Deep Reinforcement Learning based Smart Mitigation of DDoS Flooding in Software-Defined Networks

Yandong Liu, Mianxiong Dong, Kaoru Ota, Jianhua Li, Jun Wu

研究成果: Conference contribution

25 被引用数 (Scopus)

抄録

Distributed Denial-of-Service (DDoS) flooding attack has remained as one of the most destructive attacks for more than two decades. Although great efforts have been made to design the defense mechanism, it is still difficult to mitigate these attacks in real time smartly and effectively for the reason that attack traffic may mix with benign traffic. Software-Defined Networks (SDN) decouples control and data plane in the network. Its centralized control paradigm and global view of the network bring some new chances to enhance the defense ability against network attacks. In this paper, we propose a deep reinforcement learning based framework, which can smartly learn the optimal mitigation policies under different attack scenarios and mitigate the DDoS flooding attack in real time. This framework is an effective system to defend against a wide range of DDoS flooding attacks such as TCP SYN, UDP, and ICMP flooding. It can intelligently learn the patterns of attack traffic and throttle the attack traffic, while the traffic of benign users is forwarded normally. We compare our proposed framework with a baseline along with a popular state-of-the-art router throttling method. The experimental results show that our approach can outperform both of them in five attacking scenarios with different attack dynamics significantly.

本文言語English
ホスト出版物のタイトル2018 IEEE 23rd International Workshop on Computer Aided Modeling and Design of Communication Links and Networks, CAMAD 2018
出版社Institute of Electrical and Electronics Engineers Inc.
ISBN(電子版)9781538661512
DOI
出版ステータスPublished - 2018 10月 29
外部発表はい
イベント23rd IEEE International Workshop on Computer Aided Modeling and Design of Communication Links and Networks, CAMAD 2018 - Barcelona, Spain
継続期間: 2018 9月 172018 9月 19

出版物シリーズ

名前IEEE International Workshop on Computer Aided Modeling and Design of Communication Links and Networks, CAMAD
2018-September
ISSN(電子版)2378-4873

Conference

Conference23rd IEEE International Workshop on Computer Aided Modeling and Design of Communication Links and Networks, CAMAD 2018
国/地域Spain
CityBarcelona
Period18/9/1718/9/19

ASJC Scopus subject areas

  • コンピュータ ネットワークおよび通信
  • コンピュータ グラフィックスおよびコンピュータ支援設計

フィンガープリント

「Deep Reinforcement Learning based Smart Mitigation of DDoS Flooding in Software-Defined Networks」の研究トピックを掘り下げます。これらがまとまってユニークなフィンガープリントを構成します。

引用スタイル