Abstract
The security of the Internet of Things (IoT) ecosystem has become a critical challenge due to a tremendous increase in the vulnerable connected IoT devices. Software-Defined Network (SDN) becomes a choice for managing IoT and offers new approaches to solve security problems. Link flooding attack (LFA), cut off the network connectivity on a particular target area of the network. This attack uses legitimate, and low density flows to flood selected links of the target area. Therefore, these flows can not be easily distinguished by traditional approaches. In this paper, firstly, we present a framework for IoT network based on SDN designed for security solutions against LFA attack. The presented framework consists of an SDN controller connected with SDN switches and SDN switches integrated with the IoT-getaway. Secondly, we proposed a scheme that employs hop-by-hop network measurement to capture abnormal link performance for detecting LFA. Afterward, it employs a centralized traffic engineering to eliminate link bottlenecks and mitigating LFA. The proposed scheme will be developed as an application at the application layer of POX controller. The evaluation demonstrates that the proposed method can effectively optimize the process of measuring link performance for detecting and mitigating LFA.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Similar content being viewed by others
References
Huadong, M., Liang, L., Anfu, Z., Dong, Z.: On networking of Internet of Things: explorations and challenges. IEEE Internet Things J. 3, 441–452 (2016)
Mostafa, U., Sarit, M., Hyunseok, C., Lakshman, T.V.: SDN-based multiprotocol edge switching for IoT service automation. IEEE J. Sel. Areas Commun. 36(12), 2775–2786 (2018)
Da, Y., Lianming, Z., Kun, Y.: A DDoS attack detection and mitigation with software-defined Internet of Things framework. IEEE Access 6, 24694–24705 (2018)
Wajid, R., Nanjing, U., Xin, H., Zifan, L., Yuhu, S., Wanchun, D.: CFADefense: a security solution to detect and mitigate crossfire attacks in software-defined IoT-edge (2019)
Yaser, J., Mohammed, A., Mahmoud, A., Elhadj, B., Ala, D., Brij, G., Ahamed, D.: Software-defined system support for enabling ubiquitous mobile edge computing. Comput. J. 60, 1443–1457 (2017)
Soo, L., Min, K., and Virgil. G.: CoDef: collaborative defense against large-scale link-flooding attacks. In: Proceedings of the ACM CoNEXT (2013)
Soo, L., Virgil, G.: FLoc: dependable link access for legitimate traffic in flooding attacks. In: Proceedings of the IEEE ICDCS (2010)
Qian, W., Feng, X., Man, Z., Zhibo, W., Hongyu, D.: Mitigating link flooding attacks with active link obfuscation Arxiv (2017)
Ali, S.T., Sivaraman, V., Radford, A., Jha, S.: A survey of securing networks using software defined networking. IEEE Trans. Reliab. 64(3), 1086–1097 (2015)
Christos, L., Vasileios, K., Xenofontas, D.: A novel framework for modeling and mitigating distributed link flooding attacks. In: IEEE INFOCOM (2016)
Soo, L., Min, K., Virgil, G.: CoDef: collaborative defense against large-scale link-flooding attacks. In: Proceedings of the Nninth ACM Conference on Emerging Networking Experiments and Technologies, pp. 417–428. ACM (2013)
Lei, X., Xiapu, L., Edmond, C., Xian, Z.: Towards detecting target link flooding attack. In: 28th Large Installation System Administration Conference (LISA14), pp. 90–105 (2014)
Adrichem, V., Doerr, C., Kuipers, F.: OpenNetMon: network monitoring in OpenFlow software-defined networks. In: Network Operations and Management Symposium (NOMS), pp. 1–8. IEEE (2014)
Alaa, A., Koji, O.: Latency monitoring in software-defined networks. In: CFI 2017 (2017)
Siris, V.A., Papagalou, F.: Application of anomaly detection algorithms for detecting SYN flooding attacks. Comput. Commun. 29, 1433–1442 (2006)
Acknowledgements
This research was supported by the Strategic International Research Cooperative Program, Japan Science and Technology Agency (JST) SICORP Grant Number JPMJSC16H3 and JSPS KAKENHI Grant Number JP16K00480.
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2020 Springer Nature Switzerland AG
About this paper
Cite this paper
Allakany, A., Yadav, G., Paul, K., Okamura, K. (2020). Detection and Mitigation of LFA Attack in SDN-IoT Network. In: Barolli, L., Amato, F., Moscato, F., Enokido, T., Takizawa, M. (eds) Web, Artificial Intelligence and Network Applications. WAINA 2020. Advances in Intelligent Systems and Computing, vol 1150. Springer, Cham. https://doi.org/10.1007/978-3-030-44038-1_101
Download citation
DOI: https://doi.org/10.1007/978-3-030-44038-1_101
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-030-44037-4
Online ISBN: 978-3-030-44038-1
eBook Packages: Intelligent Technologies and RoboticsIntelligent Technologies and Robotics (R0)