Defending Application Layer DDoS Attacks via Multidimensional Parallelotope

Abstract

The Internet is more and more integrated into people’s life; because of the complexity and fragility of the network environment, network attack presents a more and more serious trend. Application Layer DDoS (AL-DDoS) attack is the most complex form of DDoS attack, which is hindering the availability for the legitimate users by taking up a large number of requests of web server. The paper introduced the concept of behavior utility to portray the network. The concept of attack and defense utility was defined by a specific property which was the manifestation of the network risk after the offset of attack and defense. In the utility model, traffic metrics were mapped to the multidimensional parallelotope in the Euclidean space to express as a diagonal matrix. To determine the threshold status, the defense strategies of load balancing and limiting the maximum number of connections were used with different attack scales. Finally, the attack and defense utility value was calculated to evaluate the network risk level. The proposed method can master the capacity of network system against each attack means and the defense capability of network system. Its availability and accuracy are verified by comparing with the relevant works.

Attack in SDN Based Distributed Denial of Service

“…Flooding attacks detection in traffic of backbone networks requires generally the analysis of a huge amount of data with high accuracy F and low complexity. In this paper [7], we propose a new scheme to detect flooding attacks in high speed networks. The proposed mechanism is based on the application of Power Divergence measures over Sketch data structure.…”

“…Turing test schemes based on graphical puzzles have been proposed to address the above problem on the cost of additional delays [5], [6]. Unfortunately, since a few milliseconds extra delay may cause users to abandon a web page early [7], [8], applying such mechanism to all users will negatively affect the Quality of Experience (QoE). Therefore, an effective defense system should mitigate app-layer DDoS attacks as soon as possible while posing a limited impact on the access of normal users.…”

“…Distributed Denial-of-Service (DDoS) is a prominent issue in Network Security and it is extremely horrible threats for datacenters, made the system unable to serve for two days [8]. In 2000, many media and famous companies were attacked, such as eBay, CNN, Yahoo and Amazon [7]. Usually, the DDoS attacker attacks such big companies are to make them suffer from financial losses.…”

“…Moreover, there is also evidence of politically driven attack such as the most famous attack on White House Website in 2002 [6]. Also, many governmental websites are shut down during the Gezi Park revolt in Turkey [7]. There are two ways to prevent the DDoS attack, namely, machine learning and Bloom Filter.…”

Can Multipath TCP Be Robust to Cyber Attacks? A Measuring Study of MPTCP with Active Queue Management Algorithms

“…Due to the large-scale deployment and application of emerging information technologies such as the Internet of ings (IoT) and cloud computing, a growing trend of various network attacks is presented, especially low-rate distributed denial of service (LDDoS) attacks. It has been pointed out by more and more network security research studies that LDDoS attacks are more prevalent and difficult to detect in the network, and it is recognized as one of the most major threats for network services [6,7].…”