SDN BASED PACKET INJECTION ATTACK PREVENTION IN CLOUD ENVIRONMENTS

Software-Defined Network (SDNs) architecture can easily be attacked by a malicious user in order to prevent an acceptable level of service. This SDN architecture is a novel network architecture which contains both control plane and data plane has been decoupled with each other. It is not similar to traditional networking architecture because it acts as the centralized controller so that it provides a global view as well as the environment applications can be programmable interfaced with the architecture. Many researches addressed about various kinds of threats such as spoofing, tampering, information disclosure, denial of service, flow table overloading and so on. The main goal of novel SDN design is to solve three security threats such as flow table overloading, spoofing attack, and isolating anomaly packets from normal packets. The increased reach of cloud computing is achieved in the field of computing devices. The major challenge in cloud environment is to secure the reliable data from unauthorized users. Therefore, the most hot research topic is to secure the SDN components by improving the SDN architecture. In this paper, we propose SDN based early pollution detection algorithm able to spot the presence of an attack while fetching the data from cloud storage during the normal disk reading operations. Also to detect the polluted content hashing methods are used. A web based intrusion detection and prevention system using policies. User data confidentiality and integrity has been gained by protecting user data privacy.