Data Analysis of Network Parameters for Secure Implementations of SDN-Based Firewall  

作　　者：Rizwan Iqbal Rashid Hussain Sheeraz Arif Nadia Mustaqim Ansari Tayyab Ahmed Shaikh 

机构地区：[1]Department of Telecommunication Engineering,Dawood University of Engineering&Technology,Karachi,Pakistan [2]Faculty of Engineering Sciences and Technology,Hamdard University,Karachi,Pakistan [3]Faculty of Information Technology,Salim Habib University,Karachi,Pakistan [4]Department of Electronic Engineering,Dawood University of Engineering&Technology,Karachi,Pakistan

出　　处：《Computers, Materials & Continua》2023年第11期1575-1598,共24页计算机、材料和连续体（英文）

基　　金：supported in part by the Research Committee of Hamdard University Karachi Pakistan(www.hamdard.edu.pk);the Office of Research Innovation&Commercialization(ORIC)of Dawood University of Engineering&Technology Karachi Pakistan(www.duet.edu.pk).

摘　　要：Software-Defined Networking(SDN)is a new network technology that uses programming to complement the data plane with a control plane.To enable safe connection,however,numerous security challenges must be addressed.Flooding attacks have been one of the most prominent risks on the internet for decades,and they are now becoming challenging difficulties in SDN networks.To solve these challenges,we proposed a unique firewall application built on multiple levels of packet filtering to provide a flooding attack prevention system and a layer-based packet detection system.This study offers a systematic strategy for wrapping up the examination of SDN operations.The Mininet simulator examines the effectiveness of SDN-based firewalls at various network tiers.The fundamental network characteristics that specify how SDN should operate.The three main analytical measures of the network are jitter,response time,and throughput.During regular operations,their behavior evaluates in the standard SDN conditions of Transmission Control Protocol(TCP)flooding and User Datagram Protocol(UDP)flooding with no SDN occurrences.Low Orbit Ion Cannon(LOIC)is applied to launch attacks on the transmission by the allocated server.Wireshark and MATLAB are used for the behavioral study to determine how sensitive the parameters are used in the SDN network and monitor the fluctuations of those parameters for different simulated scenarios.

关 键 词：Software defined networking FIREWALL POX controller open v switch Mininet OpenFlow 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]