Vulnerability analysis of an emulated SDN network by flooding HTTP and TCP packets

Abstract

This article implements a topology of an SDN network in the Mininet emulator where a web server is implemented in one of the devices in order to execute a denial-of-service attack by sending mass packets with the aim of analyze what vulnerabilities can be found in the data and control plane of the SDN network architecture. The results were captured with the Wireshark tool to analyze the packets that enter the controller and command line to obtain data such as RTT (Round-Trip Time) and the connection speed with the server, as a result, a decrease in performance was evidenced. of the network in terms of the connection speed with the server was less than 40Mbps and the RTT with values up to 352ms that takes a packet to go and return when the flood of packets is executing in the network.

Keywords

• attack
• controller
• mininet
• rtt
• software defined networks
• vulnerabilities