AutoDrop: Automatic DDoS Detection and Its Mitigation with Combination of OpenFlow and sFlow

• Published in: Future Intelligent Vehicular Technologies Vol. 185; pp. 112 - 122
• Main Authors: Shahzad, Faisal, Khan, Muazzam A., Khan, Shoab A., Rehman, Saad, Akhlaq, Monis
• Format: Book Chapter
• Language: English
• Published: Switzerland Springer International Publishing AG 2017; Springer International Publishing
• Series: Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering
• Subjects: DDoS; OpenFlow; SDN; Security; sFlow
• ISBN: 9783319512068; 3319512064
• ISSN: 1867-8211; 1867-822X
• DOI: 10.1007/978-3-319-51207-5_11

World is emerging into global village with the support of internet connectivity. With the help of this connectivity, it also made everyone subject of being compromised. Many organizations’ confidential data and numerous online services become victim of cyber-attacks. Different researches and innovations have been made for making network secure but commercial routers limit them to deploy custom security algorithms in real network. Recently, researchers succeed to innovate a novel protocol OpenFlow in Software Defined Networks. Taking advantage of this innovation we utilized OpenFlow to analyze real-time traffic, detect DDoS attack and mitigate attack. In this paper, we proposed a methodology to automatically detect different type of DDoS attacks within few seconds of occurrence using sampling techniques for continuous monitoring site-wide traffic and block attacking source with the help of OpenFlow protocol.