A Strategy for Detection and Mitigation of DDoS Attacks in Software-Defined Networks

Distributed Denial of Service (DDoS) attacks remain a severe threat to the security and availability of modern networks. Software-Defined Networks (SDNs) offer enhanced flexibility and programmability but are also vulnerable to such attacks due to their centralized control plane. This paper proposes a novel strategy for detecting and mitigating DDoS attacks in SDNs. The strategy combines real-time traffic analysis, anomaly detection, and dynamic flow control techniques to identify and respond to potential DDoS threats. Through experimental evaluation on an SDN testbed, we demonstrate that our approach significantly reduces the impact of DDoS attacks, maintains service availability, and minimizes network disruption. Keywords: DDoS attacks, Software-Defined Networks (SDN), anomaly detection, traffic monitoring, flow control, mitigation.