HONEYNET METHOD SYSTEM AND COMPUTER PROGRAM FOR MITIGATING LINK FLOODING ATTACKS OF SOFTWARE DEFINED NETWORK

摘要

The present invention relates to a honeynet method, a system, and a computer program for mitigating link flooding attack in a software defined network (SDN) by exposing honey topology. The system comprises: a honey node detection unit detecting a honey node set of static and dynamic attributes calculated by an SDN controller and an OpenFlow (OF); a honey topology generation unit arranging honey topology by applying a probability model for the honey node set; and an access judging unit sensing a packet-in triggered by the honey node and controlling transmission of the packet from the honey node to the honey topology.