Defending against UDP Flooding by Negative Selection Algorithm Based on Eigenvalue Sets

Xu, Rui; Ma, Wenxue; Zheng, Wei

doi:10.1109/ias.2009.280

Cited by 14 publications

(6 citation statements)

References 7 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…By this analogy, packets that have the same identifier as previously detected DDOS-oriented packets are most likely to be a DDOS attack. In [17], the authors proposed a negative selection algorithm that aims to detect the legitimacy of a user based on a set of eigenvalues to resist a DDOS attack. All the aforementioned mechanism requires per-packet information such as packet identifier and IP/MAC addresses to effectively detect DDOS attacks which an attacker can manipulate.…”

Section: Related Work a Edge Computing Securitymentioning

confidence: 99%

Hierarchical Security Paradigm for IoT Multiaccess Edge Computing

Singh

Bello

Refaey

et al. 2021

IEEE Internet Things J.

View full text Add to dashboard Cite

The rise in embedded and IoT device usage comes with an increase in LTE usage as well. About 70% of an estimated 18 billion IoT devices will be using cellular LTE networks for efficient connections. This introduces several challenges such as security, latency, scalability, and quality of service, for which reason Edge Computing or Fog Computing has been introduced. The edge is capable of offloading resources to the edge to reduce workload at the cloud. Several security challenges come with Multi-access Edge Computing (MEC) such as location-based attacks, the man in the middle attacks, and sniffing. This paper proposes a Software-Defined Perimeter (SDP) framework to supplement MEC and provide added security. The SDP is capable of protecting the cloud from the edge by only authorizing authenticated users at the edge to access services in the cloud. The SDP is implemented within a Mobile Edge LTE network. Delay analysis of the implementation is performed, followed by a DoS attack to demonstrate the resilience of the proposed SDP. Further analyses such as CPU usage and Port Scanning were performed to verify the efficiency of the proposed SDP. This analysis is followed by concluding remarks with insight into the future of the SDP in MEC.

show abstract

Section: Related Work a Edge Computing Securitymentioning

confidence: 99%

Hierarchical Security Paradigm for IoT Multiaccess Edge Computing

Singh

Bello

Refaey

et al. 2021

IEEE Internet Things J.

View full text Add to dashboard Cite

show abstract

“…A UDP flooding attack is a DoS mechanism that sends a large number of UDP packets to random ports on a remote host, causing the attacked system to be forced into sending many ICMP packets, eventually leading it to be unreachable by other clients. This attack can be managed by deploying firewalls at key points in a network to filter unwanted network traffic [34,35]. Email attacks have become common crimes in cyberspace.…”

Section: Attacks On the Transport Layermentioning

confidence: 99%

On packet marking and Markov modeling for IP Traceback: A deep probabilistic and stochastic analysis

et al. 2020

View full text Add to dashboard Cite

From many years, the methods to defend against Denial of Service attacks have been very attractive from different point of views, although network security is a large and very complex topic. Different techniques have been proposed and so-called packet marking and IP tracing procedures have especially demonstrated a good capacity to face different malicious attacks. While host-based DoS attacks are more easily traced and managed, network-based DoS attacks are a more challenging threat. In this paper, we discuss a powerful aspect of the IP traceback method, which allows a router to mark and add information to attack packets on the basis of a fixed probability value. We propose a potential method for modeling the classic probabilistic packet marking algorithm as Markov chains, allowing a closed form to be obtained for evaluating the correct number of received marked packets in order to build a meaningful attack graph and analyze how marking routers must behave to minimize the overall overhead.

show abstract

“…The UDP, is an offline network protocol that provides data integrity check numbers and port numbers for addressing functions [26].…”

Section: ) the User Datagram Protocol (Udp) Flood Detectionmentioning

confidence: 99%

A Novel DDoS Floods Detection and Testing Approaches for Network Traffic based on Linux Techniques

Tahir¹,

Li²,

Ayoub³

et al. 2018

ijacsa

View full text Add to dashboard Cite

In Today's Digital World, the continuous interruption of users has affected Web Servers (WSVRs), through Distributed Denial-of-Service (DDoS) attacks. These attacks always remain a massive warning to the World Wide Web (WWW). These warnings can interrupt the accessibility of WSVRs, completely by disturbing each data processing before intercommunication properties over pure dimensions of Data-Driven Networks (DDN), management and cooperative communities on the Internet technology. The purpose of this research is to find, describe and test existing tools and features available in Linux-based solution lab design Availability Protection System (Linux-APS), for filtering malicious traffic flow of DDoS attacks. As source of malicious traffic flow takes most widely used DDoS attacks, targeting WSVRs. Synchronize (SYN), User Datagram Protocol (UDP) and Internet Control Message Protocol (ICMP) Flooding attacks are described and different variants of the mitigation techniques are explained. Available cooperative tools for manipulating with network traffic, like; Ebtables and Iptables tools are compared, based on each type of attacks. Specially created experimental network was used for testing purposes, configured filters servers and bridge. Inspected packets flow through Linux-kernel network stack along with tuning options serving for increasing filter server traffic throughput. In the part of contribution as an outcomes, Ebtables tool appears to be most productive, due to less resources it needed to process each packet (frame). It is pointed out that separate detecting system is needed for this tool, in order to provide further filtering methods with data. As main conclusion, Linux-APS, solutions provide full functionality for filtering malicious traffic flow of DDoS attacks either in standalone state or combined with detecting systems.

show abstract

Defending against UDP Flooding by Negative Selection Algorithm Based on Eigenvalue Sets

Cited by 14 publications

References 7 publications

Hierarchical Security Paradigm for IoT Multiaccess Edge Computing

Hierarchical Security Paradigm for IoT Multiaccess Edge Computing

On packet marking and Markov modeling for IP Traceback: A deep probabilistic and stochastic analysis

A Novel DDoS Floods Detection and Testing Approaches for Network Traffic based on Linux Techniques

Contact Info

Product

Resources

About