Scalable Node-Centric Route Mutation for Defense of Large-Scale Software-Defined Networks

Figure 3

An illustration of the proposed application of signature matching to route mutation, where and are the historically accumulative traffic volumes of node at the current and the previous instants, respectively, and and are the averages of the historically accumulative traffic volumes at the current and the previous instants, respectively. and are the results of the route mutation at the previous instant. and are the values before the current route mutation is executed.

(a) Historically accumulative traffic volumes of nodes when Algorithm 1 starts

(b) Historically accumulative traffic volumes of nodes before Algorithm 1 terminates

(c) Historically accumulative traffic volumes of nodes after Algorithm 1 terminates