DDoS Attack Mitigation Based on Traffic Scheduling in Edge Computing- Enabled TWDM-PON

Abstract

Time-Wavelength Division Multiplexing Passive Optical Network (TWDM-PON) is considered as a promising solution of next generation PON (NG-PON). The integration of Edge Computing (EC) and TWDM-PON can satisfy the QoS requirements of delay-sensitive applications by providing storage, processing and caching capabilities at the network edge. However, with limited resource capacity, edge nodes in TWDM-PON are vulnerable to network attacks (e.g., Distributed Denial of Service attacks). Resource exhaustion in the attacked nodes easily leads to QoS degradation and even service blocking. This paper investigates how to effectively schedule traffic to mitigate the DDoS attack in EC-enabled TWDM-PON. Based on the collaboration of edge nodes, an adaptive traffic scheduling algorithm is designed to minimize the impact of DDoS attacks on delay sensitive services. The performance of the proposed algorithm is evaluated in simulation, where direct and indirect DDoS attacks are simulated. Besides, the attack duration and the number of attacked nodes are considered in the evaluation. Simulation results show that the proposed algorithm can effectively mitigate DDoS attacks in terms of reducing the QoS degradation rate and blocking rate of delay-sensitive services.

G/M/1-Based DDoS Attack Mitigation in 5G Ultradense Cellular Networks

“…Currently, relatively little research has been done on DDoS attack in edge computing, mainly in edge collaboration, attack identification, and defense [8,[22][23][24][25][26][27]. The literature [8] studied the DDoS attack mitigation problem in edge computing, proved its NP-hardness, and proposed a gametheoretic approach to solving the problem.…”

“…The literature [22] considered mitigating the DDoS attack process by balancing the incoming control plane's total traffic and inducing the attack initiator to stop the attack. The literature [23] designed an adaptive traffic scheduling algorithm to enhance collaboration among edge nodes and thus reduce DDoS attack. The literature [24] developed an intrusion detection and defense method for edge environments by learning the original data distribution through Deep Convolution Neural Network (DCNN) and building defense through Q-network algorithm.…”

Design and investigation of hybrid PON‐FSO system employing modified NZCC code under distinct weather conditions

“…Further, the security of bidirectional WDM-PON is increased by using OCDMA-PON which offers asynchronous operation, simple network control, protocol transparency, high network flexibility, and enhanced security. [3][4][5][6] Besides, OCDMA-PON is a promising technology which can be easily used for local and metropolitan area networks with most preferred spectral amplitude coding (SAC) in optical access networks. However, the performance of OCDMA-PON is primary degraded by the consequence of multi-access interference (MAI) and phase-induced intensity noise (PIIN) noise.…”

“…The capability to link directly the final subscribers to the core network with long‐reach and cost‐effectiveness, optical amplified full‐duplex WDM‐PON networks attained considerable attention to the communication field. Further, the security of bidirectional WDM‐PON is increased by using OCDMA‐PON which offers asynchronous operation, simple network control, protocol transparency, high network flexibility, and enhanced security 3‐6 . Besides, OCDMA‐PON is a promising technology which can be easily used for local and metropolitan area networks with most preferred spectral amplitude coding (SAC) in optical access networks.…”