基于核函数的软件定义网络 DDoS 实时安全系统.

Aiming at the problems oflog detection accuracy and long delay of DDoS (distributed denial-of-service) attacks in the software definition networks, this paper proposed a real-time DDoS security system of software definition networks based on kernel functions. Firstly, it abstracted the packet header fields of software definition networks periodly, and formed the abstracted information as matrices; then, it adopted the Mahalanobis distance to analyze the significant change of continuous feature vectors, and it designed two kernel functions to evaluate the behavior flows of attacks; lastly, it identified the attackers by the spectral clustering technique and the covariance statistical information. Experimental results based on the real software definition networks show that the proposed security system realizes a good detection accuracy, and performs a reasonable processing time. [ABSTRACT FROM AUTHOR]