Skip to main content
Top

2019 | OriginalPaper | Chapter

Reinforcement Learning-Based DoS Mitigation in Software Defined Networks

Author : A. VishnuPriya

Published in: ICCCE 2018

Publisher: Springer Singapore

Activate our intelligent search to find suitable subject content or patents.

search-config
loading …

Abstract

A software defined network (SDN) is an OpenFlow-based network that initiates innovative traffic engineering and also simplifies network maintenance. Network security is still as stringent as that of traditional networks. A denial of service (DoS) attack is a major security issue that makes an entire network’s resources unavailable to its intended users. Blocking the flows based on the number of flows per port threshold was the most common method employed in the past. At some occasions legitimate traffic also takes the huge flow will punish by default rules. In order to address this issue, I proposed a reinforcement learning-based DoS detection model that detects and mitigates huge flows without a decline in normal traffic. An agent periodically monitors and measures network performance. It also rewrites the flow rules dynamically in the case of rule violation.

Dont have a licence yet? Then find out more about our products and how to get one now:

Springer Professional "Wirtschaft+Technik"

Online-Abonnement

Mit Springer Professional "Wirtschaft+Technik" erhalten Sie Zugriff auf:

  • über 102.000 Bücher
  • über 537 Zeitschriften

aus folgenden Fachgebieten:

  • Automobil + Motoren
  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Elektrotechnik + Elektronik
  • Energie + Nachhaltigkeit
  • Finance + Banking
  • Management + Führung
  • Marketing + Vertrieb
  • Maschinenbau + Werkstoffe
  • Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

Springer Professional "Technik"

Online-Abonnement

Mit Springer Professional "Technik" erhalten Sie Zugriff auf:

  • über 67.000 Bücher
  • über 390 Zeitschriften

aus folgenden Fachgebieten:

  • Automobil + Motoren
  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Elektrotechnik + Elektronik
  • Energie + Nachhaltigkeit
  • Maschinenbau + Werkstoffe




 

Jetzt Wissensvorsprung sichern!

Springer Professional "Wirtschaft"

Online-Abonnement

Mit Springer Professional "Wirtschaft" erhalten Sie Zugriff auf:

  • über 67.000 Bücher
  • über 340 Zeitschriften

aus folgenden Fachgebieten:

  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Finance + Banking
  • Management + Führung
  • Marketing + Vertrieb
  • Versicherung + Risiko




Jetzt Wissensvorsprung sichern!

Literature
2.
go back to reference Solnushkin KS (2013) Automated design of two-layer fat-tree networks Solnushkin KS (2013) Automated design of two-layer fat-tree networks
3.
go back to reference Cai Z, Cox A, Ng TSE (2011) Maestro: a system for scalable OpenFlow control. Rice University Cai Z, Cox A, Ng TSE (2011) Maestro: a system for scalable OpenFlow control. Rice University
4.
go back to reference Nayana Y, Tech JM, Girish L (2015) DDoS mitigation using software defined network. 24:258–264 Nayana Y, Tech JM, Girish L (2015) DDoS mitigation using software defined network. 24:258–264
5.
go back to reference Son NH (2016) A mechanism for early detecting DDOS attacks based on M/G/R PS queue. Int J Netw Secur Appl 8:17–24 Son NH (2016) A mechanism for early detecting DDOS attacks based on M/G/R PS queue. Int J Netw Secur Appl 8:17–24
7.
go back to reference Chin T, Mountrouidou X, Li X, Xiong K (2015) Selective packet inspection to detect DoS flooding using software defined networking (SDN). In: Proceedings of the 2015 IEEE 35th international conference on distributed computing systems workshops, ICDCSW 2015, pp 95–99. https://doi.org/10.1109/icdcsw.2015.27 Chin T, Mountrouidou X, Li X, Xiong K (2015) Selective packet inspection to detect DoS flooding using software defined networking (SDN). In: Proceedings of the 2015 IEEE 35th international conference on distributed computing systems workshops, ICDCSW 2015, pp 95–99. https://​doi.​org/​10.​1109/​icdcsw.​2015.​27
8.
go back to reference Ambrosin M, Conti M, De Gaspari F, Poovendran R (2017) LineSwitch: tackling control plane saturation attacks in software-defined networking. IEEE/ACM Trans Netw 25:1206–1219CrossRef Ambrosin M, Conti M, De Gaspari F, Poovendran R (2017) LineSwitch: tackling control plane saturation attacks in software-defined networking. IEEE/ACM Trans Netw 25:1206–1219CrossRef
10.
go back to reference Suh J et al (2010) Implementation of content-oriented networking architecture (CONA): a focus on DDoS countermeasure. In: 1st European NetFPGA developers workshop, pp 1–5 Suh J et al (2010) Implementation of content-oriented networking architecture (CONA): a focus on DDoS countermeasure. In: 1st European NetFPGA developers workshop, pp 1–5
11.
go back to reference Chellani N, Tejpal P, Hari P (2016) Enhancing security in OpenFlow, pp 1–10 Chellani N, Tejpal P, Hari P (2016) Enhancing security in OpenFlow, pp 1–10
13.
go back to reference Li D, Hong X, Witt D (2013) ProtoGENI, a prototype GENI under security vulnerabilities : an experiment-based security study, pp 1–11 Li D, Hong X, Witt D (2013) ProtoGENI, a prototype GENI under security vulnerabilities : an experiment-based security study, pp 1–11
18.
go back to reference Systems BC (2009) Brocade sFlow for network traffic monitoring, p 12 Systems BC (2009) Brocade sFlow for network traffic monitoring, p 12
Metadata
Title
Reinforcement Learning-Based DoS Mitigation in Software Defined Networks
Author
A. VishnuPriya
Copyright Year
2019
Publisher
Springer Singapore
DOI
https://doi.org/10.1007/978-981-13-0212-1_41