{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,23]],"date-time":"2026-04-23T07:59:16Z","timestamp":1776931156168,"version":"3.51.2"},"publisher-location":"New York, NY, USA","reference-count":117,"publisher":"ACM","license":[{"start":{"date-parts":[[2026,11,14]],"date-time":"2026-11-14T00:00:00Z","timestamp":1794614400000},"content-version":"vor","delay-in-days":397,"URL":"http:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS-2141547"],"award-info":[{"award-number":["CNS-2141547"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Advanced Research Projects Agency for Health","award":["SP4701-23-C-0074"],"award-info":[{"award-number":["SP4701-23-C-0074"]}]},{"name":"Department of Navy award","award":["N00014-24-1-2193"],"award-info":[{"award-number":["N00014-24-1-2193"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2025,10,13]]},"DOI":"10.1145\/3733812.3765534","type":"proceedings-article","created":{"date-parts":[[2025,11,14]],"date-time":"2025-11-14T10:54:48Z","timestamp":1763117688000},"page":"28-49","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["Revisiting SDN Resilience in Cloud and Enterprise Environments"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-1668-303X","authenticated-orcid":false,"given":"Sana","family":"Habib","sequence":"first","affiliation":[{"name":"Arizona State University, Tempe, Arizona, USA and Washington and Lee University, Lexington, Virginia, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7864-2992","authenticated-orcid":false,"given":"Jedidiah R.","family":"Crandall","sequence":"additional","affiliation":[{"name":"Arizona State University, Tempe, Arizona, USA and Breakpointing Bad, Tempe, Arizona, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2634-3901","authenticated-orcid":false,"given":"Adam","family":"Doup\u00e9","sequence":"additional","affiliation":[{"name":"Arizona State University, Tempe, Arizona, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2025,11,14]]},"reference":[{"key":"e_1_3_3_2_2_2","unstructured":"2017. AAA-151: Previous password continues to work after password change. https:\/\/jira.opendaylight.org\/browse\/AAA-151 (2017)."},{"key":"e_1_3_3_2_3_2","unstructured":"2017. CVE-2017-1000406. https:\/\/www.cvedetails.com\/cve\/CVE-2017-1000406\/ (2017)."},{"key":"e_1_3_3_2_4_2","unstructured":"2017. CVE-2017-1000411. https:\/\/www.cvedetails.com\/cve\/CVE-2017-1000411\/ (2017)."},{"key":"e_1_3_3_2_5_2","unstructured":"2017. OPNFLWPLUG-962. Multiple \"expired\" flows take up the memory resource of CONFIG DS which leads to Controller shutdown. https:\/\/jira.opendaylight.org\/browse\/OPNFLWPLUG-962. (2017)."},{"key":"e_1_3_3_2_6_2","unstructured":"2017. OPNFLWPLUG-971. Node reconciliation installs old expired flows: switch conquers flows for infinite time. https:\/\/jira.opendaylight.org\/browse\/OPNFLWPLUG-971. (2017)."},{"key":"e_1_3_3_2_7_2","unstructured":"2018. Center for Complex Networks and Systems Research (CNetS) Indiana University Bloomington. https:\/\/cnets.indiana.edu\/data-repository-for-nan-group\/ (2018)."},{"key":"e_1_3_3_2_8_2","unstructured":"2018. CVE-2018-1078. https:\/\/www.cvedetails.com\/cve\/CVE-2018-1078\/ (2018)."