{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,1]],"date-time":"2026-02-01T09:39:06Z","timestamp":1769938746795,"version":"3.49.0"},"reference-count":32,"publisher":"Institute of Electronics, Information and Communications Engineers (IEICE)","issue":"4","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEICE Trans. Inf. & Syst."],"published-print":{"date-parts":[[2016]]},"DOI":"10.1587\/transinf.2015icp0016","type":"journal-article","created":{"date-parts":[[2016,3,31]],"date-time":"2016-03-31T22:20:58Z","timestamp":1459462858000},"page":"850-859","source":"Crossref","is-referenced-by-count":13,"title":["Defending DDoS Attacks in Software-Defined Networking Based on Legitimate Source and Destination IP Address Database"],"prefix":"10.1587","volume":"E99.D","author":[{"given":"Xiulei","family":"WANG","sequence":"first","affiliation":[{"name":"PLA University of Science and Technology"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ming","family":"CHEN","sequence":"additional","affiliation":[{"name":"PLA University of Science and Technology"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Changyou","family":"XING","sequence":"additional","affiliation":[{"name":"PLA University of Science and Technology"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Tingting","family":"ZHANG","sequence":"additional","affiliation":[{"name":"PLA University of Science and Technology"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"532","reference":[{"key":"1","doi-asserted-by":"crossref","unstructured":"[1] S. Jain, A. Kumar, S. Mandal, et al., \u201cB4: experience with a global-Deployed Software Define WAN,\u201d Proc. SIGCOMM'13, Hong Kong, China, Aug. 2013.","DOI":"10.1145\/2486001.2486019"},{"key":"2","doi-asserted-by":"crossref","unstructured":"[2] M. Ghobadi, S.H. Yeganeh, and Y. Ganjali, \u201cRethinking end-to-end congestion control in software-defined networks,\u201d Proc. ACM Workshop on Hot Topic in Networks, 8 (4), pp.61-66, 2012.","DOI":"10.1145\/2390231.2390242"},{"key":"3","unstructured":"[3] N. Handigol, S. Seetharaman, M. Flajslik, N. Mckeown, and R.Johari, \u201cPlug-n-Server: load-balancing web traffic using OpenFlow,\u201d Proc. SIGCOMM 2009 (Demo), Barcelona, Aug. 2009."},{"key":"4","doi-asserted-by":"crossref","unstructured":"[4] M. Casado, M.J. Freedman, J. Pettit, J. Luo, N. Gude, N.McKeown, and S. Shenker, \u201cRethinking enterprise network control,\u201d IEEE\/ACM Trans. Netw., vol.17, no.4, pp.1270-1283, 2009.","DOI":"10.1109\/TNET.2009.2026415"},{"key":"5","doi-asserted-by":"crossref","unstructured":"[5] S.A. Mehdi, J. Khalid, and S.A. Khayam, \u201cRethinking traffic anomaly detection using software defined networking,\u201d Proc. 14th international conference on Recent Advances in Intrusion Detection, vol.9, pp.161-180, Springer-Verlag, 2011.","DOI":"10.1007\/978-3-642-23644-0_9"},{"key":"6","doi-asserted-by":"crossref","unstructured":"[6] D. Kreutz, F.M. Ramos, and P. Verissimo, \u201cTowards secure and dependable software-defined networks,\u201d Proc. HotSDN'13, Hong Kong, China, Aug. 2013.","DOI":"10.1145\/2491185.2491199"},{"key":"7","doi-asserted-by":"crossref","unstructured":"[7] S. Shin and G. Gu, \u201cAttacking software-defined networks: a first feasibility study,\u201d Proc. HotSDN'13, Hong Kong, China, Aug. 16, 2013.","DOI":"10.1145\/2491185.2491220"},{"key":"8","doi-asserted-by":"crossref","unstructured":"[8] N.