Abstract

Context Within the realm of network security, Software-Defined Networks (SDNs) play a crucial role, providing heightened resilience and dynamic control. However, their flexibility exposes them to an increasing threat, particularly Distributed-Denial-of-Service (DDoS) attacks, known for their pervasive and destructive nature.Objectives This research addresses the vulnerability of SDNs to DDoS-attacks, focusing on the real time detection-&-mitigation of multiple attacks leading to elephant flows (EFs). The main objectives include developing a novel approach, RT-DMMDE, utilizing sFlow-RT's flow statistics for anomaly detection, and creating a script for the swift identification and mitigation of DDoS-induced anomalies.Methods and Design The research employs a comprehensive methodology, utilizing sFlow-RT's flow statistics for anomaly detection and integrating a script designed for real time identification and mitigation of DDoS anomalies. The design emphasizes agility in decision-making and the automated application of targeted mitigation measures.Results Through the deployment of RT-DMMDE, the research achieves swift identification and mitigation of multiple DDoS-attacks, preventing the formation of EFs within SDNs. Real time decision-making and automated mitigation measures are demonstrated, showcasing thethe adequacy of the proposed-solution in-contrast to early solutions in safeguarding critical network resources.Conclusion The research significantly contributes to fortifying network security in the digital age, presenting RT-DMMDE as a robust defense mechanism against evolving DDoS threats within the SDN context. As the guardian of SDNs, RT-DMMDE ensures uninterrupted operation even in the face of multiple simultaneous attacks, marking a pivotal advancement in enhancing the overall security posture of SDNs in the contemporary cyber threat landscape