Multidimensional detection and dynamic defense method for link flooding attack

Aiming at the shortcomings of the existing link flooding attack defense methods,a multi-dimensional index detection algorithm is proposed,which performs multi-dimensional detection on the abnormal forwarding links through the five-dimensional elements of connection length,low-speed ratio of data pac...

Full description

Saved in:
Bibliographic Details
Main Authors: Yang WANG, Guangming TANG, Cheng LEI, Dong HAN
Format: Article
Language:English
Published: POSTS&TELECOM PRESS Co., LTD 2019-08-01
Series:网络与信息安全学报
Subjects:
Online Access:http://www.cjnis.com.cn/thesisDetails#10.11959/j.issn.2096-109x.2019040
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1841530094570438656
author Yang WANG
Guangming TANG
Cheng LEI
Dong HAN
author_facet Yang WANG
Guangming TANG
Cheng LEI
Dong HAN
author_sort Yang WANG
collection DOAJ
description Aiming at the shortcomings of the existing link flooding attack defense methods,a multi-dimensional index detection algorithm is proposed,which performs multi-dimensional detection on the abnormal forwarding links through the five-dimensional elements of connection length,low-speed ratio of data packets,uniformity of data packet distance,average low-speed ratio of data packets,and change rate of low-speed ratio of data packets,thus effectively solving the problem of high false alarm rate of the existing detection methods.Furthermore,a controller switch dynamic deployment method based on coloring theory is proposed,which solves the problem of difficult to be actually deployed in the actual environment with limited switch variant types existing in the existing defense mitigation mechanisms.Experimental analysis show the feasibility of the proposed method.
format Article
id doaj-art-e50b3576e45f4c7d9c27fd44cb095ad6
institution Kabale University
issn 2096-109X
language English
publishDate 2019-08-01
publisher POSTS&TELECOM PRESS Co., LTD
record_format Article
series 网络与信息安全学报
spelling doaj-art-e50b3576e45f4c7d9c27fd44cb095ad62025-01-15T03:13:38ZengPOSTS&TELECOM PRESS Co., LTD网络与信息安全学报2096-109X2019-08-015809059556406Multidimensional detection and dynamic defense method for link flooding attackYang WANGGuangming TANGCheng LEIDong HANAiming at the shortcomings of the existing link flooding attack defense methods,a multi-dimensional index detection algorithm is proposed,which performs multi-dimensional detection on the abnormal forwarding links through the five-dimensional elements of connection length,low-speed ratio of data packets,uniformity of data packet distance,average low-speed ratio of data packets,and change rate of low-speed ratio of data packets,thus effectively solving the problem of high false alarm rate of the existing detection methods.Furthermore,a controller switch dynamic deployment method based on coloring theory is proposed,which solves the problem of difficult to be actually deployed in the actual environment with limited switch variant types existing in the existing defense mitigation mechanisms.Experimental analysis show the feasibility of the proposed method.http://www.cjnis.com.cn/thesisDetails#10.11959/j.issn.2096-109x.2019040link flood attackmultidimensional detectiondynamic deploymentsoftware defined network
spellingShingle Yang WANG
Guangming TANG
Cheng LEI
Dong HAN
Multidimensional detection and dynamic defense method for link flooding attack
网络与信息安全学报
link flood attack
multidimensional detection
dynamic deployment
software defined network
title Multidimensional detection and dynamic defense method for link flooding attack
title_full Multidimensional detection and dynamic defense method for link flooding attack
title_fullStr Multidimensional detection and dynamic defense method for link flooding attack
title_full_unstemmed Multidimensional detection and dynamic defense method for link flooding attack
title_short Multidimensional detection and dynamic defense method for link flooding attack
title_sort multidimensional detection and dynamic defense method for link flooding attack
topic link flood attack
multidimensional detection
dynamic deployment
software defined network
url http://www.cjnis.com.cn/thesisDetails#10.11959/j.issn.2096-109x.2019040
work_keys_str_mv AT yangwang multidimensionaldetectionanddynamicdefensemethodforlinkfloodingattack
AT guangmingtang multidimensionaldetectionanddynamicdefensemethodforlinkfloodingattack
AT chenglei multidimensionaldetectionanddynamicdefensemethodforlinkfloodingattack
AT donghan multidimensionaldetectionanddynamicdefensemethodforlinkfloodingattack