Chinese Journal of Network and Information Security ›› 2019, Vol. 5 ›› Issue (4): 80-90.doi: 10.11959/j.issn.2096-109x.2019040

• Papers • Previous Articles     Next Articles

Multidimensional detection and dynamic defense method for link flooding attack

Yang WANG(),Guangming TANG,Cheng LEI,Dong HAN   

  1. Information Engineering University,Zhengzhou 450001,China
  • Revised:2019-04-28 Online:2019-08-15 Published:2019-08-20
  • Supported by:
    The National Natural Science Foundation of China(61601517)

Abstract:

Aiming at the shortcomings of the existing link flooding attack defense methods,a multi-dimensional index detection algorithm is proposed,which performs multi-dimensional detection on the abnormal forwarding links through the five-dimensional elements of connection length,low-speed ratio of data packets,uniformity of data packet distance,average low-speed ratio of data packets,and change rate of low-speed ratio of data packets,thus effectively solving the problem of high false alarm rate of the existing detection methods.Furthermore,a controller switch dynamic deployment method based on coloring theory is proposed,which solves the problem of difficult to be actually deployed in the actual environment with limited switch variant types existing in the existing defense mitigation mechanisms.Experimental analysis show the feasibility of the proposed method.

Key words: link flood attack, multidimensional detection, dynamic deployment, software defined network

CLC Number: 

No Suggested Reading articles found!