Defense4All; Defense4All Overview - Inocybe Opendaylight User Manual

User Guide

6. Defense4All

Table of Contents

Defense4All Overview ................................................................................................... 30

Defense4All User Interface ............................................................................................ 31

Defense4All Overview

Defense4All is an SDN application for detecting and mitigating DDoS attacks. The figure
below depicts the positioning of Defense4All in OpenDaylight environment.
Figure 6.1. Defense4All Overview
The application communicates with OpenDaylight Controller through the ODC north-
bound REST API.
Through the REST API Defense4All performs the following tasks:
1. Monitoring behavior of protected traffic - the application sets flow entries in selected
network locations to read traffic statistics for each of the PNs (aggregating statistics
collected for a given PN from multiple locations).
2. Diverting attacked traffic to selected AMSs – the application set flow entries in selected
network locations to divert traffic to selected AMSs. When an attack is over the
application removes these flow entries, thus returning to normal operation and traffic
monitoring.
Defense4All can optionally communicate with the defined AMSs. For example: To
dynamically configure them, monitor them or collect and act upon attack statistics from
30