An Incrementally Deployable Flow-Based Scheme for IP Traceback

Tian, Hongcheng; Bi, Jun

doi:10.1109/lcomm.2012.051512.120467

Cited by 17 publications

(10 citation statements)

References 2 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…However, so far, most approaches for IP traceback are hard to be deployed in the Internet because of deployment difficulties. An incrementally deployable approach is presented in [86] based on sampled flows for IP traceback (Sample-Trace). In SampleTrace, it is not necessary to deploy any dedicated traceback software and hardware at routers, and an AS-level overlay network is built for incremental deployment.…”

Section: B Ddos Attacks Defense Mechanisms Using Sdnmentioning

confidence: 99%

“…In SampleTrace, it is not necessary to deploy any dedicated traceback software and hardware at routers, and an AS-level overlay network is built for incremental deployment. The authors of [86] theoretically analyze the quantitative relation among the probability that a flow is successfully traced back various ASlevel hop number, independently sampling probability, and the packet number that the attacking flow comprises. Although it needs to build an AS-level overlay network for incremental deployment, it can be extended to SDN networks.…”

Section: B Ddos Attacks Defense Mechanisms Using Sdnmentioning

confidence: 99%

“…Tian et al [86] Dynamic rules updating It theoretically analyzes the quantitative relation among the probability that a flow is successfully traced back various ASlevel hop number, independently sampling probability, and the packet number that the attacking flow comprises. Handigol et al [87] Global views and centralized control NetSight, an extensible platform that captures packet histories and enables applications to concisely and flexibly retrieve packet histories of interest, is built.…”

Section: A Possible Ddos Attacks On Sdnmentioning

confidence: 99%

See 2 more Smart Citations

Software-Defined Networking (SDN) and Distributed Denial of Service (DDoS) Attacks in Cloud Computing Environments: A Survey, Some Research Issues, and Challenges

Qiao

Gong

et al. 2016

IEEE Commun. Surv. Tutorials

692

261

View full text Add to dashboard Cite

Distributed Denial of Service (DDoS) attacks in cloud computing environments are growing due to the essential characteristics of cloud computing. With recent advances in software-defined networking (SDN), SDN-based cloud brings us new chances to defeat DDoS attacks in cloud computing environments. Nevertheless, there is a contradictory relationship between SDN and DDoS attacks. On one hand, the capabilities of SDN, including software-based traffic analysis, centralized control, global view of the network, dynamic updating of forwarding rules, make it easier to detect and react to DDoS attacks. On the other hand, the security of SDN itself remains to be addressed, and potential DDoS vulnerabilities exist across SDN platforms. In this paper, we discuss the new trends and characteristics of DDoS attacks in cloud computing, and provide a comprehensive survey of defense mechanisms against DDoS attacks using SDN. In addition, we review the studies about launching DDoS attacks on SDN, as well as the methods against DDoS attacks in SDN.To the best of our knowledge, the contradictory relationship between SDN and DDoS attacks has not been well addressed in previous works. This work can help to understand how to make full use of SDN's advantages to defeat DDoS attacks in cloud computing environments and how to prevent SDN itself from becoming a victim of DDoS attacks, which are important for the smooth evolution of SDN-based cloud without the distraction of DDoS attacks.

show abstract

Section: B Ddos Attacks Defense Mechanisms Using Sdnmentioning

confidence: 99%

Section: B Ddos Attacks Defense Mechanisms Using Sdnmentioning

confidence: 99%

Section: A Possible Ddos Attacks On Sdnmentioning

confidence: 99%

See 1 more Smart Citation

Software-Defined Networking (SDN) and Distributed Denial of Service (DDoS) Attacks in Cloud Computing Environments: A Survey, Some Research Issues, and Challenges

Qiao

Gong

et al. 2016

IEEE Commun. Surv. Tutorials

692

261

View full text Add to dashboard Cite

show abstract

“…Pillutla and Arjunan [122] presents a Fuzzy self organizing maps-based DDoS mitigation (FSOMDM) technique that is ideally and suitably designed in cloud computing. Meanwhile, there are many research works [11], [26], [32], [34], [42], [58], [70], [71], [83], [91]- [93], [103], [106], [108], [111], [112], [121], [122] on moderating DDoS attack utilizing SDN. These techniques may give some assistance in future research on relieving DDos attack in cloud computing.…”

