Behavior Anomaly Detection in SDN Control Plane: A Case Study of Topology Discovery Attacks

Figure 7

Scenarios of topology discovery via man-in-the-middle attack. Scenario 1: the delay time is greater than one second; scenario 2: the delay time is less than one second, but greater than the upper bound; and scenario 3: the delay time is less than the upper bound.