A Secure Scheme to Counter the Man in the Middle Attacks in SDN Networks-Based Domain Name System

Internet and computer networks are vulnerable to cyber-attacks which compromise the services they provide to facilitate the management of data and users. The domain name system (DNS) is the Internet service that translates domain names and computer IP addresses and IPs to domain names. DNS is sometimes a victim of attacks that are difficult to detect and prevent because they are not only very stealthy but also conceal its proper functioning. Among the attacks that DNS is subject to, there are man-in-the-middle (MITM) attacks. Traditional networks that centralize all network functions in a single device complicate the detection and protection of systems against these attacks challenging. Software-defined networking (SDN) is a technology that is widely used to address many traditional network problems such as security and network architectures. Therefore, in this paper, we propose a scheme designed to detect and block man-in-the-middle attacks based on a newly defined architecture. The effectiveness of our secured solution is evaluated in an SDN architecture where an Address Resolution Protocol spoofing MITM attack is generated for the evaluation purpose. The results of our simulations show that we can effectively detect the attack and the performance evaluation of our approach shows that the proposed solution is effective in terms of security, implementation cost and resource consumption. We then recommend the use of our proposed solution to address the MITM attacks in SDN networks-based Domain Name System.

@article{Pangop2024,
  title     = {A Secure Scheme to Counter the Man in the Middle Attacks in SDN Networks-Based Domain Name System},
  journal   = {International Journal of Advanced Computer Science and Applications},
  volume    = {15},
  number    = {10},
  year      = {2024},
  publisher = {The Science and Information Organization},
  author    = {Frank Manuel Vuide Pangop and Miguel Landry Foko Sindjoung and Mthulisi Velempini},
  doi       = {10.14569/IJACSA.2024.01510121},
  url       = {https://doi.org/10.14569/IJACSA.2024.01510121}
}