• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文会议>IEEE International Conference on Parallel and Distributed Systems >DoS Mitigation Mechanism Based on Non-cooperative Repeated Game for SDN
【24h】

DoS Mitigation Mechanism Based on Non-cooperative Repeated Game for SDN

机译：基于非合作重复游戏的DOS缓解机制SDN

获取原文
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

Software defined network (SDN) can manage the whole network flexibly because of its programmability and logically centralized architecture. However, the centralized architecture of SDN makes it more vulnerable to Denial of Service (DoS) attack which is launched by sending a large number of malicious packet_in packets to consume the resources of the controller and data planes. In order to protect the normal operation of the network from DoS, we propose an effective DoS mitigation framework based on non-cooperative repeated game called PrioGuard. DoS can be detected based on the information entropy, packet_in rate and packet_in response rate. Furthermore, the penalty-incentive mechanism of repeated game is adopted to punish these attackers by lowering their priority in order to postpone their requests. The requests from attackers will be migrated to data plane cache, which can mitigate the interface cache of control plane and make the controller process the normal requests effectively. We have implemented a prototype system of PrioGuard. Simulation evaluations demonstrate that our scheme is very effective with less response time, less packet loss rate and lower controller load.
机译：软件定义的网络（SDN）可以灵活地管理整个网络，因为其可编程性和逻辑集中式架构。但是，SDN的集中式架构使得拒绝服务（DOS）攻击更容易受到通过发送大量恶意Packet_in数据包来消耗控制器和数据平面的资源来启动的服务（DOS）攻击。为了保护来自DOS网络的正常运行，我们提出了一种基于名为Prioguard的非合作重复游戏的有效的DOS缓解框架。可以基于信息熵，Packet_in速率和Packet_in响应速率来检测DOS。此外，通过降低其优先级以推迟他们的要求，通过了重复游戏的惩罚机制来惩罚这些攻击者。攻击者的请求将被迁移到数据平面缓存，这可以减轻控制平面的接口缓存，并使控制器处理正常请求。我们已经实施了一个原型的Prioguard系统。仿真评估表明，我们的方案非常有效，响应时间较少，丢包率较少，控制器负载较低。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号