Protecting software-defined enterprise networks from packet injection attacks

Tanvir Ul Huque, Frank Den Hartog

Research output: A Conference proceeding or a Chapter in BookConference contributionpeer-review

2 Citations (Scopus)

Abstract

Packet injection attacks are a primary threat to software-defined enterprise networks, for which continuous connectivity and real-time network functioning are two essential requirements. They are a form of denial-of-service attacks, and their main effect is network performance degradation up to total breakdown. In this paper, we show how such an attack can effectively be detected and mitigated at the entrance gateway switch of the software-defined enterprise network without sacrificing the basic functionality and performance of the networks control mechanisms. We describe an effective protection of the network's core controller as well as a significant reduction of rule-space overhead compared to a state-of-the-art technique.

Original languageEnglish
Title of host publicationProceedings of the IEEE 46th Conference on Local Computer Networks, LCN 2021
EditorsLyes Khoukhi, Sharief Oteafy, Eyuphan Bulut, Karl Anderson
PublisherIEEE, Institute of Electrical and Electronics Engineers
Pages287-292
Number of pages6
ISBN (Electronic)9780738124766
DOIs
Publication statusPublished - 4 Oct 2021
Externally publishedYes
Event46th IEEE Conference on Local Computer Networks, LCN 2021 - Edmonton, Canada
Duration: 4 Oct 20217 Oct 2021

Publication series

NameProceedings - Conference on Local Computer Networks, LCN
Volume2021-October

Conference

Conference46th IEEE Conference on Local Computer Networks, LCN 2021
Country/TerritoryCanada
CityEdmonton
Period4/10/217/10/21

Fingerprint

Dive into the research topics of 'Protecting software-defined enterprise networks from packet injection attacks'. Together they form a unique fingerprint.

Cite this