Case Design of Mitigating DDoS Attack Based on SDN Architecture
DOI:
https://doi.org/10.53469/wjimt.2026.09(01).01Keywords:
SDN, DDoS attacks, K-MeansAbstract
SDN is a new network architecture that separates the network into a management plane and a forwarding plane, simplifying network configuration and reducing maintenance costs. DDoS attack is a kind of network attack method which is easy to implement and strong attack. It lacks effective countermeasures in SDN environment. This paper presents a DDoS attack mitigation scheme based on SDN architecture. Firstly, the related concepts and technologies are briefly introduced, then entropy detection and K-Means algorithm are proposed to classify traffic, and finally deal with attack traffic to mitigate the impact of DDoS attacks on SDN environment.
References
Mengzhe Mei. Research on DDoS Attack Detection and Defense Based on Multidimensional Conditional Entropy in SDN [D]. Nanchang University of Aeronautics and Astronautics, 2016.
Fu Xiao, Junqing Ma, Xunsong Huang, Wang Ruxuan. A KNN-based DDoS attack detection method in SDN environment [J]. Proceedings of Nanjing University of Posts and Telecommunications (Natural Sciences Edition), 2015, 35 (01): 84-88.
Zhenpeng Liu, Yupeng He, Wensheng Wang, Bin Zhang. DDoS attack detection scheme in SDN environment [J]. Proceedings of Wuhan University (Science and Technology Edition), 2019, 65 (02): 178-184.
Lele Ma. Research on Detection and Defense of DDoS Attacks in SDN Environment [D]. Anhui University, 2019.
Wenwei Wang, Junfei Xiao, Peng Cheng, Yue Zhang. DDoS attack prevention system based on SDN [J]. Computing and modernization, 2021 (02): 117-121 126.