{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,17]],"date-time":"2026-06-17T04:21:26Z","timestamp":1781670086421,"version":"3.54.5"},"reference-count":39,"publisher":"Springer Science and Business Media LLC","issue":"7","license":[{"start":{"date-parts":[[2023,6,14]],"date-time":"2023-06-14T00:00:00Z","timestamp":1686700800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2023,6,14]],"date-time":"2023-06-14T00:00:00Z","timestamp":1686700800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Sci. China Inf. Sci."],"published-print":{"date-parts":[[2023,7]]},"DOI":"10.1007\/s11432-022-3593-7","type":"journal-article","created":{"date-parts":[[2023,6,17]],"date-time":"2023-06-17T17:01:36Z","timestamp":1687021296000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":12,"title":["Resource investment for DDoS attack resistant SDN: a practical assessment"],"prefix":"10.1007","volume":"66","author":[{"given":"Bin","family":"Yuan","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Fan","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jun","family":"Wan","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Huan","family":"Zhao","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Shui","family":"Yu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Deqing","family":"Zou","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Qiangsheng","family":"Hua","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hai","family":"Jin","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2023,6,14]]},"reference":[{"key":"3593_CR1","doi-asserted-by":"publisher","first-page":"69","DOI":"10.1145\/1355734.1355746","volume":"38","author":"N McKeown","year":"2008","unstructured":"McKeown N, Anderson T, Balakrishnan H, et al. OpenFlow: enabling innovation in campus networks. SIGCOMM Comput Commun Rev, 2008, 38: 69\u201374","journal-title":"SIGCOMM Comput Commun Rev"},{"key":"3593_CR2","doi-asserted-by":"publisher","first-page":"14","DOI":"10.1109\/JPROC.2014.2371999","volume":"103","author":"D Kreutz","year":"2015","unstructured":"Kreutz D, Ramos F M V, Verissimo P E, et al. Software-defined networking: a comprehensive survey. Proc IEEE, 2015, 103: 14\u201376","journal-title":"Proc IEEE"},{"key":"3593_CR3","doi-asserted-by":"publisher","first-page":"4","DOI":"10.1007\/s11704-016-6125-y","volume":"11","author":"D Li","year":"2017","unstructured":"Li D, Wang S, Zhu K, et al. A survey of network update in SDN. Front Comput Sci, 2017, 11: 4\u201312","journal-title":"Front Comput Sci"},{"key":"3593_CR4","doi-asserted-by":"publisher","first-page":"110101","DOI":"10.1007\/s11432-015-5433-4","volume":"58","author":"H G Zhang","year":"2015","unstructured":"Zhang H G, Han W B, Lai X J, et al. Survey on cyberspace security. Sci China Inf Sci, 2015, 58: 110101","journal-title":"Sci China Inf Sci"},{"key":"3593_CR5","doi-asserted-by":"publisher","first-page":"2160","DOI":"10.1109\/TIFS.2016.2573756","volume":"11","author":"H Cui","year":"2016","unstructured":"Cui H, Karame G O, Klaedtke F, et al. On the fingerprinting of software-defined networks. IEEE Trans Inform Forensic Secur, 2016, 11: 2160\u20132173","journal-title":"IEEE Trans Inform Forensic Secur"},{"key":"3593_CR6","unstructured":"Jero S, Koch W, Skowyra R, et al. Identifier binding attacks and defenses in software-defined networks. In: Proceedings of the 26th USENIX Security Symposium, Vancouver, 2017. 415\u2013432"},{"key":"3593_CR7","doi-asserted-by":"crossref","unstructured":"Hong S, Xu L, Wang H, et al. Poisoning network visibility in software-defined networks: new attacks and countermeasures. In: Proceedings of the 22nd Annual Network and Distributed System Security Symposium, San Diego, 2015","DOI":"10.14722\/ndss.2015.23283"},{"key":"3593_CR8","doi-asserted-by":"crossref","unstructured":"Sonchack J, Dubey A, Aviv A J, et al. Timing-based reconnaissance and defense in software-defined networks. In: Proceedings of the 32nd Annual Conference on Computer Security Applications, Los Angeles, 2016. 