DoS and DDoS attacks in Software Defined Networks: A survey of existing solutions and research challenges

Toward an optimal solution against Denial of Service attacks in Software Defined Networks

Software-defined networking (SDN) is becoming more and more popular due to its key features like scalability, flexibility, and monitoring. SDN simplifies the network management and enables innovations in the network architecture and protocols. However, this flexible architecture also makes it vulnerable to different types of attacks, such as flooding, spoofing, and denial-of-service (DoS). Among these attacks, the DoS attack has the most severe impact as it can overwhelm the major components of SDN to degrade its performance. In this paper, we propose a simple and lightweight detection and mitigation system (DAISY) to secure SDN from DoS attacks by blocking malicious traffic from the attacker, after analyzing the collected statistics. The proposed system specifically blocks malicious traffic rather than blocking the whole port or a host. In addition, it unblocks a port or a host when there is no more malicious traffic originating from it. We evaluate our proposed system by comparing it with other approaches, and the simulation results show increased performance of SDN with DAISY in terms of CPU usage, response time, control channel bandwidth, packet delivery ratio, and flow requests sent to the controller.

DAISY: A Detection and Mitigation System Against Denial-of-Service Attacks in Software-Defined Networks

Atualmente, a criptografia e utilizada como um padrao para proteger o trafego de dados pela Internet. Por exemplo, em uma rede definida por software, e possivel proteger o canal de comunicacao do plano de controle utilizando criptografia. Entretanto, essa funcionalidade pode aumentar o uso de recursos e consequentemente comprometer o desempenho de switches, principalmente ao considerar switches de baixo custo. 
Este trabalho visa a possibilidade de balancear seguranca e desempenho na comunicacao envolvendo controlador-switch em redes definidas por software. Para viabilizar essa possibilidade, a comunicacao e gerenciada levando em consideracao as mensagens conhecidas da API do Southbound para realizar um ataque. As mensagens que sao consideradas sensiveis sao gerenciadas com foco em seguranca e as mensagens atualmente consideradas inofensivas sao gerenciadas com foco em desempenho. Os resultados obtidos mostram que e possivel gerenciar com sucesso o balanceamento de seguranca e desempenho.

/pdf/balanceamento-entre-seguranca-e-desempenho-na-comunicacao-19mwc00w59.pdf

Balanceamento entre segurança e desempenho na comunicação entre os planos de controle e dados em redes definidas por software

Innovative Research and Applications in Next-Generation High Performance Computing

Software Defined Network (SDN), a very new idea in networking domain, promises to dramatically simplify network management and enable innovation through network programmability. In spite of significant benefits, this emerging architecture suffers from several security challenges which make it vulnerable to different attacks like denial of service attack, man-in-middle attack etc. In this paper, we have discussed about the impact of denial of service attack on SDN environment and several existing solutions to defend it. Finally we have given a new proposal for detecting denial of service attack in SDN environment.

Denial of service attack in software defined network

Software transactional memory (STM) has evolved as an alternative for traditional lock-based process synchronization. It promises greater degree of concurrency and faster execution. This paper proposes a simple, lightweight, and yet efficient implementation of OFTM. The major contribution of the paper is in proposing a new STM algorithm that uses simple data structure. This does not require any contention manager toward ensuring progress condition, atomicity, and serializability of transactions besides maintaining data consistency. Experimental simulation on random data set establishes the merit of the proposed solution.

