NFV-GUARD: Mitigating Flow Table-Overflow Attacks in SDN Using NFV

摘要

Software Defined Networking (SDN) has recently drawn attention by changing the network control paradigm. SDN devices handle the network traffic based on entries stored in their flow table. However, due to the flow table’s limited size, attacks such as DDoS can cause the table to overflow. Some of the current table overflow mitigation methods distribute flow entries to other network devices on the physical infrastructure, which might not be effective in small to medium-sized private networks. Therefore, this research proposes a method to mitigate table overflow attacks on SDN by dynamically filtering attackers using Network Function Virtualization (NFV). Preliminary results show that the proposed approach can effectively mitigate table overflow attacks without relying on network infrastructure.