Block Link Flooding Algorithm for TCP SYN Flooding Attack

Abstract

In the recent years, SDN is an emerging architecture that is ideal for today’s application. It is dynamic and also cost-effective in order to deal with the networking application. It consists of two planes, namely data plane and control plane that are separated from each other. Open flow is the default protocol that has been used in SDN, and it works on the basis of rules framed by the control plane. It may lead to a denial-of-service attack called control plane saturation attack. To overcome this attack, Avant-Guard technique [2] was introduced which overcomes the control plane saturation attack but it leads to another attack called Buffer saturation attack due to SYN flooding. Then, Line Switch technique was introduced with proxy to blacklist the spoofed IP address in order to block the node. But it was not a permanent solution to the problem. Therefore, we proposed a Block Link Flooding (BLF) algorithm which uses Legitimate User Table (LUT) to provide an effective solution. From the experimental results, our Block Link Flooding algorithm is able to identify and block the spoofed IPs and discards the link to the server. This technique is efficient for saving energy up to 33%.