DDoSify

Abstract

Network Function Virtualization (NFV) provides numerous advantages over the conventional network through the implementation of different network functions over Virtual Machine (VM). For greater flexibility, it reduces capital and operating expenditure. Nonetheless, due to various forms of cyber attacks such as Distributed Denial of Service (DDoS) attack, these advantages come at the price of the inherent weakness of the network. The increased number of layers in NFV makes it more feasible for an attacker to carry out a DDoS attack. This research suggests a new paradigm to mitigate the impact of DDoS attacks on NFV. Typically, when it detects the DDoS attack on the application layer, DDoSify performs server migration and IP spoofing. DDoSify's effectiveness was tested by calculating processing time during load migration and IP spoofing.