关键词: 软件定义网络, 分布式拒绝服务攻击, C4.5决策树

Abstract: Software Defined Network（SDN） is an emerging network architecture. Its separation of control and forwarding architecture brings great convenience and flexibility to network management, but it also brings new security threats and challenges. By performing the Distributed Denial of Service（DDoS） attack on the centralized controller of the SDN, the attacker will make the information unreachable and cause network congestion. In order to detect the DDoS attack, a detection method based on the C4.5 decision tree is proposed. It extracts information from each switch flow entry, then generates a decision tree to classify traffic to realize the detection of DDoS attacks. Finally, the experimental results show that the method has higher detection success rate, lower false alarm rate and less detection time.

Key words: Software Defined Network（SDN）, Distributed Denial of Service（DDoS） attack, C4.5 decision tree