Spoofing Attack Mitigation in Address Resolution Protocol (ARP) and DDoS in Software-Defined Networking
محتوى المقال
الملخص
Software Defined Networking (SDN) shows network operations to be performed for efficient network operations. Due to the increase in network devices, the percentage of attacks is also increased, and it is challenging to provide defense against such attacks. In SDN, the control plan is separated from the data plane. The control plan is implemented using some central devices called SDN controllers. In SDN Address Resolution Protocol (ARP), spoofing and Distributed Denial of Services (DDoS) attacks are carried out on an enormous scale. These are commonly launched attacks in SDN. Due to these attacks, the network performance is down, and network services are dead. This paper proposed a new auto detection methodology to detect ARP and DDoS attacks and mitigate SDN networks from these attacks.
Additionally, we implemented two algorithms: one for flow rules and the second for attack detection. An individual server was installed to check the malicious traffic installation. We present the new forward flooding rules to detect and mitigate attacks. The experiments are performed using LINUX-based network implementation. Our proposal successfully improves network security and enhances network efficiency.
الكلمات المفتاحية
Software Defined Networks، ARP Inspection، Address Resolutions، Cybersecurity، Intrusion Prevention System Design
التنزيلات
المراجع
[1] W. Rafique, L. Qi, I. Yaqoob, M. Imran, R. U. Rasool, and W. Dou, “Complementing IoT Services Through Software Defined Networking and Edge Computing: A Comprehensive Survey,” IEEE Commun. Surv. Tutor., vol. 22, no. 3, pp. 1761-1804, thirdquarter 2020, doi: 10.1109/COMST.2020.2997475.
[2] X. Zhang, L. Cao, Z. Meng and X. Yao, “A solution for ARP attacks in software defined network,” in AIIPCC 2021; 2nd Int. Conf. Artificial Intell. Inf. Process. Cloud Comput., China, 2021, pp. 1-9.
[3] T. Girdler and V. G. Vassilakis, “Implementing an intrusion detection and prevention system using Software-Defined Networking: Defending against ARP spoofing attacks and Blacklisted MAC Addresses,” Comput. Electr. Eng., vol. 90, p. 106990, Mar. 2021, doi: 10.1016/j.compeleceng.2021.106990.
[4] E. Unal, S. Sen-Baidya, and R. Hewett, “Towards Prediction of Security Attacks on Software Defined Networks: A Big Data Analytic Approach,” in 2018 IEEE Int. Conf. Big Data (Big Data), USA, 2018, pp. 4582-4588, doi: 10.1109/BigData.2018.8622524.
[5] A. F. Ali and W. S. Bhaya, “Software Defined Network (SDN) Security Against Address Resolution Protocol Poisoning Attack,” J. Comput. Theor. Nanosci., vol. 16, no. 3, pp. 956-963, 2019, doi: 10.1166/jctn.2019.7982.
[6] H. Y. Khalid, P. M. Ismael, and A. B. Al-khalil, “Efficient Mechanism for Securing Software Defined Network against Arp Spoofing Attack,” J. Duhok Univ., vol. 22, no. 1, pp. 124-131, 2019, doi: 10.26682/sjuod.2019.22.1.14.
[7] N. Ravi, S. M. Shalinie, and D. Danyson Jose Theres, “BALANCE: Link Flooding Attack Detection and Mitigation via Hybrid-SDN,” IEEE Trans. Netw. Serv. Manag., vol. 17, no. 3, pp. 1715-1729, Sept. 2020, doi: 10.1109/TNSM.2020.2997734.
[8] M. Pal Singh and A. Bhandari, “New-flow based DDoS attacks in SDN: Taxonomy, rationales, and research challenges,” Comput. Commun., vol. 154, pp. 509-527, Mar. 15, 2020, doi: 10.1016/j.comcom.2020.02.085.
[9] A. K. Rangisetti, R. Dwivedi, and P. Singh, “Denial of ARP spoofing in SDN and NFV enabled cloud-fog-edge platforms,” Clust. Comput., vol. 24, pp. 3147-3172, June 2021, doi: 10.1007/s10586-021-03328-x.
[10] P. -W. Tsai, C. -W. Tsai, C. -W. Hsu, and C. -S. Yang, “Network Monitoring in Software-Defined Networking: A Review,” IEEE Syst. J., vol. 12, no. 4, pp. 3958-3969, Dec. 2018, doi: 10.1109/JSYST.2018.2798060.
[11] J. Xie et al., “A Survey of Machine Learning Techniques Applied to Software Defined Networking (SDN): Research Issues and Challenges,” IEEE Commun. Surv. Tutor., vol. 21, no. 1, pp. 393-430, Firstquarter 2019, doi: 10.1109/COMST.2018.2866942.
[12] T. -Y. Lin et al., “Mitigating SYN flooding Attack and ARP Spoofing in SDN Data Plane,” in 2020 21st Asia-Pac. Netw. Oper. Manag. Symp. (APNOMS), Korea, 2020, pp. 114-119, doi: 10.23919/APNOMS50412.2020.9236951.
[13] M. N. Munther, F. Hashim, N. A. Abdul Latiff, K. A. Alezabi, and J. T. Liew, “Scalable and secure SDN based ethernet architecture by suppressing broadcast traffic,” Egypt. Inform. J., vol. 23, no. 1, pp. 113-126, Mar. 2022, doi: 10.1016/j.eij.2021.08.001.
[14] J. Xia, Z. Cai, G. Hu, and M. Xu, “An Active Defense Solution for ARP Spoofing in OpenFlow Network,” Chin. J. Electron., vol. 28, no. 1, pp. 172-178, Jan. 2019, doi: 10.1049/cje.2017.12.002.
[15] H. Aldabbas and R. Amin, “A novel mechanism to handle address spoofing attacks in SDN based IoT,” Clust. Comput., vol. 24, pp. 3011-3026, 2021, doi: 10.1007/s10586-021-03309-0.
[16] V. K. Tchendji, F. Mvah, C. T. Djamegni, and Y. F. Yankam, “E2BaSeP: Efficient Bayes Based Security Protocol Against ARP Spoofing Attacks in SDN Architectures,” J. Hardw. Syst. Secur., vol. 5, pp. 58-74, 2021, doi: 10.1007/s41635-020-00105-x.
M. Reazul Haque et al., “Analysis of DDoS Attack-Aware Software-Defined Networking Controller Placement in Malaysia,” in Recent Trends in Computer Applications, J. M. Alja’am, A. El Saddik, and A. Sadka, Eds., Cham, Switzerland: Springer, 2018, pp. 175-188.
تفاصيل المقال
هذا العمل مرخص بموجب Creative Commons Attribution-NonCommercial 4.0 International License.