a large-scale SDN network where a massive amount of traffic data is generated from both control and data planes. This can deplete computing resources, degrade network performance, or even shut down the network systems owing to being exhausting resources. To address the above challenges, this paper proposes a big data framework to overcome traditional data processing limitations and to exploit distributed resources effectively for the most compute-intensive tasks such as DDoS attack detection using machine learning techniques, etc. We demonstrate the robustness, scalability, and effectiveness of our framework through practical experiments.
DOI10.1109/DSC49826.2021.9346269
Citation Keydinh_bdf-sdn_2021