Behavior Anomaly Detection in SDN Control Plane: A Case Study of Topology Discovery Attacks

<div>Proposed LLDP packet format. The packet content contains 6 bytes of authentication information (verification key) and 12 bytes of timestamp (TIMESTAMP).</div>

Wireless Communications and Mobile Computing

fig6

Figure 6

Figure 6: Behavior Anomaly Detection in SDN Control Plane: A Case Study of Topology Discovery Attacks 