{"id":"https://openalex.org/W3196634043","doi":"https://doi.org/10.1109/tnet.2021.3105187","title":"SDNShield: NFV-Based Defense Framework Against DDoS Attacks on SDN Control Plane","display_name":"SDNShield: NFV-Based Defense Framework Against DDoS Attacks on SDN Control Plane","publication_year":2021,"publication_date":"2021-08-27","ids":{"openalex":"https://openalex.org/W3196634043","doi":"https://doi.org/10.1109/tnet.2021.3105187","mag":"3196634043"},"language":"en","primary_location":{"id":"doi:10.1109/tnet.2021.3105187","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnet.2021.3105187","pdf_url":null,"source":{"id":"https://openalex.org/S62238642","display_name":"IEEE/ACM Transactions on Networking","issn_l":"1063-6692","issn":["1063-6692","1558-2566"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE/ACM Transactions on Networking","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5035556593","display_name":"Kuan-Yin Chen","orcid":"https://orcid.org/0000-0002-5036-4182"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kuan-Yin Chen","raw_affiliation_strings":["Department of Electrical and Computer Engineering, NYU Tandon School of Engineering, Brooklyn, NY, USA"],"raw_orcid":"https://orcid.org/0000-0002-5036-4182","affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, NYU Tandon School of Engineering, Brooklyn, NY, USA","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100358497","display_name":"Sen Liu","orcid":"https://orcid.org/0000-0003-2230-7671"},"institutions":[{"id":"https://openalex.org/I24943067","display_name":"Fudan University","ror":"https://ror.org/013q1eq08","country_code":"CN","type":"education","lineage":["https://openalex.org/I24943067"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Sen Liu","raw_affiliation_strings":["School of Computer Science, Fudan University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0003-2230-7671","affiliations":[{"raw_affiliation_string":"School of Computer Science, Fudan University, Shanghai, China","institution_ids":["https://openalex.org/I24943067"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5014490044","display_name":"Yang Xu","orcid":"https://orcid.org/0000-0002-0958-8547"},"institutions":[{"id":"https://openalex.org/I24943067","display_name":"Fudan University","ror":"https://ror.org/013q1eq08","country_code":"CN","type":"education","lineage":["https://openalex.org/I24943067"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yang Xu","raw_affiliation_strings":["School of Computer Science, Fudan University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0002-0958-8547","affiliations":[{"raw_affiliation_string":"School of Computer Science, Fudan University, Shanghai, China","institution_ids":["https://openalex.org/I24943067"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042906708","display_name":"Ishant Kumar Siddhrau","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ishant Kumar Siddhrau","raw_affiliation_strings":["Department of Electrical and Computer Engineering, NYU Tandon School of Engineering, Brooklyn, NY, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, NYU Tandon School of Engineering, Brooklyn, NY, USA","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101631211","display_name":"Siyu Zhou","orcid":"https://orcid.org/0000-0002-6068-3339"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Siyu Zhou","raw_affiliation_strings":["Department of Electrical and Computer Engineering, NYU Tandon School of Engineering, Brooklyn, NY, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, NYU Tandon School of Engineering, Brooklyn, NY, USA","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026436576","display_name":"Zehua Guo","orcid":"https://orcid.org/0000-0001-7314-410X"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zehua Guo","raw_affiliation_strings":["Beijing Institute of Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-7314-410X","affiliations":[{"raw_affiliation_string":"Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5071272821","display_name":"H. Jonathan Chao","orcid":"https://orcid.org/0000-0002-3554-0272"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"H. Jonathan Chao","raw_affiliation_strings":["Department of Electrical and Computer Engineering, NYU Tandon School of Engineering, Brooklyn, NY, USA"],"raw_orcid":"https://orcid.org/0000-0002-3554-0272","affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, NYU Tandon School of Engineering, Brooklyn, NY, USA","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":2045,"currency":"USD","value_usd":2045},"apc_paid":null,"fwci":3.4217,"has_fulltext":false,"cited_by_count":37,"citation_normalized_percentile":{"value":0.92232651,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":99},"biblio":{"volume":"30","issue":"1","first_page":"1","last_page":"17"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9966999888420105,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8493753671646118},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.8434029817581177},{"id":"https://openalex.org/keywords/forwarding-plane","display_name":"Forwarding plane","score":0.6543399095535278},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.6273514628410339},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.6252097487449646},{"id":"https://openalex.org/keywords/software-defined-networking","display_name":"Software-defined networking","score":0.6214926838874817},{"id":"https://openalex.org/keywords/trinoo","display_name":"Trinoo","score":0.5867446064949036},{"id":"https://openalex.org/keywords/application-layer-ddos-attack","display_name":"Application layer DDoS attack","score":0.5189637541770935},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4666723310947418},{"id":"https://openalex.org/keywords/resilience","display_name":"Resilience (materials science)","score":0.4270837903022766},{"id":"https://openalex.org/keywords/quality-of-service","display_name":"Quality of service","score":0.4202556908130646},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.34367507696151733},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.12561288475990295},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.10235539078712463}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8493753671646118},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.8434029817581177},{"id":"https://openalex.org/C10597312","wikidata":"https://www.wikidata.org/wiki/Q5473302","display_name":"Forwarding