Collaborative Defense Method Against DDoS Attacks on SDN-Architected Cloud Servers
摘要
Addresses excessive control layer load in traditional DDoS detection/defense in cloud SDN. It proposes an efficient collaborative defense using P4 to offload traffic processing to the data layer, reducing control layer overhead. The DTSOM algorithm detects abnormal traffic, sends stats to the control layer. The control layer packages attack characteristics, formulates rules, and the data layer broadcasts them for collaborative defense. Results show reduced controller overhead, improved detection, and lower CPU utilization, enhancing resilience against similar DDoS attacks.