• Parikh Rashmi
• Pratik Modi

Software Defined Network (SDN) is a new network infrastructure that provides in-house network control. Unlike conventional production networks, SDN allows for greater flexibility in network management using that operating system called controller. The main advantage of having a control over the network is the separation of the transmission and controller, which provides centralized control of the network. Although centralized control is a major advantage of SDN, and it is one point of failure when made inaccessible by a Distributed Denial of Service (DDOS) attack. In this paper, we propose a way to detect DDOS attacks on SDN networks based on entropy. which shows how a DDOS attack can consume control resources and provide a solution for detecting such attacks based on the variation of the entropy of the destination IP address Now based on this entropy value, we shall block that specific port in the switch if it drops below certain threshold value, and then bring the port down. Entropy is calculated within the predefined window size to measure uncertainty in future packages. The result is then compared to a predefined limit to set normal traffic or attack traffic

SDN, Entropy, DDOS attack detection In SDN.

"DDOS attack detection using machine learning in SDN", International Journal of Emerging Technologies and Innovative Research (www.jetir.org), ISSN:2349-5162, Vol.9, Issue 5, page no.b244-b248, May-2022, Available :http://www.jetir.org/papers/JETIR2205134.pdf

"DDOS attack detection using machine learning in SDN", International Journal of Emerging Technologies and Innovative Research (www.jetir.org | UGC and issn Approved), ISSN:2349-5162, Vol.9, Issue 5, page no. ppb244-b248, May-2022, Available at : http://www.jetir.org/papers/JETIR2205134.pdf