NSDDOS

Production-grade AI-powered DDoS detection and mitigation platform for software-defined networks and IoT environments.

NSDDOS packages telemetry collection, live attack simulation, SDN-aware mitigation, runtime verification, and SOC-style observability into one operator-facing workflow. It is built for local labs, demos, research validation, and repeatable release engineering around Floodlight, sFlowRT, Mininet, and Open vSwitch.

Features

• Real-time DDoS attack detection
• Floodlight SDN controller integration
• sFlowRT telemetry engine
• Mininet virtual topology orchestration
• Open vSwitch programmable mitigation
• Live SOC-style operator dashboard
• ML-based anomaly detection engine
• Automated attack simulation
• Runtime health, doctor, and verification commands
• Public demo sharing through Cloudflare Tunnel

Installation

Install from PyPI:

pip install nsddos

Install from source for development:

git clone https://github.com/ns7523/nsddos.git
cd nsddos
python -m venv .venv
source .venv/bin/activate
pip install -e .[dev]

Requirements:

• Python 3.11+
• Docker Engine
• Docker Compose v1 (docker-compose) or v2 (docker compose)
• Local runtime assets bundled in repo or downloaded through nsddos bootstrap download

Full setup notes: docs/installation.md

Quick Start

nsddos setup
nsddos start
nsddos health --verbose

Run live end-to-end showcase:

nsddos demo

Expose dashboard publicly for demos:

nsddos ui expose

Architecture

flowchart TD
    user["User / Operator"] --> dash["NSDDOS Dashboard"]
    dash --> flood["Floodlight Controller"]
    dash --> sflow["sFlowRT Telemetry"]
    dash --> detector["Detection + ML"]
    flood --> ovs["Open vSwitch Mitigation Plane"]
    sflow --> detector
    detector --> ovs
    ovs --> mininet["Mininet Topology"]
    mininet --> h1["h1"]
    mininet --> h2["h2"]
    mininet --> h3["h3"]

More detail: docs/architecture.md

Commands

Core workflow:

nsddos health
nsddos doctor
nsddos start
nsddos demo
nsddos ui start
nsddos ui expose
nsddos lab start
nsddos runtime attack-live

CLI reference: docs/cli-reference.md

Screenshots

Overview

Lab Console

Topology

Documentation

• Installation Guide
• Architecture
• CLI Reference
• Troubleshooting
• Developer Guide
• Runtime Assets

License

MIT. See LICENSE.