},{"key":"e_1_3_3_2_9_2","unstructured":"2019. Prioritizing Vulnerability Response: A Stakeholder-Specific Vulnerability Categorization. https:\/\/resources.sei.cmu.edu\/library\/asset-view.cfm?assetid=636379. (2019)."},{"key":"e_1_3_3_2_10_2","unstructured":"2022. Computer Security Conference Ranking and Statistic. https:\/\/people.engr.tamu.edu\/guofei\/sec_conf_stat.htm. (2022)."},{"key":"e_1_3_3_2_11_2","unstructured":"2023. Stanford Large Network Dataset Collection. http:\/\/snap.stanford.edu\/data\/index.html (2023)."},{"key":"e_1_3_3_2_12_2","unstructured":"2024. CVE-2024-37018. https:\/\/www.cvedetails.com\/cve\/CVE-2024-37018\/ (2024)."},{"key":"e_1_3_3_2_13_2","unstructured":"2025. The 3D Internet Topology Zoo. (2025). https:\/\/github.com\/afourmy\/3D-internet-zoo"},{"key":"e_1_3_3_2_14_2","unstructured":"2025. Cloud SDN - Ericsson. https:\/\/www.ericsson.com\/en\/portfolio\/cloud-software-and-services\/cloud-core\/cloud-infrastructure\/nfvi\/cloud-sdn. (2025)."},{"key":"e_1_3_3_2_15_2","unstructured":"2025. Component-based Software Defined Networking Framework. Build SDN Agilely. (2025). https:\/\/ryu-sdn.org\/"},{"key":"e_1_3_3_2_16_2","unstructured":"2025. Energy Sciences Network (ESnet): 100G SDN Test-bed. (2025). https:\/\/www.es.net\/network-r-and-d\/experimental-network-testbeds\/100g-sdn-testbed\/"},{"key":"e_1_3_3_2_17_2","unstructured":"2025. European Telecommunications Standards Institute (ETSI). (2025). https:\/\/www.etsi.org\/"},{"key":"e_1_3_3_2_18_2","unstructured":"2025. Exploit Prediction Scoring System. https:\/\/www.first.org\/epss\/. (2025)."},{"key":"e_1_3_3_2_19_2","unstructured":"2025. Floodlight. (2025). https:\/\/github.com\/floodlight\/floodlight"},{"key":"e_1_3_3_2_20_2","unstructured":"2025. Global Environment for Network Innovations (GENI). (2025). https:\/\/www.geni.net\/about-geni\/what-is-geni\/"},{"key":"e_1_3_3_2_21_2","unstructured":"2025. International Telecommunication Union (ITU-T) Recommendations. https:\/\/www.itu.int\/en\/ITU-T\/publications\/pages\/recs.aspx (2025)."},{"key":"e_1_3_3_2_22_2","unstructured":"2025. Jira Software. (2025). https:\/\/jira.opendaylight.org"},{"key":"e_1_3_3_2_23_2","unstructured":"2025. Lumen Enterprise SDN - Software-Defined Networking. (2025). https:\/\/www.lumen.com\/"},{"key":"e_1_3_3_2_24_2","unstructured":"2025. Mininet. (2025). http:\/\/mininet.org\/"},{"key":"e_1_3_3_2_25_2","unstructured":"2025. Netcat. (2025). https:\/\/nmap.org\/ncat\/"},{"key":"e_1_3_3_2_26_2","unstructured":"2025. Netresec Publicly available PCAP files. https:\/\/www.netresec.com\/?page=PcapFiles (2025)."},{"key":"e_1_3_3_2_27_2","unstructured":"2025. Netty. (2025). https:\/\/netty.io\/"},{"key":"e_1_3_3_2_28_2","unstructured":"2025. Nmap. (2025). https:\/\/nmap.org\/"},{"key":"e_1_3_3_2_29_2","unstructured":"2025. Open Network Operating System (ONOS). (2025). https:\/\/onosproject.org"},{"key":"e_1_3_3_2_30_2","unstructured":"2025. Open Networking Foundation Security Working Group. [online]. https:\/\/opennetworking.org\/tag\/onf-security-working-group\/ (2025)."},{"key":"e_1_3_3_2_31_2","unstructured":"2025. OpenDaylight. https:\/\/www.opendaylight.org (2025)."