Abstract

Distributed Denial of Service (DDoS) attacks continue to pose a significant threat to network infrastructure and services. Software Defined Networks (SDNs) have emerged as a promising technology to enhance network flexibility and adaptability. This paper explores various DDoS attack mitigation approaches within the context of SDNs, with a focus on their effectiveness, limitations, and key considerations.

The study begins by providing an overview of DDoS attacks and their evolving complexities. It then delves into the fundamental principles of SDNs and their potential advantages in combating DDoS attacks. Various mitigation techniques are analyzed, including rate limiting, flow diversion, and traffic anomaly detection, and their applicability in an SDN environment is discussed

Our research takes a multi-dimensional approach, evaluating the performance of mitigation methods in terms of attack detection, response time, false positives, and the impact on legitimate traffic. Additionally, the study considers the adaptability of these methods to emerging threats, such as IoT-based attacks and zero-day vulnerabilities.

Furthermore, we discuss the trade-offs and challenges associated with the implementation of these methods, including their impact on user experience, resource utilization, and operational overhead.

The results of this comparative analysis aim to provide valuable insights for organizations and network security professionals in selecting appropriate DDoS mitigation strategies. This paper provides insights into the evolving landscape of DDoS attack mitigation in Software Defined Networks, emphasizing the need for a proactive and dynamic defence strategy to protect network infrastructure and ensure uninterrupted service availability. This study serves as a valuable resource for mitigating the risks and consequences of DDoS attacks in today's interconnected and digitally-dependent world.