基于SDN控制器的拒绝服务攻击检测与防护

Detecting and Defeating Denial-of-Service Attacks on SDN Controller

在SDN架构下,网络控制器的拒绝服务攻击会抢占控制器的资源,引起网络瘫痪。本文分析了SDN控制器的拒绝服务攻击的特点,介绍了目前比较主流的检测和防护SDN控制器DoS攻击的方法,并以OpenDaylight控制器为例,提出了一种对控制器DoS攻击进行检测和防护的模型,最后利用ODL提供的API对提出的模型进行了编程实现。

Denial-of-Service（DoS）attacks will run out of the resources of SDN controller,and results in breakdown of the network. This article analysis characters of DoS attacks on SDN Controller,meanwhile some detection and prevention methods are also introduced. In this paper,a model of Detecting and Defeating Denial-of-Service attacks on OpenDaylight controller is proposed. Using the API of ODL,we realize this model by programming.