Mitigating DDoS Attacks using SDN-based Network Security Measures

Abstract

Distributed denial-of-service attacks represent a significant threat to the delivery and integrity of network services. The attacks inundate a specific community or tool with excessive internet traffic, making it impossible for legitimate users to access. Given their intricate and ever-changing characteristics, conventional community safety functions, firewalls, and intrusion detection structures cannot effectively mitigate these threats. Consequently, it may be necessary to implement inexperienced and flexible solutions to counter DDoS attacks. A practical approach is the implementation of software-defined networking solutions for network security. Software-defined networking (SDN) prioritizes the ability of a community to have control over and efficiently manage the flow of data, as well as the capacity to manipulate centrally and program network devices. By utilizing SDN, community safety capabilities can dynamically alter the network’s structure, routing, and location of net traffic to mitigate DDoS attacks. The feature allows for redirecting malicious internet traffic to a designated scrubbing centre, where these harmful websites can be filtered out before they reach the intended network or device.