},{"key":"e_1_3_3_2_32_2","unstructured":"2025. Software Defined Networking (Sdn) Market Size Share Growth and Industry Trends. (2025). https:\/\/www.marketsandmarkets.com\/Market-Reports\/software-defined-networking-sdn-market-655.html"},{"key":"e_1_3_3_2_33_2","unstructured":"2025. Thoth Lab. (2025). https:\/\/pypi.org\/project\/thoth-lab\/"},{"key":"e_1_3_3_2_34_2","unstructured":"2025. Vulnerability Priority Rating (VPR). https:\/\/www.tenable.com\/sc-dashboards\/vulnerability-priority-rating-vpr-summary. (2025)."},{"key":"e_1_3_3_2_35_2","unstructured":"POX. 2020.2020. https:\/\/github.com\/noxrepo\/pox. (2020)."},{"key":"e_1_3_3_2_36_2","unstructured":"ACTFORNET.2025. Huawei Software Defined Network (SDN) Solution. https:\/\/actfornet.com\/huawei-cloud\/sdn.html. (2025)."},{"key":"e_1_3_3_2_37_2","doi-asserted-by":"crossref","unstructured":"Bilal Ahmed Nadeem Ahmed Asad\u00a0Waqar Malik Mohsin Jafri and Taimur Hafeez. 2020. Fingerprinting SDN Policy Parameters: An Empirical Study. IEEE Access 8 (2020) 142379\u2013142392.","DOI":"10.1109\/ACCESS.2020.3012176"},{"key":"e_1_3_3_2_38_2","doi-asserted-by":"publisher","DOI":"10.1109\/CCCS.2019.8888031"},{"key":"e_1_3_3_2_39_2","doi-asserted-by":"publisher","DOI":"10.1109\/AECT47998.2020.9194211"},{"key":"e_1_3_3_2_40_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-98989-1_23"},{"key":"e_1_3_3_2_41_2","unstructured":"Sonali\u00a0Sen Baidya and Rattikorn Hewett. 2020. Link Discovery Attacks in Software-Defined Networks: Topology Poisoning and Impact Analysis. Journal of Communications 15 8 (2020)."},{"key":"e_1_3_3_2_42_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICNP.2015.26"},{"key":"e_1_3_3_2_43_2","doi-asserted-by":"crossref","unstructured":"Celyn Birkinshaw Elpida Rouka and Vassilios\u00a0G Vassilakis. 2019. Implementing an intrusion detection and prevention system using software-defined networking: Defending against port-scanning and denial-of-service attacks. Journal of Network and Computer Applications 136 (2019) 71\u201385.","DOI":"10.1016\/j.jnca.2019.03.005"},{"key":"e_1_3_3_2_44_2","doi-asserted-by":"publisher","DOI":"10.17487\/RFC8342"},{"key":"e_1_3_3_2_45_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-35055-0_6"},{"key":"e_1_3_3_2_46_2","first-page":"19","volume-title":"28th USENIX Security Symposium (USENIX Security 19)","author":"Cao Jiahao","year":"2019","unstructured":"Jiahao Cao, Qi Li, Renjie Xie, Kun Sun, Guofei Gu, Mingwei Xu, and Yuan Yang. 2019. The CrossPath Attack: Disrupting the SDN Control Channel via Shared Links. In 28th USENIX Security Symposium (USENIX Security 19). 19\u201336."},{"key":"e_1_3_3_2_47_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-37228-6_21"},{"key":"e_1_3_3_2_48_2","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.23040"},{"key":"e_1_3_3_2_49_2","first-page":"501","volume-title":"22nd International Symposium on Research in Attacks, Intrusions and Defenses ({ RAID} 2019)","author":"Cao Jiahao","year":"2019","unstructured":"Jiahao Cao, Zijie Yang, Kun Sun, Qi Li, Mingwei Xu, and Peiyi Han. 2019. Fingerprinting SDN Applications via Encrypted Control Traffic. In 22nd International Symposium on Research in Attacks, Intrusions and Defenses ({ RAID} 2019). 501\u2013515."