89\u2013100","DOI":"10.1145\/2991079.2991081"},{"key":"3593_CR9","doi-asserted-by":"crossref","unstructured":"Liu S, Reiter M K, Sekar V. Flow reconnaissance via timing attacks on SDN switches. In: Proceedings of the 37th IEEE International Conference on Distributed Computing Systems, Atlanta, 2017. 196\u2013206","DOI":"10.1109\/ICDCS.2017.281"},{"key":"3593_CR10","doi-asserted-by":"publisher","first-page":"231","DOI":"10.1109\/TSC.2016.2602861","volume":"12","author":"B Yuan","year":"2019","unstructured":"Yuan B, Zou D, Yu S, et al. Defending against flow table overloading attack in software-defined networks. IEEE Trans Serv Comput, 2019, 12: 231\u2013246","journal-title":"IEEE Trans Serv Comput"},{"key":"3593_CR11","unstructured":"Cao J, Li Q, Xie R, et al. A crosspath attack disrupts the SDN control channel via shared links. In: Proceedings of the 28th USENIX Security Symposium, Santa Clara, 2019. 19\u201336"},{"key":"3593_CR12","doi-asserted-by":"crossref","unstructured":"Yu S, Guo S, Stojmenovic I. Can we beat legitimate cyber behavior that mimics botnet attacks? In: Proceedings of the IEEE Conference on Computer Communications, Orlando, 2012. 2851\u20132855","DOI":"10.1109\/INFCOM.2012.6195714"},{"key":"3593_CR13","doi-asserted-by":"publisher","first-page":"1649","DOI":"10.1109\/TPDS.2007.1111","volume":"18","author":"Y Chen","year":"2007","unstructured":"Chen Y, Hwang K, Ku W S. Collaborative detection of DDoS attacks over multiple network domains. IEEE Trans Parallel Distrib Syst, 2007, 18: 1649\u20131662","journal-title":"IEEE Trans Parallel Distrib Syst"},{"key":"3593_CR14","doi-asserted-by":"publisher","first-page":"1828","DOI":"10.1109\/TNET.2012.2194508","volume":"20","author":"J Francois","year":"2012","unstructured":"Francois J, Aib I, Boutaba R. FireCol: a collaborative protection network for the detection of flooding DDoS attacks. IEEE ACM Trans Networking, 2012, 20: 1828\u20131841","journal-title":"IEEE ACM Trans Networking"},{"key":"3593_CR15","doi-asserted-by":"crossref","unstructured":"Mousavi S M, St-Hilaire M. Early detection of ddos attacks against SDN controllers. In: Proceedings of the International Conference on Computing, Networking and Communications, Garden Grove, 2015. 77\u201381","DOI":"10.1109\/ICCNC.2015.7069319"},{"key":"3593_CR16","doi-asserted-by":"publisher","first-page":"153515","DOI":"10.4108\/eai.28-12-2017.153515","volume":"4","author":"Q Niyaz","year":"2017","unstructured":"Niyaz Q, Sun W, Javaid A Y. A deep learning based DDoS detection system in software-defined networking (SDN). ICST Trans Security Saf, 2017, 4: 153515","journal-title":"ICST Trans Security Saf"},{"key":"3593_CR17","doi-asserted-by":"publisher","first-page":"1838","DOI":"10.1109\/TIFS.2018.2805600","volume":"13","author":"J Zheng","year":"2018","unstructured":"Zheng J, Li Q, Gu G, et al. Realtime DDoS defense using COTS SDN switches via adaptive correlation analysis. IEEE Trans Inform Forensic Secur, 2018, 13: 1838\u20131853","journal-title":"IEEE Trans Inform Forensic Secur"},{"key":"3593_CR18","doi-asserted-by":"publisher","first-page":"032106","DOI":"10.1007\/s11432-017-9439-7","volume":"62","author":"Y Guo","year":"2019","unstructured":"Guo Y, Miao F, Zhang L C, et al. CATH: an effective method for detecting denial-of-service attacks in software defined networks. Sci China Inf Sci, 2019, 62: 032106","journal-title":"Sci China Inf Sci"},{"key":"3593_CR19","doi-asserted-by":"publisher","first-page":"172","DOI":"10.1016\/j.comnet.2016.03.005","volume":"102","author":"B Xiong","year":"2016","unstructured":"Xiong B, Yang K, Zhao J, et al. Performance evaluation of OpenFlow-based software-defined networks based on queueing model. Comput Networks, 2016, 102: 172\u2013185","journal-title":"Comput Networks"},{"key":"3593_CR20","doi-asserted-by":"crossref","unstructured":"Muhizi S, Shamshin G, Muthanna A, et al. Analysis and performance evaluation of SDN queue model. In: Proceedings of the Wired\/Wireless Internet Communications, St. Petersburg, 2017. 