Software-Defined Networking (SDN) and

Distributed Denial of Service (DDoS)

Attacks in Cloud Computing
Environments: A Survey, Some Research
Issues, and Challenges
 ● Trends & characteristics of DDoS attack
● Survey of defense mechanism against DDoS
Paper using SDN.
Objective ● Studies about launching DDoS attacks on SDN.
● Study to prevent SDN from DDoS.
● To understand how to make full use of SDN’s
advantages.
What is SDN?
3 main Components of networking

CIA
DDoS target
Confidentiality Integrity Availability
Capabilities of SDN
● software-based traffic analysis
● centralized control
● global view of the network
● dynamic updating of forwarding rules
Architecture of SDN
Divided into 3 layers:

➔ Infrastructure
layer
➔ Control layer
➔ Application layer
 ❖ Performance
❖ Availability
❖ Scalability
Challenges of ❖ Security :
unauthorized access
SDN-based Cloud ➢
➢ data leakage
➢ data modification
➢ malicious applications
➢ configuration issues
➢ denial of service
SDN AS A VICTIM OF DDOS
ATTACKS
1) Application layer DDoS attacks

2) Control layer DDoS attacks

3) Infrastructure layer DDoS attacks

Classification of DDoS
Attacks
1) Network/transport-level DDoS flooding attacks

2) Application-level DDoS flooding attacks

Why Does the 1) On-Demand Self-Service Leading to Botnets
Outbreak
Rate of DDoS 2) Broad Network Access and Rapid Elasticity Leading

Attacks Grow to More Immense, Flexible and Sophisticated DDoS

Attacks
Substantially in ● More immense DDoS attacks in
Cloud cloud computing

Computing ● More flexible DDoS attacks in cloud

computing
Environments? ● More sophisticated DDoS attacks in
cloud computing
DDoS Attacks Defense
Mechanisms Using SDN
1) Source-based Mechanisms Using SDN

2) Network-based Mechanisms Using SDN

3) Destination-based Mechanisms Using SDN\