A Cost-Effective MTD Approach for DDoS Attacks in Software-Defined Networks

Abstract

Protecting large-scale networks, especially Software-Defined Networks (SDNs), against distributed attacks in a costeffective manner plays a prominent role in cybersecurity. One of the pervasive approaches to plug security holes and prevent vulnerabilities from being exploited is Moving Target Defense (MTD), which can be efficiently implemented in SDN as it needs comprehensive and proactive network monitoring. The critical key in MTD is to shuffle the least number of hosts with an acceptable security impact and keep the shuffling frequency low. In this paper, we have proposed an SDN-oriented Cost-effective Edge-based MTD Approach (SCEMA) to mitigate Distributed Denial of Service (DDoS) attacks with a lower cost by shuffling an optimized set of hosts have the highest number of connections to the critical servers. These connections are named edges from a graph-theoretical point of view. We have designed a system based on SCEMA and simulated it in Mininet. The results show that SCEMA has lower (52.58 52.58 52.58%) complexity than the previous related MTD methods with improving the security level by 14.32 14.32 14.32%.

Encryption as a Service for IoT: Opportunities, Challenges, and Solutions

“…Launching a Denial of Service (DoS) or a Distributed DoS (DDoS) attack on GC, the adversaries may target the availability of the crypto components. As a result, a detailed security analysis must be conducted to demonstrate the resiliency of an EaaS platform against DoS/DDoS attacks [64].…”

Enhancing 5G Network Slicing: Slice Isolation Via Actor-Critic Reinforcement Learning with Optimal Graph Features

“…When the adversary performs a Dos/DDoS attack against the substrate nodes, all the mapped slices on that substrate node will be affected. Since all the virtual nodes of a request must collaborate, losing one of them leads to the failure of the whole request [3,24]. As a result, a good mapping solution must map the virtual nodes so that attacking one of the substrate nodes causes the lowest possible number of slices to be unavailable.…”

Cybersecurity Fusion: Leveraging Mafia Game Tactics and Reinforcement Learning for Botnet Detection

“…A Distributed Denial of Service (DDoS) attack is launched against one of the critical servers in this network [9]. Among those who have connected with this server, some are legal nodes, and others are bots [10,11,12]. The state-of-the-art botnet detection techniques first detect the bots and then block them.…”