Section: B Mitigating Ddos Attack In Cloud Computingmentioning

confidence: 99%

A Survey on Distributed Denial of Service (DDoS) Attacks in SDN and Cloud Computing Environments

2019

View full text Add to dashboard Cite

Recently, software defined networks (SDNs) and cloud computing have been widely adopted by researchers and industry. However, widespread acceptance of these novel networking paradigms has been hampered by the security threats. Advances in the processing technologies have helped attackers in increasing the attacks too, for instance, the development of Denial of Service (DoS) attacks to distributed DoS (DDoS) attacks which are seldom identified by conventional firewalls. In this paper, we present the state of art of the DDoS attacks in SDN and cloud computing scenarios. Especially, we focus on the analysis of SDN and cloud computing architecture. Besides, we also overview the research works and open problems in identifying and tackling the DDoS attacks. INDEX TERMS Software defined network, cloud computing, distributed denial of service attacks (DDoS), DDoS attack and detection, experimental setup, survey.

show abstract

“…Leveraging the dynamic rule update feature of SDN, Tian et al [28] analyzes the probability that a flow is traced back across multiple Autonomous System (AS) hops by sampling the probability and the signature of the attack traffic. NetSight captures packet histories to investigate events of interest to trace the network state [29].…”

Section: Destination-based Mechanismsmentioning

confidence: 99%

Dolus : cyber defense using pretense against DDoS attacks in cloud platforms

Neupane¹

View full text Add to dashboard Cite

Cloud-hosted services are being increasingly used in online businesses in e.g., retail, healthcare, manufacturing, entertainment due to benefits such as scalability and reliability. These benefits are fueled by innovations in orchestration of cloud platforms that make them totally programmable as Software Defined everything Infrastructures (SDxI). At the same time, sophisticated targeted attacks such as Distributed Denial-of-Service (DDoS) are growing on an unprecedented scale threatening the availability of online businesses. In this thesis, we present a novel defense system called Dolus to mitigate the impact of DDoS attacks launched against high-value services hosted in SDxI-based cloud platforms. Our Dolus system is able to initiate a pretense in a scalable and collaborative manner to deter the attacker based on threat intelligence obtained from attack feature analysis in a two-stage ensemble learning scheme. Using foundations from pretense theory in child play, Dolus takes advantage of elastic capacity provisioning via quarantine virtual machines and SDxI policy co-ordination across multiple network domains. To maintain the pretense of false sense of success after attack identification, Dolus uses two strategies: (i) dummy traffic pressure in a quarantine to mimic target response time profiles that were present before legitimate users were migrated away, and (ii) Scapy-based packet manipulation to generate responses with spoofed IP addresses of the original target before the attack traffic started being quarantined. From the time gained through pretense initiation, Dolus enables cloud service providers to decide on a variety of policies to mitigate the attack impact, without disrupting the cloud services experience for legitimate users. We evaluate the efficacy of Dolus using a GENI Cloud testbed and demonstrate its real-time capabilities to: (a) detect DDoS attacks and redirect attack traffic to quarantine resources to engage the attacker under pretense, and (b) coordinate SDxI policies to possibly block DDoS attacks closer to the attack source(s).

show abstract

An Incrementally Deployable Flow-Based Scheme for IP Traceback

Cited by 17 publications

References 2 publications

Software-Defined Networking (SDN) and Distributed Denial of Service (DDoS) Attacks in Cloud Computing Environments: A Survey, Some Research Issues, and Challenges

Software-Defined Networking (SDN) and Distributed Denial of Service (DDoS) Attacks in Cloud Computing Environments: A Survey, Some Research Issues, and Challenges

A Survey on Distributed Denial of Service (DDoS) Attacks in SDN and Cloud Computing Environments

Dolus : cyber defense using pretense against DDoS attacks in cloud platforms

Contact Info

Product

Resources

About