Entropy-based distributed denial of service attack detection in software-defined networking

Software defined networking (SDN) is a new network architecture that allows for centralized control. The separation of the data plane from control plane, which establishes programmable environment, key breakthrough underpinning SDN. controller facilitates deployment services specify policies and delivers these rules to using common protocol such as OpenFlow at plane. Despite many advantages this design, SDN security remains worry because aforementioned chapter expands network's attack surface. In fact, denial service (DoS) assaults pose significant threat settings in variety ways, owing flaws layers. This work shows how distributed (DDoS) detection based on entropy variation destination IP address. study takes advantage protocol's (OFP) flexibility an (POX) apply proposed method. An computation determine features DDoS traffic developed it capable detecting user datagram (UDP) flood after 0.445 seconds type occurred.