{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,12]],"date-time":"2026-05-12T16:22:16Z","timestamp":1778602936598,"version":"3.51.4"},"publisher-location":"Cham","reference-count":36,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783030004699","type":"print"},{"value":"9783030004705","type":"electronic"}],"license":[{"start":{"date-parts":[[2018,1,1]],"date-time":"2018-01-01T00:00:00Z","timestamp":1514764800000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2018]]},"DOI":"10.1007\/978-3-030-00470-5_8","type":"book-chapter","created":{"date-parts":[[2018,9,6]],"date-time":"2018-09-06T10:43:19Z","timestamp":1536230599000},"page":"161-183","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":36,"title":["Control Plane Reflection Attacks in SDNs: New Attacks and Countermeasures"],"prefix":"10.1007","author":[{"given":"Menghao","family":"Zhang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Guanyu","family":"Li","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Lei","family":"Xu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jun","family":"Bi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Guofei","family":"Gu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jiasong","family":"Bai","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2018,9,7]]},"reference":[{"key":"8_CR1","unstructured":"Bai, W., et al.: Information-agnostic flow scheduling for commodity data centers. In: NSDI, pp. 455\u2013468. USENIX Association, Oakland (2015). https:\/\/www.usenix.org\/conference\/nsdi15\/technical-sessions\/presentation\/bai"},{"issue":"3","key":"8_CR2","doi-asserted-by":"publisher","first-page":"87","DOI":"10.1145\/2656877.2656890","volume":"44","author":"P Bosshart","year":"2014","unstructured":"Bosshart, P., et al.: P4: programming protocol-independent packet processors. SIGCOMM CCR 44(3), 87\u201395 (2014)","journal-title":"SIGCOMM CCR"},{"key":"8_CR3","doi-asserted-by":"crossref","unstructured":"Braga, R., et al.: Lightweight DDoS flooding attack detection using NOX\/OpenFlow. In: LCN, pp. 408\u2013415. IEEE (2010)","DOI":"10.1109\/LCN.2010.5735752"},{"key":"8_CR4","doi-asserted-by":"crossref","unstructured":"Casado, M., et al.: Ethane: taking control of the enterprise. In: SIGCOMM, vol. 37, pp. 1\u201312. ACM (2007)","DOI":"10.1145\/1282380.1282382"},{"key":"8_CR5","doi-asserted-by":"crossref","unstructured":"Chen, H., Benson, T.: The case for making tight control plane latency guarantees in SDN switches. In: SOSR, pp. 150\u2013156. ACM (2017)","DOI":"10.1145\/3050220.3050237"},{"key":"8_CR6","unstructured":"Floodlight Community: Floodlight, August 2017. http:\/\/www.projectfloodlight.org\/floodlight\/"},{"key":"8_CR7","unstructured":"Open vSwitch Community: Open vSwitch, August 2017. http:\/\/openvswitch.org\/"},{"issue":"4","key":"8_CR8","doi-asserted-by":"publisher","first-page":"254","DOI":"10.1145\/2043164.2018466","volume":"41","author":"AR Curtis","year":"2011","unstructured":"Curtis, A.R.: DevoFlow: scaling flow management for high-performance networks. SIGCOMM 41(4), 254\u2013265 (2011)","journal-title":"SIGCOMM"},{"key":"8_CR9","doi-asserted-by":"crossref","unstructured":"Gao, S., et al.: FloodDefender: protecting data and control plane resources under SDN-aimed DoS attacks. In: INFOCOM, pp. 1\u20139 (2017)","DOI":"10.1109\/INFOCOM.2017.8057009"},{"key":"8_CR10","doi-asserted-by":"crossref","unstructured":"Ghorbani, S., et al.: DRILL: micro load balancing for low-latency data center networks. In: SOGCOMM, pp. 225\u2013238. ACM (2017)","DOI":"10.1145\/3098822.3098839"},{"key":"8_CR11","doi-asserted-by":"crossref","unstructured":"Hassas Yeganeh, S., Ganjali, Y.: Kandoo: a framework for efficient and scalable offloading of control applications. In: HotSDN, pp. 19\u201324. ACM (2012)","DOI":"10.1145\/2342441.2342446"},{"key":"8_CR12","unstructured":"He, K., et al.: Mazu: taming latency in software defined networks. Technical report, University of Wisconsin-Madison (2014)"},{"key":"8_CR13","doi-asserted-by":"crossref","unstructured":"He, K., et al.: Measuring control plane latency in SDN-enabled switches. In: SOSR, p. 25. ACM (2015)","DOI":"10.1145\/2774993.2775069"},{"key":"8_CR14","doi-asserted-by":"crossref","unstructured":"Jin, X., et al.: SoftCell: scalable and flexible cellular core network architecture. In: CoNEXT, pp. 163\u2013174. ACM (2013)","DOI":"10.1145\/2535372.2535377"},{"key":"8_CR15","doi-asserted-by":"crossref","unstructured":"Jin, X., et al.: Dynamic scheduling of network updates. In: SIGCOMM, vol. 44, pp. 539\u2013550. ACM (2014)","DOI":"10.1145\/2619239.2626307"},{"key":"8_CR16","doi-asserted-by":"crossref","unstructured":"Katta, N., et al.: CacheFlow: dependency-aware rule-caching for software-defined networks. In: SOSR, p. 6. ACM (2016)","DOI":"10.1145\/2890955.2890969"},{"key":"8_CR17","unstructured":"Koponen, T., et al.: Onix: a distributed control platform for large-scale production networks. In: OSDI, vol. 10, pp. 1\u20136 (2010)"},{"key":"8_CR18","doi-asserted-by":"crossref","unstructured":"Lazaris, A., et al.: Tango: simplifying SDN control with automatic switch property inference, abstraction, and optimization. In: CoNEXT, pp. 199\u2013212. ACM (2014)","DOI":"10.1145\/2674005.2675011"},{"key":"8_CR19","unstructured":"Leng, J., et al.: An inference attack model for flow table capacity and usage: exploiting the vulnerability of flow table overflow in software-defined network. arXiv preprint arXiv:1504.03095 (2015)"},{"issue":"4","key":"8_CR20","doi-asserted-by":"publisher","first-page":"137","DOI":"10.1145\/2740070.2631468","volume":"44","author":"Y Li","year":"2015","unstructured":"Li, Y., et al.: Flowinsight: decoupling visibility from operability in SDN data plane. SIGCOMM Demo 44(4), 137\u2013138 (2015)","journal-title":"SIGCOMM Demo"},{"key":"8_CR21","doi-asserted-by":"crossref","unstructured":"Liu, S., et al.: Flow reconnaissance via timing attacks on SDN switches. In: ICDCS, pp. 196\u2013206. IEEE (2017)","DOI":"10.1109\/ICDCS.2017.281"},{"key":"8_CR22","doi-asserted-by":"crossref","unstructured":"Liu, Z., et al.: One sketch to rule them all: rethinking network flow monitoring with UnivMon. In: SIGCOMM, pp. 101\u2013114. ACM (2016)","DOI":"10.1145\/2934872.2934906"},{"issue":"2","key":"8_CR23","doi-asserted-by":"publisher","first-page":"69","DOI":"10.1145\/1355734.1355746","volume":"38","author":"N McKeown","year":"2008","unstructured":"McKeown, N.: OpenFlow: enabling innovation in campus networks. SIGCOMM CCR 38(2), 69\u201374 (2008)","journal-title":"SIGCOMM CCR"},{"key":"8_CR24","unstructured":"Pica8: Flow scalability per broadcom chipset, March 2018. https:\/\/docs.pica8.com\/display\/picos2102cg\/Flow+Scalability+per+Broadcom+Chipset"},{"key":"8_CR25","doi-asserted-by":"crossref","unstructured":"Postel, J.: Transmission control protocol (1981)","DOI":"10.17487\/rfc0793"},{"key":"8_CR26","doi-asserted-by":"crossref","unstructured":"Postel, J., et al.: RFC 792: Internet control message protocol. InterNet Network Working Group (1981)","DOI":"10.17487\/rfc0792"},{"key":"8_CR27","doi-asserted-by":"crossref","unstructured":"Shin, S., et al.: AVANT-GUARD: scalable and vigilant switch flow management in software-defined networks. In: CCS, pp. 413\u2013424. ACM (2013)","DOI":"10.1145\/2508859.2516684"},{"key":"8_CR28","doi-asserted-by":"crossref","unstructured":"Shin, S., Gu, G.: Attacking software-defined networks: a first feasibility study. In: HotSDN, pp. 165\u2013166. ACM (2013)","DOI":"10.1145\/2491185.2491220"},{"key":"8_CR29","doi-asserted-by":"crossref","unstructured":"Sonchack, J., et al.: Timing-based reconnaissance and defense in software-defined networks. In: ACSAC, pp. 89\u2013100. ACM (2016)","DOI":"10.1145\/2991079.2991081"},{"key":"8_CR30","unstructured":"Tootoonchian, A., Ganjali, Y.: HyperFlow: a distributed control plane for OpenFlow. In: Proceedings of the 2010 Internet Network Management Conference on Research on Enterprise Networking, p. 3 (2010)"},{"key":"8_CR31","doi-asserted-by":"crossref","unstructured":"Wang, A., et al.: Scotch: elastically scaling up SDN control-plane using vSwitch based overlay. In: CoNEXT, pp. 403\u2013414. ACM (2014)","DOI":"10.1145\/2674005.2675002"},{"key":"8_CR32","doi-asserted-by":"crossref","unstructured":"Wang, H., et al.: FloodGuard: a DoS attack prevention extension in software-defined networks. In: DSN, pp. 239\u2013250. IEEE (2015)","DOI":"10.1109\/DSN.2015.27"},{"key":"8_CR33","doi-asserted-by":"crossref","unstructured":"Xu, H., et al.: Real-time update with joint optimization of route selection and update scheduling for SDNs. In: ICNP, pp. 1\u201310. IEEE (2016)","DOI":"10.1109\/ICNP.2016.7784436"},{"key":"8_CR34","doi-asserted-by":"crossref","unstructured":"Xu, Y., Liu, Y.: DDoS attack detection under SDN context. In: INFOCOM, pp. 1\u20139. IEEE (2016)","DOI":"10.1109\/INFOCOM.2016.7524500"},{"key":"8_CR35","doi-asserted-by":"crossref","unstructured":"Zhang, M., et al.: FTGuard: a priority-aware strategy against the flow table overflow attack in SDN. In: SIGCOMM Demo, pp. 141\u2013143. ACM (2017)","DOI":"10.1145\/3123878.3132015"},{"key":"8_CR36","unstructured":"Zhang, M., et al.: Control plane reflection attacks in SDNs: new attacks and countermeasures. Technical report, June 2018. https:\/\/www.dropbox.com\/s\/bnwe8apx5w06a85\/sdns-attacks-countermeasures-tr.pdf?dl=0"}],"container-title":["Lecture Notes in Computer Science","Research in Attacks, Intrusions, and Defenses"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-00470-5_8","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,7,6]],"date-time":"2025-07-06T22:47:25Z","timestamp":1751842045000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-030-00470-5_8"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018]]},"ISBN":["9783030004699","9783030004705"],"references-count":36,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-00470-5_8","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2018]]}}}