DDOS attack detection and mitigation method for industrial SDN network
US11483341B2 · kind B2 · utility
Assignee
Inventors
Key dates
| Filing date | Mar 6, 2018 |
| Grant date | Oct 25, 2022 |
| Priority date | — |
| Expiry date | Feb 20, 2039 |
Classification
- Technology area (CPC Y)Emerging Cross-Sectional Technologies
- CPC primaryY02D30/00
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
The present invention relates to a DDoS attack detection and mitigation method for an industrial SDN network, and belongs to the field of network security. According to the method, by means of the cooperation between an east-west interface of an SDN controller in an industrial backhaul network and a system manager of an industrial access network, in conjunction with the features of the industrial backhaul network and an industrial access network data packet, a flow entry matching field of an OpenFlow switch is extended, and a flow table 0 is set to be a “flow table dedicated to DDoS attack mitigation” for defending against an attacking data flow in a timely manner. By using the SDN controller of an industrial backhaul network and a DDoS attack detection and mitigation system, an attacking data flow is identified and a DDoS attack source is found, and the policy of mitigating a DDoS attack is implemented by means of scheduling a system manager of the industrial access network. According to the present invention, the normal traffic of an industrial backhaul network and an industrial access network is ensured, and a threat posed by a DDoS attack to the security of an industrial networ…
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.