},{"key":"e_1_3_3_2_50_2","doi-asserted-by":"crossref","unstructured":"Mingming Chen Thomas La\u00a0Porta Teryl Taylor Frederico Araujo and Trent Jaeger. 2024. Manipulating OpenFlow Link Discovery Packet Forwarding for Topology Poisoning. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2408.16940 (2024).","DOI":"10.1145\/3658644.3690345"},{"key":"e_1_3_3_2_51_2","doi-asserted-by":"publisher","DOI":"10.1145\/3309194.3309196"},{"key":"e_1_3_3_2_52_2","doi-asserted-by":"crossref","unstructured":"Laizhong Cui F\u00a0Richard Yu and Qiao Yan. 2016. When big data meets software-defined networking: SDN for big data and big data for SDN. IEEE network 30 1 (2016) 58\u201365.","DOI":"10.1109\/MNET.2016.7389832"},{"key":"e_1_3_3_2_53_2","doi-asserted-by":"crossref","unstructured":"Spyros Denazis Evangelos Haleplidis Jamal\u00a0Hadi Salim Odysseas Koufopavlou David Meyer and Kostas Pentikousis. 2015. Software-defined networking (SDN): Layers and architecture terminology. (2015).","DOI":"10.17487\/rfc7426"},{"key":"e_1_3_3_2_54_2","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2015.23064"},{"key":"e_1_3_3_2_55_2","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243799"},{"key":"e_1_3_3_2_56_2","doi-asserted-by":"publisher","DOI":"10.1109\/LCN.2008.4664143"},{"key":"e_1_3_3_2_57_2","unstructured":"Cisco SDN \u2013 Software Defined\u00a0Networking Explained.2025. Cisco SDN. (2025). https:\/\/study-ccna.com\/cisco-sdn-software-defined-networking\/"},{"key":"e_1_3_3_2_58_2","doi-asserted-by":"crossref","unstructured":"Thomas Girdler and Vassilios\u00a0G Vassilakis. 2021. Implementing an intrusion detection and prevention system using Software-Defined Networking: Defending against ARP spoofing attacks and Blacklisted MAC Addresses. Computers & Electrical Engineering 90 (2021) 106990.","DOI":"10.1016\/j.compeleceng.2021.106990"},{"key":"e_1_3_3_2_59_2","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2019.00053"},{"key":"e_1_3_3_2_60_2","doi-asserted-by":"crossref","unstructured":"Natasha Gude Teemu Koponen Justin Pettit Ben Pfaff Mart\u00edn Casado Nick McKeown and Scott Shenker. 2008. NOX: towards an operating system for networks. ACM SIGCOMM Computer Communication Review 38 3 (2008) 105\u2013110.","DOI":"10.1145\/1384609.1384625"},{"key":"e_1_3_3_2_61_2","doi-asserted-by":"publisher","DOI":"10.1145\/3560810.3564265"},{"key":"e_1_3_3_2_62_2","doi-asserted-by":"crossref","unstructured":"Jianwei Hou Minjian Zhang Ziqi Zhang Wenchang Shi Bo Qin and Bin Liang. 2020. On the fine-grained fingerprinting threat to software-defined networks. Future Generation Computer Systems 107 (2020) 485\u2013497.","DOI":"10.1016\/j.future.2020.01.046"},{"key":"e_1_3_3_2_63_2","doi-asserted-by":"publisher","DOI":"10.1145\/2620728.2620749"},{"key":"e_1_3_3_2_64_2","doi-asserted-by":"crossref","unstructured":"Jingyu Hua Zidong Zhou and Sheng Zhong. 