26\u201337","DOI":"10.1007\/978-3-319-61382-6_3"},{"key":"3593_CR21","doi-asserted-by":"crossref","unstructured":"Wang H, Xu L, Gu, G. FloodGuard: a DoS attack prevention extension in software-defined networks. In: Proceedings of the 45th Annual IEEE\/IFIP International Conference on Dependable Systems and Networks, Rio de Janeiro, 2015. 239\u2013250","DOI":"10.1109\/DSN.2015.27"},{"key":"3593_CR22","doi-asserted-by":"publisher","first-page":"964","DOI":"10.1016\/j.future.2017.04.023","volume":"105","author":"B Yuan","year":"2020","unstructured":"Yuan B, Zou D, Jin H, et al. HostWatcher: protecting hosts in cloud data centers through software-defined networking. Future Generation Comput Syst, 2020, 105: 964\u2013972","journal-title":"Future Generation Comput Syst"},{"key":"3593_CR23","doi-asserted-by":"crossref","unstructured":"Cao J, Xie R, Sun K, et al. When match fields do not need to match, buffered packets are hijacked in the SDN. In: Proceedings of the 27th Annual Network and Distributed System Security Symposium, San Diego, 2020","DOI":"10.14722\/ndss.2020.23040"},{"key":"3593_CR24","doi-asserted-by":"crossref","unstructured":"Gillani F, Al-Shaer E, Duan Q. In-design resilient SDN control plane and elastic forwarding against aggressive DDoS attacks. In: Proceedings of the 5th ACM Workshop on Moving Target Defense, Toronto, 2018. 80\u201389","DOI":"10.1145\/3268966.3268968"},{"key":"3593_CR25","doi-asserted-by":"crossref","unstructured":"Zhang M, Li G, Xu L, et al. Control plane reflection attacks in SDNs: new attacks and countermeasures. In: Proceedings of the International Symposium on Research in Attacks, Intrusions, and Defenses, Heraklion, 2018. 161\u2013183","DOI":"10.1007\/978-3-030-00470-5_8"},{"key":"3593_CR26","doi-asserted-by":"crossref","unstructured":"Zhang M, Li G, Wang S, et al. Poseidon: mitigating volumetric DDoS attacks with programmable switches. In: Proceedings of the 27th Annual Network and Distributed System Security Symposium, San Diego, 2020","DOI":"10.14722\/ndss.2020.24007"},{"key":"3593_CR27","doi-asserted-by":"publisher","first-page":"2158","DOI":"10.1109\/TNET.2022.3169136","volume":"30","author":"R Xie","year":"2022","unstructured":"Xie R, Cao J, Li Q, et al. Disrupting the SDN control channel via shared links: attacks and countermeasures. IEEE ACM Trans Networking, 2022, 30: 2158\u20132172","journal-title":"IEEE ACM Trans Networking"},{"key":"3593_CR28","doi-asserted-by":"crossref","unstructured":"Singh D, Ng B, Lai Y, et al. Modelling software-defined networking: switch design with finite buffer and priority queuing. In: Proceedings of the 42nd IEEE Conference on Local Computer Network, Singapore, 2017. 567\u2013570","DOI":"10.1109\/LCN.2017.19"},{"key":"3593_CR29","unstructured":"Jarschel M, Oechsner S, Schlosser D, et al. Modeling and performance evaluation of the open flow architecture. In: Proceedings of the 23rd International Teletraffic Congress, San Francisco, 2011. 1\u20137"},{"key":"3593_CR30","doi-asserted-by":"crossref","unstructured":"Shen G, Li Q, Ai S, et al. How powerful switches should be deployed: a precise estimation based on queuing theory. In: Proceedings of the 2019 IEEE Conference on Computer Communications, Paris, 2019. 