A Link Fabrication Attack Mitigation Approach (LiFAMA) for Software Defined Networks

In software defined networks (SDNs), the controller is a critical resource, yet it potential target for attacks as well. The conventional OpenFlow Discovery Protocol (OFPD) used in building topological view has vulnerabilities that easily allow attackers to poison network topology by creating fabricated links with malicious effects. OFDP makes use of link layer discovery protocol (LLDP) discover existing links. However, LLDP not efficient at detection. Existing approaches mitigating this problem have mostly been passive depend on observing unexpected behaviour. Examples such behaviour include latency and packet patterns trigger attack alerts. solutions their implementations cause longer time. This implies dense SDN would suffer from huge delays process. study, we propose fabrication (LFA) mitigation approach (LiFAMA), which an active one minimises uses authentication together keyed-hash-based message code (HMAC) verification database (PostgreSQL) stores records all known verified network. was implemented emulated environment using Mininet Python-based open-source (POX) controller. results show detects real time helps mitigate them. Additionally, LiFAMA out-competes LFA approach.