2020. Flow Misleading: Worm-Hole Attack in Software-Defined Networking via Building In-Band Covert Channel. IEEE Transactions on Information Forensics and Security 16 (2020) 1029\u20131043.","DOI":"10.1109\/TIFS.2020.3013093"},{"key":"e_1_3_3_2_65_2","doi-asserted-by":"crossref","unstructured":"Gan Huang and Hee\u00a0Yong Youn. 2020. Proactive eviction of flow entry for SDN based on hidden Markov model. Frontiers of Computer Science 14 4 (2020) 1\u201310.","DOI":"10.1007\/s11704-018-8048-2"},{"key":"e_1_3_3_2_66_2","unstructured":"IBM. 2025. IBM. Software Defined Networking (SDN) Services. (2025). https:\/\/www.ibm.com\/ae-en\/services\/network\/software-defined"},{"key":"e_1_3_3_2_67_2","doi-asserted-by":"crossref","unstructured":"Hafiz\u00a0Usama Ishtiaq Areeb\u00a0Ahmed Bhutta and Adnan\u00a0Noor Mian. 2023. DHCP DoS and starvation attacks on SDN controllers and their mitigation. Journal of Computer Virology and Hacking Techniques (2023) 1\u201311.","DOI":"10.1007\/s11416-023-00483-0"},{"key":"e_1_3_3_2_68_2","first-page":"66","volume-title":"International Conference on Cloud Computing and Services Science","author":"Ivki\u0107 Igor","year":"2022","unstructured":"Igor Ivki\u0107, Dominik Thiede, Nicholas Race, Matthew Broadbent, and Antonios Gouglidis. 2022. Security Evaluation in Software-Defined Networks. In International Conference on Cloud Computing and Services Science. Springer, 66\u201391."},{"key":"e_1_3_3_2_69_2","doi-asserted-by":"publisher","DOI":"10.1201\/b18592-31"},{"key":"e_1_3_3_2_70_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICST.2013.69"},{"key":"e_1_3_3_2_71_2","first-page":"99","volume-title":"10th { USENIX} Symposium on Networked Systems Design and Implementation ({ NSDI} 13)","author":"Kazemian Peyman","year":"2013","unstructured":"Peyman Kazemian, Michael Chang, Hongyi Zeng, George Varghese, Nick McKeown, and Scott Whyte. 2013. Real time network policy checking using header space analysis. In 10th { USENIX} Symposium on Networked Systems Design and Implementation ({ NSDI} 13). 99\u2013111."},{"key":"e_1_3_3_2_72_2","doi-asserted-by":"crossref","unstructured":"HARMAN\u00a0YI KHALID PARISHAN\u00a0M ISMAEL and AHMAD\u00a0BAHEEJ AL-KHALIL. 2019. Efficient Mechanism for Securing Software Defined Network Against ARP Spoofing Attack. Journal of Duhok University 22 1 (2019) 124\u2013131.","DOI":"10.26682\/sjuod.2019.22.1.14"},{"key":"e_1_3_3_2_73_2","doi-asserted-by":"publisher","DOI":"10.1109\/ISGTEurope.2017.8260283"},{"key":"e_1_3_3_2_74_2","doi-asserted-by":"publisher","DOI":"10.1109\/CLOUD.2018.00050"},{"key":"e_1_3_3_2_75_2","doi-asserted-by":"crossref","unstructured":"Jinwoo Kim Minjae Seo Seungsoo Lee Jaehyun Nam Vinod Yegneswaran Phillip Porras Guofei Gu and Seungwon Shin. 2024. Enhancing security in SDN: Systematizing attacks and defenses from a penetration perspective. Computer Networks (2024) 110203.","DOI":"10.1016\/j.comnet.2024.110203"},{"key":"e_1_3_3_2_76_2","unstructured":"Dezhang Kong Yi Shen Xiang Chen Qiumei Cheng Hongyan Liu Dong Zhang Xuan Liu Shuangxi Chen and Chunming Wu. 2022. Combination Attacks and Defenses on SDN Topology Discovery. IEEE\/ACM Transactions on Networking (2022)."