DDoS Attack Detection in SDN-Based Instrumented Ad Hoc Networks

The physical characteristics of today's urban intersection structures and the traffic flows caused by unplanned road intersections lead to many negative effects such as time/cash loss, stress, increased fuel consumption, and more. For this reason, many studies are being conducted on traffic management systems, an application of smart cities, in both academic and commercial circles. In recent years, it has been observed that the VANET (Vehicular Ad Hoc Networks) architecture, which easily enables communication between vehicles or with devices on the side of the field, thus transporting relevant traffic data to the center, is frequently used in these studies. When Software Defined Networking emerged as a new technology, it brought many advantages such as high availability, scalability, and performance, but also introduced new security vulnerabilities targeted by attackers. This research primarily focuses on a resource-based detection approach by combining the powers of Software Defined Networking and s-Flow-RT technology against Distributed Denial of Service Attacks. In the simulation study conducted within the scope of this work, an SDN (Software Defined Networking)-based DDoS (Distributed Denial of Service) attack was carried out, and changes in data before and after the attack were examined. Traffic for the DDoS attack was generated with the Hping3 application. The RYU controller (a component-based software-defined networking framework) was selected as the software-defined network controller to create software-defined networks, and the Mininet emulator was used. A traditional computer network's Ubuntu virtual machine was used to carry out the attack in the scope of the work.