DNS Amplification Attacks Defense System for Software-Defined Networks 


Vol. 43,  No. 11, pp. 1959-1966, Nov.  2018
10.7840/kics.2018.43.11.1959


PDF
  Abstract

The public DNS (Domain Name Service) has been used more and more because of some benefits, such as the quick response time by using a large amount of computing resources, and the bypass of web site blocking according to national policies or geographic reasons. However, the public DNS servers are open to the public, which makes them accessible to anyone and even vulnerable to various attacks, especially the DNS amplification attack which is the most well-known attack. In this attack, an attacker steals a lot of IP addresses via a controllable botnet, and sends DNS queries that seems to be sent by the stolen IP addresses to public DNS servers. Because a victim receives and deals with a number of DNS response messages from the public DNS servers, it can be exhausted, which reaches Distributed Denial of Service Attack (DDoS). This paper proposes a DNS amplification attack defense system by using the features of Software Defined Networks, and shows how efficiently it defends the attacks.

  Statistics
Cumulative Counts from November, 2022
Multiple requests among the same browser session are counted as one view. If you mouse over a chart, the values of data points will be shown.


  Cite this article

[IEEE Style]

D. Choi, M. Park, Y. Joo, "DNS Amplification Attacks Defense System for Software-Defined Networks," The Journal of Korean Institute of Communications and Information Sciences, vol. 43, no. 11, pp. 1959-1966, 2018. DOI: 10.7840/kics.2018.43.11.1959.

[ACM Style]

Dong-ho Choi, Min-ho Park, and Yang-ick Joo. 2018. DNS Amplification Attacks Defense System for Software-Defined Networks. The Journal of Korean Institute of Communications and Information Sciences, 43, 11, (2018), 1959-1966. DOI: 10.7840/kics.2018.43.11.1959.

[KICS Style]

Dong-ho Choi, Min-ho Park, Yang-ick Joo, "DNS Amplification Attacks Defense System for Software-Defined Networks," The Journal of Korean Institute of Communications and Information Sciences, vol. 43, no. 11, pp. 1959-1966, 11. 2018. (https://doi.org/10.7840/kics.2018.43.11.1959)