-N. Dao, J. Park, M. Park, and S. Cho, \u201cA feasible method to combat against DDoS attack in SDN network,\u201d Proc. International Conference on Information Networking (ICOIN), pp.309-311, 12-14 Jan. 2015.","DOI":"10.1109\/ICOIN.2015.7057902"},{"key":"9","doi-asserted-by":"crossref","unstructured":"[9] N. McKeown, T. Anderson, H. Balakrishnan, G. Parulkar, L.Peterson, J. Rexford, S. Shenker, and J. Turner, \u201cOpenFlow: enabling innovation in campus networks,\u201d ACM SIGOCMM Computer Communication Review, vol.38, no.2, pp.69-74, 2008.","DOI":"10.1145\/1355734.1355746"},{"key":"10","doi-asserted-by":"crossref","unstructured":"[10] J. Li, S. Berg, M. Zhang, P. Reiher, and T. Wei, \u201cDrawBridge \u2014 software-defined DDoS resistant traffic engineering,\u201d Proc.SIGCOMM'14, Chicago, IL, USA, Aug. 2014.","DOI":"10.1145\/2619239.2631469"},{"key":"11","doi-asserted-by":"crossref","unstructured":"[11] S. Lim, J. Ha, H. Kim, Y. Kim, and S. Yang, \u201cA SDN-Oriented DDoS blocking scheme for botnet-based attacks,\u201d Proc. 6th Conference on Ubiquitous and Future Networks (ICUFN), pp.63-68, 8-11 July 2014.","DOI":"10.1109\/ICUFN.2014.6876752"},{"key":"12","doi-asserted-by":"crossref","unstructured":"[12] E.S. Page, \u201cContinuous inspection scheme,\u201d Biometrika, vol.41, no.1, pp.100-115, 1954.","DOI":"10.1093\/biomet\/41.1-2.100"},{"key":"13","doi-asserted-by":"crossref","unstructured":"[13] B.E. Brodsky and B.S. Darkhovsky, Nonparametric methods in change-point problems, Kluwer Academic Publishers, 1993.","DOI":"10.1007\/978-94-015-8163-9"},{"key":"14","unstructured":"[14] OpenFlow Switch Specification V1.4.0. https:\/\/www.opennetworking.org\/images\/stories\/downloads\/sdn-resources\/onf-specifications\/openflow\/openflow-switch-v1.3.5.pdf."},{"key":"15","unstructured":"[15] Tribe Flood Network 2000 (TFN2K), http:\/\/mixter.void.ru\/papers.html."},{"key":"16","unstructured":"[16] MIT Lincoln Laboratory, DARPA intrusion detection scenario specific datasets 2000, http:\/\/www.ll.mit.edt\/IST\/."},{"key":"17","unstructured":"[17] Tcpreplay tools, http:\/\/tcpreplay.synin.net\/"},{"key":"18","unstructured":"[18] About POX, http:\/\/www.noxrepo.org\/pox\/about-pox."},{"key":"19","unstructured":"[19] Open vSwitch, http:\/\/openvswitch.org\/."},{"key":"20","doi-asserted-by":"crossref","unstructured":"[20] R. Braga, E. Mota, and A. Passito, \u201cLightweight DDoS flooding attack detection using NOX\/OpenFlow,\u201d Proc. 35th Conf. on Local Computer Networks (LCN), Denver, pp.408-415, IEEE Press, 2010.","DOI":"10.1109\/LCN.2010.5735752"},{"key":"21","doi-asserted-by":"crossref","unstructured":"[21] D.K.Y. Yau, J.C.S. Lui, F. Liang, and Y. Yam, \u201cDefending against distributed denial-of-service attacks with max-min fair server-centric router throttles,\u201d IEEE\/ACM Trans. Netw., vol.13, no.1, pp.29-42, 2005.","DOI":"10.1109\/TNET.2004.842221"},{"key":"22","unstructured":"[22] K.J. Houle, G.M. Weaver, N. Long, and R. Thomas, \u201cTrends in denial of service attack technology,\u201d Technical Report, CERT and CERT Coordination Center, 2001."