Method for mitigating DDoS attack, programmable switch and SDN controller

Abstract

The invention provides a method for mitigating DDoS attack, a programmable switch and an SDN controller, and the method comprises the steps: adding an INT header to a data packet forwarded by the switch, after the data packet reaches a target switch, sending an INT message to the SDN controller, and enabling the SDN controller to convert a corresponding switching state in the INT message into a three-dimensional tensor; constructing a DDoS attack detection model based on a CNN and a graph convolutional neural network, extracting a time feature and a space feature in a three-dimensional tensor through the DDoS attack detection model, determining a switch containing an attack flow, and determining a forwarding path of the attack flow in the network; issuing a corresponding discarding strategy to relieve the DDoS attack, adding the source IP and the destination IP to a white list, and issuing the white list to all switches by the SDN controller. Through the scheme, the DDoS attack path can be accurately found, the distributed denial of service attack is reduced, and access of legal network traffic is guaranteed.

Description

technical field [0001] The invention relates to the field of network security, in particular to a method for mitigating DDoS attacks, a programmable switch and an SDN controller. Background technique [0002] Distributed Denial of Service (DDoS) is an easy and destructive network attack. Attackers usually invade vulnerable nodes in the Internet, then turn these nodes into botnets, and use these large-scale distributed The host creates a large number of data packets with forged IP addresses to launch an access attack on the victim server. DDoS can quickly consume a victim server's resources and crash it, making the victim server unable to respond to normal requests. close In recent years, DDoS attacks have become more and more frequent. The servers of many large Internet companies such as Apple, Amazon, and Alibaba have suffered from DDoS attacks, which has caused huge economic losses to Internet companies and the entire society. [0003] Researchers have done a lot of work...

AI Technical Summary

Problems solved by technology

[0004] In view of this, the embodiment of the present invention provides a method for mitigating DDoS attacks, a programmable switch and an SDN controller to solve the problem that the DDoS attack path cannot be accurately found, resulting in poor network defense effect

Images