Abstract: Software defined network capable of detecting a DDoS attack and a switch included in the same are disclosed. The software defined network comprises a controller arranged on a control plane of the software defined network, and a plurality of switches arranged on a data plane of the software defined network. Here, each of the switches collects packets received through corresponding external network and detects a DDoS attack by using the collected packets.

Abstract: Software defined network (SDN) for preventing an attack on a host tracking service and a controller included in the same are disclosed. The SDN comprises a plurality of switches arranged on a data plane of the SDN, and connected to at least one host, and a controller arranged on a control plane of the SDN, configured to control the switches and perform a host tracking service for recognizing location of at least one host connected to the switches. Here, a switch A of the switches receives a packet from a host A connected to the switch A and transmits an address information message of the host A to the controller based on the packet. The controller determines whether or not the host A is a host for performing an attack on the host tracking service, by using the address information message and previous address information of the host.

Abstract: Software defined network capable of detecting a DDoS attack and a switch included in the same are disclosed. The software defined network comprises a controller arranged on a control plane of the software defined network, and a plurality of switches arranged on a data plane of the software defined network. Here, each of the switches collects packets received through corresponding external network and detects a DDoS attack by using the collected packets.

Abstract: Software defined network for detecting a DDoS attack using artificial intelligence and a controller included in the same are disclosed. The software defined network includes a controller arranged on a control plane of the software defined network, and a plurality of switches arranged on a data plane of the software defined network. Here, each of the switches collects flow which is aggregation of packets and transmits feature information concerning the flow to the controller, and the controller detects a DDoS attack by using the feature information concerning the flow and a back propagation neural network (BPNN).