PROVIDING SECURITY AGAINST IP CROWDSOURCED SPOOFING ATTACKS ON CLOUD USING TOPOGUARD ALGORITHM

Abstract

In this paper, we discussed the brief overview of SDN security survey, we specifically investigate the potential lt heats of man-in-the-middle attacks on the Open Flow control channel, we also describe a feasible attack model in the open flow channel, and then we implement attack demonstrations to show the severe consequences of such attacks. Additionally, we propose a lightweight countermeasure using Bloom filters. We implement a prototype for this method to monitor stealthy packet modifications. The successful attacks can effectively poison the Virtual Machine information, a fundamental building block for core SDN components and topology-aware SDN applications. With the poisoned network visibility, the upper-layer Open Flow controller services/apps may be totally misled, leading to serious hijacking, denial of service or man-in-the-middle attacks. The result of our evaluation shows that our Bloom filter monitoring system is efficient and consumes few resources