 69-72 detection/mitigation interface benefits 6-7 distributed denial-of-service 96-97 challenges programmable attack checkpoint system 86-87 software defined security service components 79-80 (SENSS) controller architecture 98 apps on 77-78 DDoS 100-101 deployment 75-76 messages 99 data plane 78-80 prefix hijacking description 10 route modification host-based 31 route query 99-100 management traffic filter anomaly detection 80-82 traffic query controller placement 86-89 victim-oriented 97-98 downstream vs. upstream nodes service function chaining (SFC) 95-96 chain termination function 113, 114 failure recovery 84-86 framework 113 network measurement 82-84 monitoring node vs. link failure 94-95 inline service chaining 122, 124 switch connectivity 89-94 monitor point selection algorithm management and network orchestration 47 multiple service chains 125-126 motivations 68-69 Index software-defined networking (SDN) total cost of ownership (TCO) (contd.) traffic engineering (TE) network routers and switches architecture security attack prevention control node design 104-105 SENSS architecture 98-100 hierarchical control structure SENSS uses 100-101 103-104 switch-based 29-31 scalability benefit technical idea of design challenges 105-106 traffic engineering (TE) software-defined solution design challenges 105-106 solution overview 106-107 TE architecture 103-105 traffic filter 100 TE solution overview 106-107 traffic flow virtualization use cases of 72-73 traffic query 99,100 software defined security service (SENSS) traffic steering process 116-117 architecture 98 DDoS 100-101 messages 99 union file system (UFA) prefix hijacking user-level controller route modification route query 99-100 traffic filter virtual circuits traffic query virtual home environment 43-44 software-defined TE solution (SdnTE) virtualization 102-104 and cloud-assisted PC 138-141 source-code-based modeling host virtualization extraction 56-57 containers 21-22 load balancer code 53-55 hardware-level virtualization models 55-56 20-21 NF state an