811\u2013819","DOI":"10.1109\/INFOCOM.2019.8737629"},{"key":"3593_CR31","doi-asserted-by":"publisher","first-page":"827","DOI":"10.1007\/s11704-015-3448-z","volume":"9","author":"Y Gong","year":"2015","unstructured":"Gong Y, Huang W, Wang W, et al. A survey on software defined networking and its applications. Front Comput Sci, 2015, 9: 827\u2013845","journal-title":"Front Comput Sci"},{"key":"3593_CR32","doi-asserted-by":"crossref","unstructured":"Zhou W, Li L, Luo M, et al. REST API design patterns for the SDN northbound API. In: Proceedings of the 28th International Conference on Advanced Information Networking and Applications Workshops, Victoria, 2014. 358\u2013365","DOI":"10.1109\/WAINA.2014.153"},{"key":"3593_CR33","doi-asserted-by":"publisher","first-page":"144502","DOI":"10.1007\/s11704-018-8048-2","volume":"14","author":"G Huang","year":"2020","unstructured":"Huang G, Youn H Y. Proactive eviction of flow entry for SDN based on hidden Markov model. Front Comput Sci, 2020, 14: 144502","journal-title":"Front Comput Sci"},{"key":"3593_CR34","volume-title":"Performance Modelling of Communication Networks and Computer Architectures","author":"P G Harrison","year":"1993","unstructured":"Harrison P G, Patel N M. Performance Modelling of Communication Networks and Computer Architectures. Boston: Addison-Wesley Longman Publishing Co., Inc., 1993"},{"key":"3593_CR35","unstructured":"Zukerman M. Introduction to queuing theory and stochastic teletraffic models. 2013. ArXiv:1307.2968"},{"key":"3593_CR36","doi-asserted-by":"crossref","unstructured":"Raiciu C, Barre S, Pluntke C, et al. Improving datacenter performance and robustness by using multipath TCP. In: Proceedings of the ACM SIGCOMM 2011 Conference on Applications, Technologies, Architectures, and Protocols for Computer Communications1, Toronto, 2011. 266\u2013277","DOI":"10.1145\/2018436.2018467"},{"key":"3593_CR37","doi-asserted-by":"publisher","first-page":"056105","DOI":"10.1103\/PhysRevE.70.056105","volume":"70","author":"P Echenique","year":"2004","unstructured":"Echenique P, G\u00f3mez-Garde\u00f1es J, Moreno Y. Improved routing strategies for Internet traffic delivery. Phys Rev E, 2004, 70: 056105","journal-title":"Phys Rev E"},{"key":"3593_CR38","doi-asserted-by":"publisher","first-page":"825","DOI":"10.1109\/TIT.1983.1056762","volume":"29","author":"J Walrand","year":"1983","unstructured":"Walrand J. A probabilistic look at networks of quasi-reversible queues. IEEE Trans Inform Theor, 1983, 29: 825\u2013831","journal-title":"IEEE Trans Inform Theor"},{"key":"3593_CR39","doi-asserted-by":"publisher","first-page":"115","DOI":"10.1145\/1132026.1132027","volume":"24","author":"D Moore","year":"2006","unstructured":"Moore D, Shannon C, Brown D J, et al. Inferring Internet denial-of-service activity. ACM Trans Comput Syst, 2006, 24: 115\u2013139","journal-title":"ACM Trans Comput Syst"}],"container-title":["Science China Information Sciences"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11432-022-3593-7.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s11432-022-3593-7\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11432-022-3593-7.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,8,28]],"date-time":"2024-08-28T15:13:47Z","timestamp":1724858027000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s11432-022-3593-7"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,6,14]]},"references-count":39,"journal-issue":{"issue":"7","published-print":{"date-parts":[[2023,7]]}},"alternative-id":["3593"],"URL":"https:\/\/doi.org\/10.1007\/s11432-022-3593-7","relation":{},"ISSN":["1674-733X","1869-1919"],"issn-type":[{"value":"1674-733X","type":"print"},{"value":"1869-1919","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,6,14]]},"assertion":[{"value":"20 May 2022","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"4 July 2022","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"23 September 2022","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"14 June 2023","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}],"article-number":"172103"}}