Bohatei – Free DDoS defense tool

Bohatei, a free DDoS defense tool that works using SDN and NFV. This tool defense 500Gbps DDoS attack and successfully handle any dynamic attack scenarios.

Features and File information:

• An implementation of the FlowTags framework for the OpenDaylight controller
• An implementation of the resource management algorithms
• A topology file that was used to simulate an ISP topology
• Scripts that facilitate functions such as spawning, tearing down and retrieving the topology.
• Scripts that automate and coordinate the components required for the usecases examined.

The folder “frontend” contains required files for the web interface. For the experiments performed, we used a set of VM images that contain implementations of the strategy graphs for each type of attack (SYN Flood, UDP Flood, DNS Amplification and Elephant Flow). Those images will become available at a later stage.

The tools that were used for those strategy graphs are the following:

• Bro
• Snort
• Balancer
• Iptables
• Iperf
• Custom scripts to simulate the attacks

Short video about Bohatei

For more information about Bohatei you can visit Github. You can check out Bohatei papers here and slides here.

Bohatei (from github)