A Lightweight Implementation of Obstruction-Free Software Transactional Memory

Emerging variants of SARS-CoV-2 still threaten the effectiveness of currently deployed vaccines, and antivirals can prove to be an effective therapeutic option for attenuating it. The papain-like protease (PLpro) is an attractive target due to its sequence conservation and critical role in the replication and pathogenesis of SARS-CoV-2. PLpro also plays very important role in modulation of host immune responses by deubiquitinating (DUBs) or deISGylating host proteins. Thus, targeting PLpro serves as a two-pronged approach to abate SARS-CoV-2. Due to its structural and functional similarities with the host DUB enzymes, an in-house library of DUB inhibitors was constituted in this study. Five promising compounds exhibiting high binding affinities with the substrate binding site of PLpro were identified from a library of 81 compounds with in silico screening, docking, and simulation studies. Interestingly, lithocholic acid, linagliptin, teneligliptin, and flupenthixol significantly inhibited the proteolytic activity of PLpro. Each of these compounds abrogated in vitro replication of SARS-CoV-2 with EC50 values in the range of 5-21 μM. In addition, crystal structure of SARS-CoV-2 PLpro and its complex with inhibitors have been determined that revealed their inhibitory mechanism. The findings of this study provide the proof-of-principle that the DUB inhibitors hold high potential as a new class of therapeutics against SARS-CoV-2. Additionally, this is the first study that has opened a new avenue towards not only targeting PLpro active site but also simultaneously directing towards restoration of antiviral immune response of the host for deterring SARS-CoV-2. Graphical abstract

https://www.biorxiv.org/content/biorxiv/early/2023/02/25/2022.11.11.516107.full.pdf

Crystal structure and activity profiling of deubiquitinating inhibitors-bound to SARS-CoV-2 papain like protease revealed new allosteric sites for antiviral therapies

Content Management System (CMS) is one of the recent upcoming concepts due to its efficient and explicit use in the real world applications. The demand for growth in its diversity has been documented by many researchers. Due to the limitation of traditional database management system (DBMS), which enforces limits on the type of data items need to be stored, CMS becomes the cost-effective alternative in the scope of information management. In this ever increasing data scenario we need a framework for managing and publishing all types of data with appropriate data analytics and natural language processing. Nowadays the information, especially in the Internet, consists of structured, semi-structured and unstructured data. Therefore it is unwise to think only about the use of DBMS, rather its alternative framework must be used, keeping the objectives same. The main reason for proposing a new architectural model for a content management system is that there are several important characteristics that CMSs should have to provide opportunity to specific optimizations [1]. Our “Next Generation CMS model” includes functionalities like multi-language, copyright, multichannel publishing, natural language processing, garbage collection management which are not included in the traditional ones.

Architectural model for next generation content management system

• Land cover influences soil carbon even within short distances within the study site. • Seasonal variation in soil C differs from land cover to land cover. • Our findings reveal that the type of land cover influenced the temporal variation as native forests resisted fluctuation while regions with scanty or no canopy cover are more susceptible to loss of soil C with change in seasons. • Small-scale studies, such as the present one, may go a long way in helping to achieve efficient global land management practices. Land cover plays a significant role in soil carbon flux and this study aims to assess the variation in Soil Organic Carbon (SOC) within a relatively small area of 1 km 2 in Tezpur University campus in Assam, India. Spatial variation of SOC has been analyzed in the surface layers (0–10 cm) under five different land cover types - artificial forests, gardens and parks, grasslands, natural forests and woodlands, using Walkley-Black's wet oxidation method. The results showed that SOC ranged from 1.08% to 1.58%, where natural forests have the highest SOC and lowest in gardens. The SOC variation under different land covers was found to be significant ( p < 0.05). The average organic carbon stock for the study area was found to be 20.65 t C ha −1 . Seasonal SOC variation analysed as part of this study for post monsoon and winter seasons showed overall decrease in SOC ( p > 0.05). This small scale study shows considerable variation in SOC which can be directly attributed to the landcover type. The results from this baseline study may be utilised for effective land management planning which, in turn, can help reduce the university's carbon footprint. Each small strategy may prove as crucial contributor to the alleviation of climate change impacts. 

Ankita Saha

Papers

Denial of service attack in software defined network

A Lightweight Implementation of Obstruction-Free Software Transactional Memory

Crystal structure and activity profiling of deubiquitinating inhibitors-bound to SARS-CoV-2 papain like protease revealed new allosteric sites for antiviral therapies

Architectural model for next generation content management system

Variation of soil organic carbon in a university campus in temperate North-eastern India