Experimental Study on Software-Defined Network Implementation for DDoS Attack Detection and Mitigation

Abstract

In this Industrial Revolution 4.0 era, the ability to access digital resources anywhere and anytime is essential to increase the level of user's trustworthiness. For many years, Distributed Denial of Service (DDoS) attacks has become the biggest problem for service providers in making their services available to end-users. This attacks can take down any servers or hosts available online by flooding the available resources such as bandwidth and memory with a false request to prevent legitimate users from accessing the servers. There are various categories of DDoS which are volumetric attack, protocol attack and application-layer attack, and it is challenging to detect by conventional security devices as it mimics the regular network traffic. In combatting DDoS attacks, Software-Defined Network (SDN) is one of the latest technologies used. SDN has a separated data plane and control plane, which make it more flexible in controlling the network with a central controller that has the capabilities to detect any malicious activities within the SDN network. This research aims to study the DDoS attack mitigation in SDN Local Area Network (LAN). This study simulated three types of DDoS attacks to see the effects on the CPU of the victim and RAM usage compared to a previous study using open-source network simulator.