Adaptive Bubble Burst (ABB): Mitigating DDoS attacks in Software-Defined Networks

摘要

The availability of online services is threatened by the Distributed Denial of Service (DDoS) attacks. As computing resources are getting cheaper, DDoS attacks are becoming more frequent and powerful. When DDoS attacks are directed towards a specific service, a small number of bots can overwhelm the service, making it unavailable to legitimate users. This paper presents Adaptive Bubble Burst (ABB), which takes advantage of the logically centralized architecture of Software-Defined Networks to provide mitigation against DDoS attacks that are targeted towards a specific service. ABB works by dispersing the incoming traffic in the network. Our experimental results show that ABB mitigates the DDoS attacks by enhancing the availability of a specific network resource.