METHOD AND APPARATUS FOR DETECTING ABNORMAL TRAFFIC IN SDN

摘要

The present invention relates to a method and an apparatus for detecting abnormal traffic in a SDN. The method for detecting abnormal traffic in a SDN according to the present invention comprises: a step that a first switch connected to a SDN controller receives a traffic flow; a step that the first switch transmits the flow to a second switch when the size of the flow is greater than or equal to a first reference value; a step that a second switch classifies a packet included in the flow into a predefined cluster; and a step that the second switch drops the packet when traffic of the cluster classified by the second switch is greater than or equal to a second reference value.;COPYRIGHT KIPO 2017