},{"key":"e_1_3_3_2_77_2","doi-asserted-by":"crossref","unstructured":"Prashant Kumar Meenakshi Tripathi Ajay Nehra Mauro Conti and Chhagan Lal. 2018. SAFETY: Early detection and mitigation of TCP SYN flood utilizing entropy in SDN. IEEE Transactions on Network and Service Management 15 4 (2018) 1545\u20131559.","DOI":"10.1109\/TNSM.2018.2861741"},{"key":"e_1_3_3_2_78_2","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM41043.2020.9155378"},{"key":"e_1_3_3_2_79_2","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23457"},{"key":"e_1_3_3_2_80_2","doi-asserted-by":"crossref","unstructured":"Qi Li Yanyu Chen Patrick\u00a0PC Lee Mingwei Xu and Kui Ren. 2018. Security policy violations in SDN data plane. IEEE\/ACM Transactions on Networking 26 4 (2018) 1715\u20131727.","DOI":"10.1109\/TNET.2018.2853593"},{"key":"e_1_3_3_2_81_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICC40277.2020.9149042"},{"key":"e_1_3_3_2_82_2","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354194"},{"key":"e_1_3_3_2_83_2","doi-asserted-by":"crossref","unstructured":"Nick McKeown Tom Anderson Hari Balakrishnan Guru Parulkar Larry Peterson Jennifer Rexford Scott Shenker and Jonathan Turner. 2008. OpenFlow: enabling innovation in campus networks. ACM SIGCOMM computer communication review 38 2 (2008) 69\u201374.","DOI":"10.1145\/1355734.1355746"},{"key":"e_1_3_3_2_84_2","doi-asserted-by":"crossref","unstructured":"Mohamed Rahouti Kaiqi Xiong Nasir Ghani and Farooq Shaikh. 2021. SYNGuard: Dynamic threshold-based SYN flood attack detection and mitigation in software-defined networks. IET Networks 10 2 (2021) 76\u201387.","DOI":"10.1049\/ntw2.12009"},{"key":"e_1_3_3_2_85_2","doi-asserted-by":"crossref","unstructured":"Longyan Ran Yunhe Cui Chun Guo Qing Qian Guowei Shen and Huanlai Xing. 2022. Defending saturation attacks on SDN controller: A confusable instance analysis-based algorithm. Computer Networks 213 (2022) 109098.","DOI":"10.1016\/j.comnet.2022.109098"},{"key":"e_1_3_3_2_86_2","unstructured":"Nagarathna Ravi S\u00a0Mercy Shalinie Mauro Conti et\u00a0al. 2020. AEGIS: Detection and Mitigation of TCP SYN Flood on SDN Controller. IEEE Transactions on Network and Service Management (2020)."},{"key":"e_1_3_3_2_87_2","doi-asserted-by":"publisher","DOI":"10.1109\/NOMS.2018.8406122"},{"key":"e_1_3_3_2_88_2","unstructured":"Network Screen. 2025. Juniper Networks SDN. (2025). https:\/\/www.networkscreen.com\/SDN-Series.asp"},{"key":"e_1_3_3_2_89_2","doi-asserted-by":"crossref","unstructured":"PV Shalini V Radha and Sriram\u00a0G Sanjeevi. 2023. Early detection and mitigation of TCP SYN flood attacks in SDN using chi-square test. The Journal of Supercomputing 79 9 (2023) 10353\u201310385.","DOI":"10.1007\/s11227-023-05057-x"},{"key":"e_1_3_3_2_90_2","doi-asserted-by":"crossref","unstructured":"Yi Shen Chunming Wu Dezhang Kong and Qiumei Cheng. 2023. Flow Table Saturation Attack against Dynamic Timeout Mechanisms in SDN. Applied Sciences 13 12 (2023) 7210.","DOI":"10.3390\/app13127210"},{"key":"e_1_3_3_2_91_2","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516684"},{"key":"e_1_3_3_2_92_2","unstructured":"Common Vulnerability Scoring\u00a0System SIG. 2025. Common Vulnerability Scoring System. https:\/\/www.first.org\/cvss\/. (2025)."},{"key":"e_1_3_3_2_93_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICRITO.2015.7359327"},{"key":"e_1_3_3_2_94_2","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2018.00047"},{"key":"e_1_3_3_2_95_2","doi-asserted-by":"crossref","unstructured":"Rochak Swami Mayank Dave and Virender Ranga. 