Adaptive Suspicious Prevention for Defending DoS Attacks in SDN-Based Convergent Networks

Area of Science:

• Computer networking
• Network security
• Cybersecurity

Background:

• Convergent communication networks aim to unify heterogeneous and legacy systems.
• Software-Defined Networking (SDN) offers a controllable and dynamic network architecture.
• SDN's centralized control plane presents a vulnerability to Denial of Service (DoS) attacks.

Purpose of the Study:

• To propose a novel mechanism for protecting SDN controllers from DoS attacks.
• To enhance the resilience and security of SDN-based convergent networks.

Main Methods:

• Development of an adaptive suspicious prevention (ASP) mechanism.
• Integration of the ASP mechanism with the OpenFlow protocol.
• Experimental evaluation of the ASP mechanism's effectiveness against DoS attacks.

Main Results:

• The ASP mechanism effectively detects and prevents DoS attacks targeting SDN controllers.
• Experimental results demonstrate up to a 38% enhancement in SDN network resilience against DoS attacks.
• The proposed solution addresses the structural vulnerability of centralized SDN control planes.

Conclusions:

• The adaptive suspicious prevention (ASP) mechanism is a viable solution for securing SDN controllers.
• ASP integration with OpenFlow enhances network security and robustness.
• This approach contributes to the development of secure and resilient convergent communication networks.