DDoS Detection on AtlanticWave SDX via a Facility Port Using P4 INT and SDX Client ( public ) ( AtlanticWave-SDX )
Real-time DDoS detection by stitching a FABRIC slice to AmLight via an FIU facility port and orchestrating L2VPNs with sdxclient (AtlanticWave-SDX). A P4 switch tracks packet counts and source/destination IP addresses in registers and emits digests; the controller aggregates features, ranks candidates, and installs mitigation rules via P4Runtime. Streaming stats (e.g., mean, stdev, unique sources) feed a lightweight ML model to classify flows as normal vs. attack, yielding a reproducible workflow for P4 analytics on live AmLight data. Cover VLAN binding, P4Runtime updates, digest streaming, and lightweight ML classification, yielding a reproducible pipeline on AmLight-connected research networks.
18
2
(5)
1
Oct. 14, 2025, 1:54 p.m.
Oct. 14, 2025, 1:54 p.m.
Versions
| 2025-10-14 | Oct. 14, 2025, 1:54 p.m. | urn:fabric:contents:renci:d8cc696d-108a-4f0b-925b-ea6826bf949a | 2 | download |
Authors
- Hadi Sahin , Florida International University (absahin@fiu.edu)
- Italo Valcy Da Silva Brito , Florida International University (idasilva@fiu.edu)
- Jeronimo Aguiar Bezerra , Florida International University (jbezerra@fiu.edu)
- Julio Ibarra , Florida International University (julio@fiu.edu)
- Luis Marin Vera , Florida International University (lmarinve@fiu.edu)
- Mert Cevik , University of North Carolina at Chapel Hill (email is private)
- MUHAMMAD USMAN AZIZ , Florida International University (muhaziz@fiu.edu)