基于核函数的软件定义网络DDoS实时安全系统 postprint

Abstract: Aiming at the problems of log detection accuracy and long delay of DDoS(Distributed Denial-of-Service) attacks in the software definition networks, This paper proposed a real time DDoS security system of software definition networks based on kernel functions. Firstly, it abstracted the packet header fields of software definition networks periodly, and formed the abstracted information as matrices; then, it adopted the Mahalanobis distance to analyze the significant change of continuous feature vectors, and it designed two kernel functions to evaluate the behavior flows of attacks; lastly, the attackers are identified by the spectral clustering technique and the covariance statistical information. Experimental results based on the real software definition networks show that the proposed security system realizes a good detection accuracy, and performs a reasonable processing time.