iClassMFT: Proposed Multiple Flow Tables Classes to Integrate Security and Flexibility into SDN Switches

摘要

Good interaction between the SDN controller and OpenFlow switches has been crucial for efficient application development. However, as with traditional networks, OpenFlow-based networks are also subject to problems. Aiming to topple the network, DDoS attacks have been one of the main weapons used by attackers. This paper proposes iClassMFT, a solution for effectively mitigating real-time DDoS attacks through an SDN framework composed of switches configured with multiple flow table classes that can still offer flexible network control. Experiments using Mininet show that the proposed solution can minimize the impact of DDoS attacks and aid the controller maintain acceptable network performance during these attacks.