Resilience of SDN Controllers to Denial-of-Service (DoS) Attacks: A Fault Tolerance Perspective

Abstract

Software-Defined Networking (SDN) has transformed modern network management by decoupling the control plane from the data plane and centralizing network intelligence within SDN controllers. While this architecture enhances flexibility, programmability, and resource management, it simultaneously introduces a critical vulnerability: the controller becomes a high-value target for Denial-of-Service (DoS) attacks. Successful attacks against the controller can degrade network performance, disrupt flow management, and compromise service availability. Consequently, resilience against DoS attacks has become a fundamental requirement for SDN deployments. This paper examines SDN controller resilience from a fault tolerance perspective, emphasizing mechanisms that enable controllers to maintain operational integrity despite malicious traffic floods and overload conditions. The study reviews major attack vectors, fault tolerance strategies, resilience mechanisms, theoretical models, performance metrics, and emerging research directions. The findings indicate that combining controller replication, intelligent load balancing, anomaly detection, traffic filtering, and rapid recovery mechanisms significantly improves controller survivability under adverse conditions. The paper further discusses challenges associated with scalability, consistency, and synchronization in distributed SDN environments and highlights future opportunities involving artificial intelligence, self-healing architectures, and edge-assisted control frameworks.