NDLI: Protecting DNS services from IP spoofing: SDN collaborative authentication approach

Please wait, while we are loading the content...

Constructing Multiple Steiner Trees for Software-Defined Networking Multicast

Detecting Network Topology and Packet Trajectory with SDN-enabled FPGA Platform

An Easy Defense Mechanism Against Botnet-based DDoS Flooding Attack Originated in SDN Environment Using sFlow

Performance Evaluation of TCP Congestion Control Algorithms in Data Center Networks

Energy-Efficient Localization and Tracking on Smartphones: Design Principle and Solutions

RBAS: A Real-Time User Behavior Analysis System for Internet TV in Cloud Computing

Optimized Root Selection Algorithm for Many-to-Many Communications in ICN

Spray and Hop Distance Routing Protocol in Multiple-island DTN Scenarios

Directed-Propagation Link-State Routing Protocol for Information-Centric Networks

Establish the Intrinsic Binding in Naming Space for Future Internet Using Combined Public Key

Verification of a Multi-Domain Authentication and Authorization Infrastructure Yamata-no-Orochi

Detecting Compromised Email Accounts from the Perspective of Graph Topology

Protecting DNS services from IP spoofing: SDN collaborative authentication approach

Flo-v: Low Overhead Network Monitoring Framework in Virtualized Software Defined Networks

Implementing a Dynamically Reconfigurable Wireless Mesh Network Testbed for Multi-Faceted QoS Support

Efficient Matching Algorithm for Content-based Publish/Subscribe Systems with Compound Predicates

Enabling Fast Recovery from Unanticipated Data Access Failure in Named Data Networking

Quantifying the Flattening of Internet Topology

Deployment and Evaluation of Software-Defined Inter-Connections for Multi-domain Federated SDN-Cloud

Protecting DNS services from IP spoofing: SDN collaborative authentication approach

Content Provider	ACM Digital Library
Author	Okamura, Koji Sahri, Nm
Abstract	As DNS packet are mostly UDP-based, make it as a perfect tool for hackers to launch a well-known type of distributed denial of service (DDoS). The purpose of this attack is to saturate the DNS server availability and resources. This type of attack usually utilizes a large number of botnet and perform spoofing on the IP address of the targeted victim. We take a different approach for IP spoofing detection and mitigation strategies to protect the DNS server by utilizing Software Defined Networking (SDN). In this paper, we present CAuth, a novel mechanism that autonomously block the spoofing query packet while authenticate the legitimate query. By manipulating Openflow control message, we design a collaborative approach between client and server network. Whenever a server controller receives query packet, it will send an authentication packet back to the client network and later the client controller also replies via authentication packet back to the server controller. The server controller will only forward the query to the DNS server if it receives the replied authentication packet from the client. From the evaluation, CAuth instantly manage to block spoofing query packet while authenticate the legitimate query as soon as the mechanism started. Most notably, our mechanism designed with no changes in existing DNS application and Openflow protocol.
Starting Page	83
Ending Page	89
Page Count	7
File Format	PDF
ISBN	9781450341813
DOI	10.1145/2935663.2935666
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2016-06-15
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Spoofing detection Dns flooding attack Openflow Authentication Network security Sdn
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in