LDoS attack detection method based on integrated wavelet transform in SDN environment

Abstract

The invention relates to an LDoS attack detection method based on integrated wavelet transform in an SDN environment. The invention relates to the technical field of signal processing. The method comprises the steps that entropy sets of different wavelet energy spectrums are obtained through calculation by means of multiple different wavelet transform basis functions; randomly selecting a wavelet basis function from a wavelet basis function library; judging whether the number of the selected wavelet basis functions reaches the number of specified integrated wavelet basis functions or not, and decomposing by utilizing three different wavelet basis functions; extracting the detail coefficients of each coefficient matrix are extracted, calculating an integrated wavelet energy value to acquire an entropy set of an integrated wavelet energy spectrum, allocating corresponding labels, and selecting a part of data set to train a support vector machine model and a full-connection neural network model; and detecting LDoS attacks in the SDN network by using the trained support vector machine model and the full-connection neural network model, sending a warning message if the LDoS is detected, and discarding data packets corresponding to the flow table entries, thereby reducing the load of the SDN network.

Description

technical field [0001] The invention relates to the technical field of signal processing, and relates to an LDoS attack detection method based on integrated wavelet transform in an SDN environment. Background technique [0002] Software-Defined Networking (SDN) is one of the next-generation network structures widely recognized as being able to replace the current network. Different from the traditional network structure, SDN realizes the decoupling of the control plane and the data forwarding plane, and has the advantages of network programmability, global visibility, and unified management. Although SDN is widely used, SDN is facing serious security problems, which restrict the development and application of SDN. Low Denial of Service (LDoS) attack is one of the more serious network security problems in SDN. [0003] Discrete Wavelet Transform (DWT) realizes signal processing by discretizing the scale and translation of the basic wavelet, which belongs to an analysis meth...

AI Technical Summary

Problems solved by technology

[0004] LDoS attack is to send the attack flow at a low rate and periodically, so that the victim end is continuously attacked without being noticed, which affects the availability of SDN

In view of the different architectures of SDN and traditional networks, LDoS attacks in SDN have different characteristics from traditional networks: in SDN, LDoS attacks can also cause damage to switches and controllers, and consume a large amount of switch resources, making The channel resources between the controller and the switch are exhausted, causing the controller to fail

Images