Software Define Network And Network Architecture

Denial-of-Service (DDoS) attack is the one in which the host’s network elements are flooded with high volume of fabricated attacking packets that originate from a large number of machines [12]. A successful attack allows the attacker to gain access to the host’s machine, allowing stealing of sensitive internal data and possibly cause disruption and denial of service (DoS) in some cases.

Network Based Virtualization is abstract storage of data applications from the host machine. This is well achieved through fibre channels connection between the machines and the servers running virtualization. The respective operating systems on the separate machines are not a factor to consider as they work independently. For it to achieve its expectations, the following services must be provided as below:

Network technology has come forward as an important component of IT infrastructure. Within the healthcare industry, the value of an efficient and stable network is immeasurable. The challenge in most industries, especially healthcare, is address security concerns and the rights of the patience. Patton-Fuller Community Hospital, located in the City of Kelsey, is a fully function hospital servicing the local area since 1975. Recently, The Chief Executive Officer (CEO) of Patton-Fuller Community Hospital expressed the desire to design an upgrade to the current network architecture. This design will include upgrades to hardware components and software components.

Fast forward 20 years and businesses and individuals are now hugely dependent on the Internet services they both offer and use, and the primary threat to the availability of those Internet is the distributed denial of service (DDoS) attack. DDoS attacks have evolved consistently over the last 20 years and have moved from being a curiosity, to a nuisance, and, now, to a serious business continuity risk.

Software defined networking is a new concept that redefined the current network device architecture and the way they behave. Due to the exponential growth of the Internet and services attached to this worldwide infrastructure, a number of issues have cropped up in modern day networks. This paper discusses a few of these limitations and how the software defined networking approach tries to alleviate them. OpenFlow, released in the year 2008, is a commercially viable implementation of this concept that is being well received by the networking industry at large. The paper also discusses the OpenFlow protocol, its implementation and the challenges facing its widespread acceptance

Demonstration of different types of DDoS attacks in a simulated virtual environment. We have chosen examples from each type of DDoS attack namely volume based attacks (UDP flood, TCP flood, ICMP flood), protocol based attacks (SYN flood) and application level attacks (HTTP). We used network stress testing tools like Low Orbit Ion Cannon (LOIC), Hping3 to simulate these DDos attacks from multiple virtual machines. In addition, we have portrayed ways to detect these attacks.

The purpose of this paper was to research denial-of service attacks and remedies that can be used as defense mechanisms to counter these attacks. A denial-of-service (DoS) attack is characterized by an explicit attempt by attackers to prevent legitimate users of a service from using that service (Malliga & Tamilarasi, 2009). The attack demonstrates using both known and potential attack mechanisms. Along with this classification important features of each attack category that in turn define the challenges involved in combating these threats will be discussed. The typical defense system is using only the currently known approaches. A denial-of-service attack deploys multiple machines to avert attacks. Then the service is denied by

Software-defined networking (SDN) is next evolving technology for the cloud computing as it provides a centralized system to manage the network. Scalable monitoring and dynamic reconfiguration requirements of the network makes SDN a perfect choice (Amna Riaz 2017).

With the explosion of cloud, virtualization, mobile devices and data center interconnectivity, the network attack surface has changed. There is no longer a simple perimeter than can be protected by a strong firewall. In today’s data-driven world, servers and data centers are no longer isolated. Threats are now entering the network behind the firewall and moving laterally (east/west), putting servers and data at greater risk.

Denial of Service also known as DoS is an attack that has been a part of cyber-attacks and cyber-terrorism for a long time. With the increase in the number of attacks on networks and websites, the need has come to implement better prevention systems to limit the number of attacks on the network. There are quite a few methods of countering these attacks that are already present but not a lot of networks have implemented them yet. This paper will talk about the different types of DoS attacks and their countermeasures. The paper will also talk about the advantages and

A recent increase of application layer Denial of Service attacks (DoS) on the Internet has swiftly shifted the focus of the research community from traditional network-based denial of service. Denial of Service (DoS) and the associated Distributed Denial of Service (DDoS) are simply an attempt by cyber-attackers to exhaust the resources available to a network, application or service so that genuine users cannot gain access. Cyber-attackers find application-layer most vulnerable and are able to device more creative methods of attack, are able to recruit other zombie systems referred to as botnets to amplify their attacks and the apparent difficulty of detecting and mitigating the attacks, all of these with little known solution. Application-layer DoS/DDoS attacks emulate the same request syntax and network level traffic characteristics as those of legitimate clients, thereby making the attacks much harder to be detected and countered. Moreover, such attacks usually target bottleneck resources such as disk bandwidth, database bandwidth, and CPU resources. This paper overviews DoS/DDoS concepts, the various types of denial of service attacks, application layer DoS/DDoS and mitigation techniques to curb the growing trend.

In this chapter, we review the related work in the following fields: 1) automatic service dependency detection, 2) attack prediction, and 3) application-level DDoS attack protection.

J. Rameshbabu et al. [1] described the major DDOS attacks that were launched in cloud environment in different years. So the task is to defeat the DDOS attack in cloud environment. A technique NEIF (Network Egress and ingress Filtering) is proposed to overcome the issue. This technique uses the ingress filters as well as the egress filters at the ISP’s edge router. That monitors the incoming and outgoing traffic in the network. As a result of implementing NEIF technique the Throughput is improved and the connection delay is reduced. The limitation of the technique is that the ingress filters fail if the attacker has access to the IP address of authorized system which will than allow every packet to pass through the network.

In the Semi-Automated DDoS attacks the DDoS “network” is made of a handler and an agent machine. There is automation present for the Recruit, Exploit and Infect phases. Through the communication between the handler and the agent, the attacker specifies the attack type, the onset, the duration and the victims ID. The

Ali et al.[16] in this paper author describes the types of DOS attack which include flood attack (intruder flood the server with a lot of requests), Ping of death (using a bug or security hole for attack), Teardrop (excessive size of packets), SYN attack, (filling SYN buffer and not receiving acknowledgement), smurf attack (searching for broadcast server), Snork attack (does not allow NT system to work with full performance). Technique of DDOS attack is master using slave computers to attack the victim. Methodology proposed is implement filters and used Dynamic windows scheme; message (m), distance (da), size (w). If da>w then forwarding first mode can be used and if da >= w then authentication first mode can be used. If authentication