A Simple DDoS Defense Method Based SDN

Abstract

DDoS attacks have been one of the major threats to the Internet since their emergence. With the rapid development of the Internet, the number of network users is increasing rapidly. Thus, the existing network based on TCP\IP protocol is increasingly complex and rigid; it is difficult to add new functions, which greatly restricts the development of network technology. The emergence of SDN provides a feasible solution to the severe problems faced by the existing network. At the same time, it also provides a new technology to solve the problem of DDoS attack in the traditional network. In this paper, a simple SDN architecture was built on the network simulation platform of Mininet. The host launched ping flood attack, and the controller was used to control the delivery flow meter to suppress DDoS attack traffic, which achieved a good defense effect. Keywords–Network security; DDoS attack; Software defined network; The controller