Using SDN Approach to Secure Cloud Servers against Flooding Based DDoS Attacks

摘要

Distributed Denial of Service (DDoS) attacks represent major risks for the current cloud computing architecture. The rate of DDoS attacks in cloud is growing because of the essential characteristics of cloud computing. In this paper, we propose to use Software Defined Network (SDN) architecture and Fast Entropy approach in order to secure cloud computing environment from DDoS attacks in real time. Thus, we exploited the centralized control and programmable characteristics of SDN architecture to supervise cloud traffics. The provided architecture collects and analyzes flow tables from switches. It also detects DDoS attacks by the controller using Fast Entropy algorithms. Through the performed experimental tests, we evaluated the performance of our solution in defending Cloud computing infrastructure against Distributed Denial of Service attacks.