EDoS Armor: A cost effective economic denial of sustainability attack mitigation framework for e-commerce applications in cloud environments

Masood, Muddassar; Anwar, Zahid; Syed, Ali Raza; Hur, Muhammad Ali

doi:10.1109/inmic.2013.6731321

Cited by 40 publications

(22 citation statements)

References 7 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…They allow anticipating harmful situations facilitating proactive responses, but must be complemented by reactive solutions. Major efforts towards mitigation EDoS threats focus on deploying access control mechanisms, as is the case of Crypto-puzzles [30][31][32], Graphical Turing tests [26,33] or reputation systems [34,35]. They are effective, but as highlighted in [23], resolving hard tests or deploying complex reputation schemes consume additional resources at both client and server sides, and significantly affect the Quality of Experience (QoE) on the protected environment.…”

Section: Countermeasuresmentioning

confidence: 99%

“…Because the performed research focused only on detect the threats, its response is to notify the detected incident. The report may trigger mitigation measures such as initiate more restrictive control access [30,31,33] or deploy source identification capabilities [24] (which decision and development is out of scope). Therefore, it entails a good complement to many of the proposals in the bibliography.…”

Section: Decision-making and Responsementioning

confidence: 99%

See 1 more Smart Citation

Entropy-Based Economic Denial of Sustainability Detection

Monge

Vidal

Villalba

2017

Entropy

View full text Add to dashboard Cite

In recent years, an important increase in the amount and impact of Distributed Denial of Service (DDoS) threats has been reported by the different information security organizations. They typically target the depletion of the computational resources of the victims, hence drastically harming their operational capabilities. Inspired by these methods, Economic Denial of Sustainability (EDoS) attacks pose a similar motivation, but adapted to Cloud computing environments, where the denial is achieved by damaging the economy of both suppliers and customers. Therefore, the most common EDoS approach is making the offered services unsustainable by exploiting their auto-scaling algorithms. In order to contribute to their mitigation, this paper introduces a novel EDoS detection method based on the study of entropy variations related with metrics taken into account when deciding auto-scaling actuations. Through the prediction and definition of adaptive thresholds, unexpected behaviors capable of fraudulently demand new resource hiring are distinguished. With the purpose of demonstrate the effectiveness of the proposal, an experimental scenario adapted to the singularities of the EDoS threats and the assumptions driven by their original definition is described in depth. The preliminary results proved high accuracy.

show abstract

Section: Countermeasuresmentioning

confidence: 99%

Section: Decision-making and Responsementioning

confidence: 99%

Entropy-Based Economic Denial of Sustainability Detection

Monge

Vidal

Villalba

2017

Entropy

View full text Add to dashboard Cite

show abstract

“…In this section we present published papers related to mitigate EDoS cloud computing system. EDoS Armor [13] protects Ecommerce applications in cloud environments, with the assumption that an attacker does not follow regular workflow by purchasing the items instead idle surfing. EDoS Armor proposes mutilayered defense system that includes two modules:…”

Section: Related Workmentioning

confidence: 99%

Mitigating Economic Denial of Sustainability Attacks to Secure Cloud Computing Environments

Zekri

Kafhali

Hanini

et al. 2017

TMLAI

View full text Add to dashboard Cite

In cloud computing environment where the infrastructure is shared by millions of users, attackers have the opportunity to ensure more damage to the compromised resources. The main aim of such attacks is to saturate and overload the system network through a massive data packets size flooding toward a victim server and to block the service to customers. The Distributed Denialofservice (DDoS) attack is considered one of the largest threats to the Quality of Service (QoS) of cloud services which is used to deny access for legitimate users of an online service. However, Economic Denial of Sustainability (EDoS) attack is a special breed of DDoS attack that attack exploits auto scaling feature of cloud. The Cloud Service Provider (CSP) scales the architecture automatically to serve those requests for which cloud consumer is charged. A consumer expects a sustainable profit after hosting his application on cloud. The attacker purpose is to guarantee the service unavailability and maximize the financial loss costs by increasing the cost and decreasing the profit. Hence, in this paper we propose a novel mitigation system against the EDoS attacks. Our system consists of source Checking, Counting, and Turing Test. The obtained simulation results show that our system works efficiently to mitigate the EDoS attack in cloud environment.

show abstract

“…In the year 2013, Masood proposed an EDoS mitigation framework for E-Commerce applications [22]. It is a two-fold solution with an admission control and a congestion control.…”

Section: E Edos Armormentioning

confidence: 99%

Enhanced Mechanism to Detect and Mitigate Economic Denial of Sustainability (EDoS) Attack in Cloud Computing Environments

Bawa¹,

Rehman²,

Manickam³

2017

ijacsa

View full text Add to dashboard Cite

Abstract-Cloud computing (CC) is the next revolution in the Information and Communication Technology arena. CC is oftenprovided as a service comparable to utility services such as electricity, water, and telecommunications. Cloud service providers (CSP) offers tailored CC services which are delivered as subscription-based services, in which customers pay based on the usage. Many organizations and service providers have started shifting from traditional server-cluster infrastructure to cloudbased infrastructure. Nevertheless, security is one of the main factors that inhibit the proliferation of cloud computing. The threat of Distributed Denial of Service (DDoS) attack continues to wreak havoc in these cloud infrastructures. In addition to DDoS attacks, a new form of attack known as Economic Denial of Sustainability (EDoS) attack has emerged in recent years. DDoS attack in conventional computing setup usually disrupts the service, which affects the client reputation, and results in financial loss. In CC environment, service disruption is very rare due to the auto-scalability (Elasticity), capability, and availability of service level agreements (SLA). However, auto scalability utilize more computing resources in event of a DDoS attack, exceeding the economic bounds for service delivery, thereby triggering EDoS for the organization targeted. Although EDoS attacks are small at the moment, it is expected to grow in the near future in tandem with the growth in cloud usage. There are few EDoS detection and mitigation techniques available but they have weaknesses and are not efficient in mitigating EDoS. Hence, an enhanced EDoS mitigation mechanism (EDoS-EMM) has been proposed. The aim of this mechanism is to provide a realtime detection and effective mitigation of EDoS attack.

show abstract

EDoS Armor: A cost effective economic denial of sustainability attack mitigation framework for e-commerce applications in cloud environments

Cited by 40 publications

References 7 publications

Entropy-Based Economic Denial of Sustainability Detection

Entropy-Based Economic Denial of Sustainability Detection

Mitigating Economic Denial of Sustainability Attacks to Secure Cloud Computing Environments

Enhanced Mechanism to Detect and Mitigate Economic Denial of Sustainability (EDoS) Attack in Cloud Computing Environments

Contact Info

Product

Resources

About