OverWatch: A Cross-Plane DDoS Attack Defense Framework with Collaborative Intelligence in SDN

Algorithm 1

Lightweight flow monitoring algorithm.

globals: //Vector List of DDoS attack feature metrics

//Current time

//Number of Vectors in the list

while 1 do

if    then

Update the list of history records.

for all    do

Use WMA to calculate the prediction value

for next time interval:

Use ratio metric to compare prediction

value and actual value.

Calculate ideal value and standard deviation

for ratio metric.

Use Pauta criterion to calculate the prediction range:

end for

if each is out of the (, ) range then

Trigger alert to controller;

else

Continue;

end if

end if

end while