2023. Mitigation of DDoS Attack Using Moving Target Defense in SDN. Wireless Personal Communications (2023) 1\u201315.","DOI":"10.1007\/s11277-023-10544-8"},{"key":"e_1_3_3_2_96_2","doi-asserted-by":"crossref","unstructured":"Dan Tang Siyuan Wang Boru Liu Wenqiang Jin and Jiliang Zhang. 2023. GASF-IPP: Detection and Mitigation of LDoS Attack in SDN. IEEE Transactions on Services Computing (2023).","DOI":"10.1109\/TSC.2023.3266757"},{"key":"e_1_3_3_2_97_2","doi-asserted-by":"crossref","unstructured":"Dan Tang Xiyin Wang Yudong Yan Dongshuo Zhang and Huan Zhao. 2022. ADMS: An online attack detection and mitigation system for LDoS attacks via SDN. Computer Communications 181 (2022) 454\u2013471.","DOI":"10.1016\/j.comcom.2021.10.007"},{"key":"e_1_3_3_2_98_2","doi-asserted-by":"crossref","unstructured":"Dan Tang Zhiqing Zheng Chao Yin Bing Xiong Zheng Qin and Qiuwei Yang. 2023. Ftodefender: An Efficient Flow Table Overflow Attacks Defending System in SDN. Available at SSRN 4438152 (2023).","DOI":"10.2139\/ssrn.4438152"},{"key":"e_1_3_3_2_99_2","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243759"},{"key":"e_1_3_3_2_100_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-31280-0_12"},{"key":"e_1_3_3_2_101_2","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243749"},{"key":"e_1_3_3_2_102_2","doi-asserted-by":"crossref","unstructured":"Juan Wang Ru Wen Jiangqi Li Fei Yan Bo Zhao and Fajiang Yu. 2018. Detecting and mitigating target link-flooding attacks using sdn. IEEE Transactions on Dependable and Secure Computing 16 6 (2018) 944\u2013956.","DOI":"10.1109\/TDSC.2018.2822275"},{"key":"e_1_3_3_2_103_2","doi-asserted-by":"crossref","unstructured":"Lei Wang Qing Li Yong Jiang Xuya Jia and Jianping Wu. 2018. Woodpecker: Detecting and mitigating link-flooding attacks via SDN. Computer Networks 147 (2018) 1\u201313.","DOI":"10.1016\/j.comnet.2018.09.021"},{"key":"e_1_3_3_2_104_2","doi-asserted-by":"crossref","unstructured":"Tao Wang and Hongchang Chen. 2021. A Lightweight SDN Fingerprint Attack Defense Mechanism Based on Probabilistic Scrambling and Controller Dynamic Scheduling Strategies. Security and Communication Networks 2021 (2021) 1\u201323.","DOI":"10.1155\/2021\/6688489"},{"key":"e_1_3_3_2_105_2","doi-asserted-by":"crossref","unstructured":"Pengpeng Wu Lin Yao Chi Lin Guowei Wu and Mohammad\u00a0S Obaidat. 2018. FMD: A DoS mitigation scheme based on flow migration in software-defined networking. International Journal of Communication Systems 31 9 (2018) e3543.","DOI":"10.1002\/dac.3543"},{"key":"e_1_3_3_2_106_2","doi-asserted-by":"crossref","unstructured":"Jing Xia Zhiping Cai Gang Hu and Ming Xu. 2019. An active defense solution for ARP spoofing in OpenFlow network. Chinese Journal of Electronics 28 1 (2019) 172\u2013178.","DOI":"10.1049\/cje.2017.12.002"},{"key":"e_1_3_3_2_107_2","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00017"},{"key":"e_1_3_3_2_108_2","unstructured":"Renjie Xie Jiahao Cao Qi Li Kun Sun Guofei Gu Mingwei Xu and Yuan Yang. 2022. Disrupting the SDN Control Channel via Shared Links: Attacks and Countermeasures. IEEE\/ACM Transactions on Networking (2022)."