plane","level":3,"score":0.6543399095535278},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.6273514628410339},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.6252097487449646},{"id":"https://openalex.org/C77270119","wikidata":"https://www.wikidata.org/wiki/Q1655198","display_name":"Software-defined networking","level":2,"score":0.6214926838874817},{"id":"https://openalex.org/C43639116","wikidata":"https://www.wikidata.org/wiki/Q7843050","display_name":"Trinoo","level":5,"score":0.5867446064949036},{"id":"https://openalex.org/C120865594","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Application layer DDoS attack","level":4,"score":0.5189637541770935},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4666723310947418},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.4270837903022766},{"id":"https://openalex.org/C5119721","wikidata":"https://www.wikidata.org/wiki/Q220501","display_name":"Quality of service","level":2,"score":0.4202556908130646},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.34367507696151733},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.12561288475990295},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.10235539078712463},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C97355855","wikidata":"https://www.wikidata.org/wiki/Q11473","display_name":"Thermodynamics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tnet.2021.3105187","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnet.2021.3105187","pdf_url":null,"source":{"id":"https://openalex.org/S62238642","display_name":"IEEE/ACM Transactions on Networking","issn_l":"1063-6692","issn":["1063-6692","1558-2566"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE/ACM Transactions on Networking","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure","score":0.550000011920929}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":41,"referenced_works":["https://openalex.org/W1504453705","https://openalex.org/W1531996150","https://openalex.org/W1602783418","https://openalex.org/W1637524539","https://openalex.org/W1867219652","https://openalex.org/W1969299296","https://openalex.org/W1988774297","https://openalex.org/W2001474264","https://openalex.org/W2021962600","https://openalex.org/W2034677282","https://openalex.org/W2039025009","https://openalex.org/W2040854317","https://openalex.org/W2067551786","https://openalex.org/W2067605982","https://openalex.org/W2069841875","https://openalex.org/W2106800420","https://openalex.org/W2123583026","https://openalex.org/W2131244115","https://openalex.org/W2134757353","https://openalex.org/W2137838113","https://openalex.org/W2144127235","https://openalex.org/W2147118406","https://openalex.org/W2149494522","https://openalex.org/W2150213544","https://openalex.org/W2160824842","https://openalex.org/W2162267463","https://openalex.org/W2520182750","https://openalex.org/W2536367856","https://openalex.org/W2557958840","https://openalex.org/W2589825670","https://openalex.org/W2746655652","https://openalex.org/W2895348445","https://openalex.org/W2982532604","https://openalex.org/W3088401433","https://openalex.org/W4230933997","https://openalex.org/W6602452583","https://openalex.org/W6636558983","https://openalex.org/W6637643684","https://openalex.org/W6637995443","https://openalex.org/W6640483082","https://openalex.org/W6679589109"],"related_works":["https://openalex.org/W2783466926","https://openalex.org/W4286539397","https://openalex.org/W1968168724","https://openalex.org/W2204131204","https://openalex.org/W2921433547","https://openalex.org/W4385302085","https://openalex.org/W2754163055","https://openalex.org/W4322008378","https://openalex.org/W2383770723","https://openalex.org/W2942864670"],"abstract_inverted_index":{"Software-defined":[0],"networking":[1],"(SDN)":[2],"is":[3,16],"increasingly":[4],"popular":[5],"in":[6],"today\u2019s":[7],"information":[8],"technology":[9],"industry,":[10],"but":[11],"existing":[12],"SDN":[13,27,45,60,90],"control":[14,28,46,91,98],"plane":[15],"insufficiently":[17],"scalable":[18],"to":[19,37,122],"support":[20],"on-demand,":[21],"high-frequency":[22],"flow":[23],"requests.":[24],"Weaknesses":[25],"along":[26],"paths":[29],"can":[30,157],"be":[31],"exploited":[32],"by":[33,56],"malicious":[34],"third":[35,130],"parties":[36],"launch":[38],"distributed":[39],"denial-of-service":[40],"(DDoS)":[41],"attacks":[42,88],"against":[43,85,161],"the":[44,54,59,64,134,143,171],"plane.":[47,92],"Recently":[48],"proposed":[49],"solutions":[50],"only":[51],"partially":[52],"solve":[53],"problem,":[55],"protecting":[57],"either":[58],"network":[61,75],"edges":[62],"or":[63],"centralized":[65],"controller.":[66],"We":[67],"propose":[68],"SDNShield,":[69],"a":[70,95],"solution":[71],"based":[72],"on":[73,89],"emerging":[74],"function":[76],"virtualization":[77],"(NFV)":[78],"technologies,":[79],"which":[80],"enforces":[81],"more":[82],"comprehensive":[83],"defense":[84],"potential":[86],"DDoS":[87],"SDNShield":[93,156],"incorporates":[94],"three-stage":[96],"overload":[97],"scheme.":[99],"The":[100,113,129],"first":[101,144],"stage":[102,115,131],"statistically":[103],"identifies":[104],"legitimate":[105,136],"flows":[106,125,137],"with":[107],"low":[108],"complexity":[109],"and":[110,149,164],"performance":[111],"overhead.":[112],"second":[114],"further":[116],"performs":[117],"in-depth":[118],"TCP":[119],"handshake":[120],"verification":[121],"ensure":[123],"good":[124,166],"are":[126,139],"eventually":[127],"served.":[128],"intellectually":[132],"salvages":[133],"misclassified":[135],"that":[138,155],"falsely":[140],"dropped":[141],"from":[142],"two":[145],"stages.":[146],"Prototype":[147],"tests":[148],"real":[150],"data-driven":[151],"simulation":[152],"results":[153],"show":[154],"achieve":[158],"high":[159],"resilience":[160],"brute-force":[162],"attacks,":[163],"maintain":[165],"flow-level":[167],"service":[168],"quality":[169],"at":[170],"same":[172],"time.":[173]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":8},{"year":2024,"cited_by_count":8},{"year":2023,"cited_by_count":12},{"year":2022,"cited_by_count":5}],"updated_date":"2026-08-28T12:50:07.497085","created_date":"2025-10-10T00:00:00"}