Experimental Analysis of DDoS Attacks on OpenStack Cloud Platform

Bhardwaj, Aanshi; Sharma, Atul; Mangat, Veenu; Kumar, Krishan; Vig, Renu

doi:10.1007/978-981-13-1217-5_1

Cited by 10 publications

(5 citation statements)

References 4 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…They access social media to connect with friends or family and access movie streaming websites as entertainment when studying. They have also tried hacking tutorials or attacks on computer networks from articles during productive hours [14].…”

Section: A Observation Resultsmentioning

confidence: 99%

Application of MikroTik Firewall for Website Access Restriction and Prevention of DoS (Denial of Service) Attacks on Internet Networks Al-Mahrusiyah Vocational School Lirboyo

Maulana

Suharto

Hariyadi

2023

Jartel

View full text Add to dashboard Cite

Internet access is so easy that every level of society can access information from the website. If internet access is used positively, it will produce positive things for its users as well. Such as the facilities provided by the management of SMK Al-Mahrusiyah Lirboyo. Students, especially in the Computer and Network Engineering (TKJ) department, get facilities such as PCs in the lab or laptops along with internet access during productive learning hours. In its application in schools, students who are given laptop facilities and internet access do not always use it for learning. Questionnaire data showed that there were other things that were opened, including 37.7% of respondents finding and trying hacking tutorials, 35.8% playing social media, and 34% streaming movies. For this reason, a firewall is needed that restricts students' access to it. The firewall will be formulated with a script on the MikroTik router through the WinBox. The results of firewall tests using a combination of filters and Raw successfully blocked access to social media websites, streaming movies, and anime. The client cannot access and the display in the client browser displays continuous loading. Testing firewalls to ward off DoS attacks was also successful. When tested, LOIC did not send a single request packet and when the CPU resource was checked, the resource was only 1%. The use of firewalls with MikroTik routers is effective in limiting students' access to other things outside of learning. With this, it is hoped that students can better utilize facilities for learning.

show abstract

Section: A Observation Resultsmentioning

confidence: 99%

Application of MikroTik Firewall for Website Access Restriction and Prevention of DoS (Denial of Service) Attacks on Internet Networks Al-Mahrusiyah Vocational School Lirboyo

Maulana

Suharto

Hariyadi

2023

Jartel

View full text Add to dashboard Cite

show abstract

“…MANO reports back the “scale in/out” decision to NFVI/VIM layer. Based on CPU metrics, it manages the deployment of IPS VMs depending on CPU utilization, which has a critical role on computation capacity of a VM 33,34 . Memory utilization is not considered as decision parameter in the policies of MANO as its utilization of VM does not increase as much as CPU.…”

Section: The Proposed Framework Of Ddos Mitigationmentioning

confidence: 99%

“…Based on CPU metrics, it manages the deployment of IPS VMs depending on CPU utilization, which has a critical role on computation capacity of a VM. 33,34 Memory utilization is not considered as decision parameter in the policies of MANO as its utilization of VM does not increase as much as CPU. The number of packets is another important parameter for mitigation of DDoS attacks.…”

Section: Management and Orchestrationmentioning

confidence: 99%

Distributed denial‐of‐service attack mitigation in network functions virtualization‐based 5G networks using management and orchestration

Köksal

Dalveren

Maiga

et al. 2021

Int J Communication

View full text Add to dashboard Cite

Summary The fifth generation (5G) technology is expected to allow connectivity to billions of devices, known as Internet of Things (IoT). However, IoT devices will inevitably be the main target of various cyberattack types. The most common one is known as distributed denial‐of‐service (DDoS) attack. In order to mitigate such attacks, network functions virtualization (NFV) has a great potential to provide the benefit of elasticity and low‐cost solutions for protecting 5G networks. In this context, this study proposes a new mechanism developed to mitigate DDoS attacks in 5G NFV networks. The proposed mechanism utilizes intrusion prevention system's (IPS) virtual machines (VMs) to intercept the queries. Based on the volume of DDoS traffic, IPS's VMs are dynamically deployed by means of management and orchestration (MANO) in order to balance the load. To evaluate the effectiveness of the mechanism, experiments are conducted in a real 5G NFV environment built by using 5G NFV environment tools. To our best knowledge, this is the first time that NFV‐based mechanism is experimentally tested in a real 5G NFV environment for mitigating DDoS attacks in 5G networks. The experimental results verify that the proposed mechanism can mitigate DDoS attacks effectively.

show abstract

“…Aanshi Bhardwaj et al [15] analyzed and evaluated the DDoS attack using the OpenStack cloud platform and captures the attack Wireshark graph. This article studied only the DDoS attack using various tools.…”

Section: Slow Http Read Attacksmentioning

confidence: 99%

The Slow HTTP DDOS Attacks: Detection, Mitigation and Prevention in the Cloud Environment

Dhanapal

Nithyanandam

2019

SCPE

View full text Add to dashboard Cite

Cloud computing is the latest buzzword and cutting-edge technology. The cost-efficiency, easy to operate, on-demand services, availability, makes the cloud so popular. The online web applications based on the internet such as E-Healthcare, E-Commerce are moving to the cloud to reduce the operating investment cost. These applications are vulnerable to slow HTTP Distributed Denial of Service (DDoS) attack in the cloud. This kind of attacks aims to consume the resources of the application as well as the hosting system so that to bring down the services. The various forms of the slow HTTP DDoS are HTTP header attack, HTTP body attack and HTTP read attack. Due to the nature of mimicking the slow network behaviour, this attack is very challenging to detect. This is even more difficult to identify in the cloud environment as it has multiple attack paths. Theweb applications running in the cloud should have been safeguarded from the slow HTTP DDoS attacks. This paper proposed a novel multi-stage zone-based classification model to identify, mitigate and prevent the slow HTTP DDoS attacks in the cloud environment. The solution is implemented using the OpenStack cloud environment. The open-source slowHTTPTest tool is used to generate different types of slow HTTP DDoS attacks.

show abstract

Experimental Analysis of DDoS Attacks on OpenStack Cloud Platform

Cited by 10 publications

References 4 publications

Application of MikroTik Firewall for Website Access Restriction and Prevention of DoS (Denial of Service) Attacks on Internet Networks Al-Mahrusiyah Vocational School Lirboyo

Application of MikroTik Firewall for Website Access Restriction and Prevention of DoS (Denial of Service) Attacks on Internet Networks Al-Mahrusiyah Vocational School Lirboyo

Distributed denial‐of‐service attack mitigation in network functions virtualization‐based 5G networks using management and orchestration

The Slow HTTP DDOS Attacks: Detection, Mitigation and Prevention in the Cloud Environment

Contact Info

Product

Resources

About