},{"key":"e_1_3_3_2_109_2","doi-asserted-by":"publisher","DOI":"10.1109\/LCNSymposium47956.2019.9000663"},{"key":"e_1_3_3_2_110_2","doi-asserted-by":"crossref","unstructured":"Meng Yue Qingxin Yan Han Zheng Zhijun Wu et\u00a0al. 2022. Cross-Plane DDoS Attack Defense Architecture Based on Flow Table Features in SDN. Security and Communication Networks 2022 (2022).","DOI":"10.1155\/2022\/7409083"},{"key":"e_1_3_3_2_111_2","doi-asserted-by":"crossref","unstructured":"Noe\u00a0M Yungaicela-Naula Cesar Vargas-Rosales Jes\u00fas\u00a0Arturo P\u00e9rez-D\u00edaz and Diego\u00a0Fernando Carrera. 2022. A flexible SDN-based framework for slow-rate DDoS attack mitigation by using deep reinforcement learning. Journal of Network and Computer Applications 205 (2022) 103444.","DOI":"10.1016\/j.jnca.2022.103444"},{"key":"e_1_3_3_2_112_2","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom\/BigDataSE.2018.00101"},{"key":"e_1_3_3_2_113_2","doi-asserted-by":"publisher","DOI":"10.1109\/Trustcom\/BigDataSE\/ICESS.2017.229"},{"key":"e_1_3_3_2_114_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-00470-5_8"},{"key":"e_1_3_3_2_115_2","doi-asserted-by":"crossref","unstructured":"Jing Zheng Qi Li Guofei Gu Jiahao Cao David\u00a0K.Y. Yau and Jianping Wu. 2018. Realtime DDoS Defense Using COTS SDN Switches via Adaptive Correlation Analysis. IEEE Transactions on Information Forensics and Security (TIFS) (2018).","DOI":"10.1109\/TIFS.2018.2805600"},{"key":"e_1_3_3_2_116_2","doi-asserted-by":"crossref","unstructured":"Jing Zheng Qi Li Guofei Gu Jiahao Cao David\u00a0KY Yau and Jianping Wu. 2018. Realtime DDoS defense using COTS SDN switches via adaptive correlation analysis. IEEE Transactions on Information Forensics and Security 13 7 (2018) 1838\u20131853.","DOI":"10.1109\/TIFS.2018.2805600"},{"key":"e_1_3_3_2_117_2","first-page":"168","volume-title":"International IFIP Conference on Optical Network Design and Modeling","author":"Zhu Jing","year":"2019","unstructured":"Jing Zhu, Marija Furdek, Carlos Natalino, Lena Wosinska, and Zuqing Zhu. 2019. How to survive targeted fiber cuts: A game theoretic approach for resilient SDON control plane design. In International IFIP Conference on Optical Network Design and Modeling. Springer, 168\u2013180."},{"key":"e_1_3_3_2_118_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4471-4588-2_3"}],"event":{"name":"CCS '25: ACM SIGSAC Conference on Computer and Communications Security","location":"Taipei Taiwan","acronym":"CCSW '25","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2025 Cloud Computing Security Workshop"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3733812.3765534","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3733812.3765534","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,1,9]],"date-time":"2026-01-09T18:56:50Z","timestamp":1767985010000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3733812.3765534"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,10,13]]},"references-count":117,"alternative-id":["10.1145\/3733812.3765534","10.1145\/3733812"],"URL":"https:\/\/doi.org\/10.1145\/3733812.3765534","relation":{},"subject":[],"published":{"date-parts":[[2025,10,13]]},"assertion":[{"value":"2025-11-14","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}