Open Access

ARTICLE

Early DDoS Detection and Prevention with Traced-Back Blocking in SDN Environment

Sriramulu Bojjagani¹, D. R. Denslin Brabin^2,*, K. Saravanan²

1 Department of Computer Science and Engineering, School of Engineering and Applied Sciences (SEAS), SRM University-AP, Amaravati, Andhra Pradesh, 522503, India
2 Department of Computer Science and Engineering, Madanapalle Institute of Technology & Science, Chittoor, Andhra Pradesh, 517325, India

* Corresponding Author: D. R. Denslin Brabin. Email:

Intelligent Automation & Soft Computing 2022, 34(2), 805-819. https://doi.org/10.32604/iasc.2022.023771

Received 21 September 2021; Accepted 12 January 2022; Issue published 03 May 2022

Abstract

The flow of information is a valuable asset for every company and its consumers, and Distributed Denial-of-Service (DDoS) assaults pose a substantial danger to this flow. If we do not secure security, hackers may steal information flowing across a network, posing a danger to a business and society. As a result, the most effective ways are necessary to deal with the dangers. A DDoS attack is a well-known network infrastructure assault that prevents servers from servicing genuine customers. It is necessary to identify and block a DDoS assault before it reaches the server in order to avoid being refused services. This prompted us to develop a unique way for detecting and preventing DDoS attacks at the router level in a Software-Defined Network (SDN) environment. This study demonstrates how the method efficiently integrates the first and second signatures in SDN infrastructure domains to identify and prevent DDoS attacks. It also proposes an Early DDoS Detection and Prevention (EDDDeP)-based approach for detecting and blocking malicious traffic in an SDN context. This article covers the EDDDeP, which assists in identifying and preventing DDoS in SDN to prevent malicious traffic from reaching its intended target. As a consequence, the DDoS assault is ultimately contained inside the environment, eliminating superfluous traffic in the DDoS network architecture. This method offers a unique technique to detect a DDoS assault and notify nearby neighbours in order to avert server damage.

---

Keywords

---