Automated controller placement for software-defined networks to resist DDoS attacks

• Main Authors: Muhammad Reazul Haque, Tan, Saw Chin, Zulfadzli Yusoff, Kashif Nisar, Lee, Ching Kwang, Rizaludin Kaspin, Chowdhry, Bhawani Shankar, Buyya, Rajkumar, Majumder, Satya Prasad, Gupta, Manoj, Memon, Shuaib
• Other Authors: School of Electrical and Electronic Engineering
• Format: Article
• Language: English
• Published: 2022
• Subjects: Engineering::Electrical and electronic engineering; Software-Defined Networks; Automated Controller Placement
• Online Access: https://hdl.handle.net/10356/154007
• Institution: Nanyang Technological University

In software-defined networks (SDNs), controller placement is a critical factor in the design and planning for the future Internet of Things (IoT), telecommunication, and satellite communication systems. Existing research has concentrated largely on factors such as reliability, latency, controller capacity, propagation delay, and energy consumption. However, SDNs are vulnerable to distributed denial of service (DDoS) attacks that interfere with legitimate use of the network. The ever-increasing frequency of DDoS attacks hasmade it necessary to consider them in network design, especially in critical applications such as military, health care, and financial services networks requiring high availability. We propose a mathematical model for planning the deployment of SDN smart backup controllers (SBCs) to preserve service in the presence of DDoS attacks. Given a number of input parameters, our model has two distinct capabilities. First, it determines the optimal number of primary controllers to place at specific locations or nodes under normal operating conditions. Second, it recommends an optimal number of smart backup controllers for use with different levels of DDoS attacks. The goal of the model is to improve resistance to DDoS attacks while optimizing the overall cost based on the parameters. Our simulated results demonstrate that the model is useful in planning for SDN reliability in the presence of DDoS attacks while managing the overall cost.