SOFTWARE DEFINITION NETWORK CAPABLE OF DETECTING ARP SPOOFING ATTACK AND CONTROLLER INCLUDED THEREIN

摘要

Disclosed are a software definition network capable of detecting an ARP spoofing attack and a controller included therein. The disclosed software definition network comprises: a plurality of switches positioned on a data plane of the software definition network, and to which at least one host is connected; and a controller which is positioned on a control plane of the software definition network, and controls the switches. In this regard, the controller receives an ARP message transmitted from any one switch among the switches, extracts an IP address of a transmitter who transmits the ARP message from the ARP message, and detects whether an ARP spoofing attack is performed by determining whether first address information included in the ARP message is identical to second address information stored in the controller if a host having the extracted IP address is connected to the software definition network.;COPYRIGHT KIPO 2018