},{"key":"23","doi-asserted-by":"crossref","unstructured":"[23] J. Jung, B. Krishnamurthy, and M. Rabinovich, \u201cFlash crowds and denial of service attacks: Characterization and implications for CDNs and web sites,\u201d Proc. International World Wide Web Conference, pp.252-262, May 2002.","DOI":"10.1145\/511446.511485"},{"key":"24","doi-asserted-by":"crossref","unstructured":"[24] P. Tao, C. Leckie, and K. Ramamohanarao, \u201cProtection from distributed denial of service attacks using history-based IP Filtering,\u201d Proc. IEEE International Conference on ICC'03, Communications, 1(1): pp.482-486, 2003.","DOI":"10.1109\/ICC.2003.1204223"},{"key":"25","unstructured":"[25] A.N. Shiryaev, \u201cThe problem of the most rapid detection of a disturbance in a stationary process,\u201d Soviet Math. Dokl, vol.2, pp.795-799, 1961."},{"key":"26","doi-asserted-by":"crossref","unstructured":"[26] A.N. Shiryaev, \u201cOn optimum methods in quickest detection problems,\u201d Theory of Probability and Its Applications, vol.8, no.1, pp.22-46, Jan. 1963.","DOI":"10.1137\/1108002"},{"key":"27","doi-asserted-by":"crossref","unstructured":"[27] B.H. Bloom, \u201cSpace\/Time trade-offs in hash coding with allowable errors,\u201d Commun. ACM, vol.13, no.7, pp.422-426, 1970.","DOI":"10.1145\/362686.362692"},{"key":"28","doi-asserted-by":"crossref","unstructured":"[28] H. Liu and M.S. Kim, \u201cReal-time detection of stealthy DDoS attacks using time-series decomposition,\u201d Proc. IEEE International Conference on ICC, pp.1-6, 23-27 May 2010.","DOI":"10.1109\/ICC.2010.5501975"},{"key":"29","unstructured":"[29] J. Kang, Z. Zhang, and J. Ju, \u201cProtect e-commerce against DDoS attacks with improved D-WARD Detection System,\u201d Proc. IEEE Conference on e-Technology, e-Commerce and e-Service, pp.100-105, 2005."},{"key":"30","doi-asserted-by":"crossref","unstructured":"[30] D. Kotani and Y. Okabe, \u201cA packet-in message filtering mechanism for protection of control plane in OpenFlow Networks,\u201d Proc. 10th ACM\/IEEE Symposium on Architecture for networking and Communication, pp.29-40, Oct. 2014.","DOI":"10.1145\/2658260.2658276"},{"key":"31","doi-asserted-by":"crossref","unstructured":"[31] P. Tao, C. Leckie, and K. Ramamohanarao, \u201cProactively detecting distributed denial of service attacks using source IP address monitoring,\u201d Lecture Notes in Computer Science, vol.3042, pp.771-782, 2004.","DOI":"10.1007\/978-3-540-24693-0_63"},{"key":"32","doi-asserted-by":"crossref","unstructured":"[32] S. Scott-Hayward, G. O'Callaghan, and S. Sezer, \u201cSDN security: a survey,\u201d Proc. IEEE SDN4FNS, 2013.","DOI":"10.1109\/SDN4FNS.2013.6702553"}],"container-title":["IEICE Transactions on Information and Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.jstage.jst.go.jp\/article\/transinf\/E99.D\/4\/E99.D_2015ICP0016\/_pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,2]],"date-time":"2025-06-02T02:12:14Z","timestamp":1748830334000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.jstage.jst.go.jp\/article\/transinf\/E99.D\/4\/E99.D_2015ICP0016\/_article"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016]]},"references-count":32,"journal-issue":{"issue":"4","published-print":{"date-parts":[[2016]]}},"URL":"https:\/\/doi.org\/10.1587\/transinf.2015icp0016","relation":{},"ISSN":["0916-8532","1745-1361"],"issn-type":[{"value":"0916-8532","type":"print"},{"value":"1745-1361","type":"electronic"}],"subject":[],"published":{"date-parts":[[2016]]}}}