Naïve Bayes Anomaly Detection System Design On Openflow Network

Edbertus, Nehemia and Hutagalung, Samuel and Nugroho I., Hargyo Tri (2020) Naïve Bayes Anomaly Detection System Design On Openflow Network. IJNMT (International Journal of New Media Technology), 6 (2). pp. 64-67. ISSN 2355-0082

Full text not available from this repository.

Abstract

One of the generally launched attacks is Distributed Denial of Service that renders its target unable to provide its service. Gaussian Naïve Bayes Classifier is one out of several techniques used in detecting those attacks by classifying network traffic in a window as an attack or a normal traffic based on normal distribution previously calculated from normal and attack traffic datasets. This research focuses on mitigating SYN Flood Type DDoS attacks on OpenFlow Network using Zodiac FX as a switch. The developed system utilizes OpenFlow Protocol to apply flow rule in switch’s flow table in order to detect and mitigate SYN Flood attacks in real-time. Applied mitigation procedure is to divert incoming packets into SYN Proxy so that only legitimate TCP packets are able to reach the server. The results show that the system has a bandwidth of up to 60Mbps under normal condition and 5,03Mbps under attack. Maximum malicious packets that could reach server before it is diverted to SYN Proxy is estimated to be 400 packets and not affected by the number of attacks, assuming that the flow rule sent by the controller are enacted immediately.

Item Type: Article
Subjects: 000 Computer Science, Information and General Works > 000 Computer Science, Knowledge and Systems > 006 Special Computer Methods
600 Technology (Applied Sciences) > 600 Technology > 607 Education, Research, Related Topics
Divisions: Faculty of Engineering & Informatics > Computer Engineering
Depositing User: Administrator UMN Library
Date Deposited: 02 Dec 2021 16:53
Last Modified: 09 May 2023 05:35
URI: https://kc.umn.ac.id/id/eprint/19333

Actions (login required)

View Item View Item