一种DDoS攻击检测和缓解方法,用于SDN控制器的综合协调保护
Jin Wang1, Liping Wang1, Ruiqing Wang2
1College of Computer Science and Technology, Zhejiang University of Technology, Hangzhou 310023, China.
Entropy (Basel, Switzerland)
|August 26, 2023
概括
本研究介绍了CC-Guard,这是一个新的防御框架,用于保护软件定义网络 (SDN) 控制器免受分布式拒绝服务 (DDoS) 攻击. CC-Guard通过改进攻击检测和缓解策略来提高网络安全性和性能.
科学领域:
- 计算机科学 计算机科学
- 网络安全 网络安全
背景情况:
- 软件定义网络 (SDN) 通过分离控制和数据层,提供了增强的网络灵活性和控制.
- 在SDN架构中的集中控制器容易受到分布式拒绝服务 (DDoS) 攻击,导致网络不稳定性和性能下降.
研究的目的:
- 提出和评估CC-Guard,这是一种旨在减轻针对SDN控制器的DDoS攻击的新型防御框架.
- 提高SDN基础设施对复杂的网络威胁的弹性和性能.
主要方法:
- CC-Guard采用了一个由四个模块组成的框架:攻击检测触发,开关迁移,异常检测和缓解.
- 异常检测模块使用粗粒度,两阶段的方法来提高准确性.
- 缓解涉及跨域控制器的合作,以识别和删除恶意流量.
主要成果:
- 实验结果证明了CC-Guard在SDN环境中的实时DDoS攻击防御能力.
- 该框架实现了高检测精度和高效的网络资源利用.
- 交换机迁移有效地解决了控制器拥堵问题,促进了更顺的网络流传输.
结论:
- CC-Guard提供了一种有效的解决方案,用于保护SDN控制器免受DDoS攻击.
- 拟议的框架提高了SDN中的网络安全,性能和资源管理.
- CC-Guard的模块化设计和合作缓解策略提供了一个强大的防御机制.
更多相关视频
07:12Real-Time Monitoring of Neurocritical Patients with Diffuse Optical Spectroscopies
Published on: November 19, 2020
2.2K
06:45Design and Application of a Fault Detection Method Based on Adaptive Filters and Rotational Speed Estimation for an Electro-Hydrostatic Actuator
Published on: October 28, 2022
1.7K
相关概念视频
Zones of Protection
224
In power systems, the entire setup is divided into protective zones to isolate faults and protect the rest of the network. These zones include generators, transformers, buses, transmission lines, distribution lines, and motors. Each zone can be visualized as a separate room in a house, with each room protected by its own circuit breaker.
Protective zones are defined by closed dashed lines, containing one or more components. A key characteristic of these zones is the strategic placement of...
Protective zones are defined by closed dashed lines, containing one or more components. A key characteristic of these zones is the strategic placement of...
224
Radial System Protection
120
Radial systems employ time-delay overcurrent relays to reduce load interruptions. When a fault occurs, the nearest breaker opens first, while upstream breakers remain closed due to longer delay settings. This approach ensures minimal disruption to the rest of the system.
In a radial system with a fault downstream of the third breaker, ideally, only the third breaker will open, isolating the fault and interrupting the load connected beyond it. The second breaker has a longer delay setting,...
In a radial system with a fault downstream of the third breaker, ideally, only the third breaker will open, isolating the fault and interrupting the load connected beyond it. The second breaker has a longer delay setting,...
120
PD Controller: Design
278
In automotive engineering, car suspension systems often employ Proportional Derivative (PD) controllers to enhance performance. PD controllers are utilized to adjust the damping force in response to road conditions. A controller, acting as an amplifier with a constant gain, demonstrates proportional control, with output directly mirroring input.
Designing a continuous-data controller requires selecting and linking components like adders and integrators, which are fundamental in Proportional,...
Designing a continuous-data controller requires selecting and linking components like adders and integrators, which are fundamental in Proportional,...
278
Time-Domain Interpretation of PD Control
140
Proportional-Derivative (PD) control is a widely used control method in various engineering systems to enhance stability and performance. In a system with only proportional control, common issues include high maximum overshoot and oscillation, observed in both the error signal and its rate of change. This behavior can be divided into three distinct phases: initial overshoot, subsequent undershoot, and gradual stabilization.
Consider the example of control of motor torque. Initially, a positive...
Consider the example of control of motor torque. Initially, a positive...
140
Line Protection with Impedance Relays
98
Coordinating time-delay overcurrent relays in complex radial systems and directional overcurrent relays in multi-source transmission loops can be challenging. Impedance relays address these issues by responding to the voltage-to-current ratio, specifically measuring the apparent impedance of a line. These relays become more sensitive during faults as current increases and voltage decreases, thereby reducing the apparent impedance.
Under normal conditions, low load currents keep the measured...
Under normal conditions, low load currents keep the measured...
98
Distribution Reliability and Automation
129
Distribution reliability in electrical power systems is critical for ensuring an uninterrupted power supply to consumers at minimal cost. According to IEEE Standard Terms, reliability is the probability that a device will function without failure over a specified time period or amount of usage. For electric power distribution, this translates to maintaining continuous power supply and addressing customer concerns over power outages. Several indices, as defined by IEEE Standard 1366-2012, are...
129
