Authors:Talha Naqash M. Hassan Tanveer Sajjad Hussain Shah Muhammad Salman Abstract:Software-Defined Network (SDN) consists of two layers; control and data layer that makes SDN more flexible and scalable. Open Flow protocol used for SDN, which makes it simpler and easy to optimize. In this paper, we developed a SABIDS for the Python-based controller (RYU) which detects the incoming traffic by taking their flow statistics, detects the malware flow statistics (by using the pattern match technique), and identifies the malicious flow. Also, it identifies the source IP of the incoming malicious traffic, and that specific IP can be blocked easily using the blacklist technique. This scheme enables the SDN Controller to learn about malicious traffic and avoid the potential losses like system failure or risk of being an attack.
Open Zoom