Identifying DDoS Attack using Split-Machine Learning System in 5G and Beyond Networks

Rawal, Bharat S.; Patel, Sudhanshu; Sathiyanarayanan, Mithileysh

doi:10.1109/infocomwkshps54753.2022.9798301

Cited by 8 publications

(6 citation statements)

References 18 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…We use data plane flood attack and ping flood attack interchangeably to refer to this attack throughout the paper. • Control plane flood attack: Request flood attacks are common in different types of networks [23], [24]. The second attack that we consider is the registration request flood attack targeting the control plane VNFs [25].…”

Section: Threat Modelmentioning

confidence: 99%

On the Impact of Flooding Attacks on 5G Slicing with Different VNF Sharing Configurations

AbdulGhaffar,

Mahyoub,

Matrawy

2024

2024 20th International Conference on the Design of Reliable Communication Networks (DRCN)

View full text Add to dashboard Cite

Virtualized Network Function (VNF) sharing among multiple Fifth Generation (5G) slices allows network operators to increase the efficiency and utilization of the network. However, this sharing of VNFs can result in a degradation of the performance of the slices in the presence of an attack. In this paper, we evaluate the impact of flooding attacks on the performance of 5G slices with different VNF sharing configurations. We consider two VNF sharing configurations, in the first configuration, the Session Management Function (SMF) and User Plane Function (UPF) are shared among the deployed slices, while the SMF and UPF of the slices are isolated in the second configuration. The performance of these configurations is evaluated using different traffic types under two flooding attack scenarios; a ping flood attack targeting the data plane of 5G network, and a registration request flood attack directed at the control plane of 5G network. Our results showed different responses in the control and data planes. In the data plane, isolating VNFs of the slices provides better performance and mitigates the adverse effects of the attacks studied.

show abstract

Section: Threat Modelmentioning

confidence: 99%

On the Impact of Flooding Attacks on 5G Slicing with Different VNF Sharing Configurations

AbdulGhaffar,

Mahyoub,

Matrawy

2024

2024 20th International Conference on the Design of Reliable Communication Networks (DRCN)

View full text Add to dashboard Cite

show abstract

“…During a DoS attack, a hacker attempts to consume legitimate network resources or bandwidth. This attack is referred to as a DDoS when it originates from multiple compromised nodes [96] and falls into different categories such as traffic/fragmentation attack, bandwidth attack, and application attack) [97]. Wireless and wired networks are critical to DDoS attacks, which target the network layer [98].…”

Section: Figure 4: Cybersecurity Threats In Perception Layermentioning

confidence: 99%

Machine Learning for Healthcare-IoT Security: A Review and Risk Mitigation

Khatun,

Memon,

Eising

et al. 2023

IEEE Access

View full text Add to dashboard Cite

The Healthcare Internet-of-Things (H-IoT), commonly known as Digital Healthcare, is a datadriven infrastructure that highly relies on smart sensing devices (i.e., blood pressure monitors, temperature sensors, etc.) for faster response time, treatments, and diagnosis. However, with the evolving cyber threat landscape, IoT devices have become more vulnerable to the broader risk surface (e.g., risks associated with generative AI, 5G-IoT, etc.), which, if exploited, may lead to data breaches, unauthorized access, and lack of command and control and potential harm. This paper reviews the fundamentals of healthcare IoT, its privacy, and data security challenges associated with machine learning and H-IoT devices. The paper further emphasizes the importance of monitoring healthcare IoT layers such as perception, network, cloud, and application. Detecting and responding to anomalies involves various cyber-attacks and protocols such as Wi-Fi 6, Narrowband Internet of Things (NB-IoT), Bluetooth, ZigBee, LoRa, and 5G New Radio (5G NR). A robust authentication mechanism based on machine learning and deep learning techniques is required to protect and mitigate H-IoT devices from increasing cybersecurity vulnerabilities. Hence, in this review paper, security and privacy challenges and risk mitigation strategies for building resilience in H-IoT are explored and reported.

show abstract

“…• Data plane flood attack: The first attack scenario is the ping flood attack initiated by the attacking UEs to flood the links of the slice and to exhaust the resources of the data plane VNFs [23]. When the UEs send ping requests, the DN responds with ping replies, further flooding the network links.…”

Section: Threat Modelmentioning

confidence: 99%

On the Impact of Flooding Attacks on 5G Slicing with Different VNF Sharing Configurations

AbdulGhaffar,

Mahyoub,

Matrawy

2023

Preprint

View full text Add to dashboard Cite

<p>Virtualized Network Function (VNF) sharing among multiple Fifth Generation (5G) slices allows network operators to increase the efficiency and utilization of the network. However, this sharing of VNFs can result in a degradation of the performance of the slices in the presence of an attack. In this paper, we evaluate the impact of flooding attacks on the performance of 5G slices with different VNF sharing configurations. We consider two VNF sharing configurations, in the first configuration, the Session Management Function (SMF) and User Plane Function (UPF) are shared among the deployed slices, while the SMF and UPF of the slices are isolated in the second configuration. The performance of these configurations is evaluated using different traffic types under two flooding attack scenarios; a ping flood attack targeting the data plane of 5G network, and a registration request flood attack directed at the control plane of 5G network. Our results showed different responses in the control and data planes. In the data plane, isolating VNFs of the slices provides better performance and mitigates the adverse effects of the attacks studied.</p>

show abstract

Identifying DDoS Attack using Split-Machine Learning System in 5G and Beyond Networks

Cited by 8 publications

References 18 publications

On the Impact of Flooding Attacks on 5G Slicing with Different VNF Sharing Configurations

On the Impact of Flooding Attacks on 5G Slicing with Different VNF Sharing Configurations

Machine Learning for Healthcare-IoT Security: A Review and Risk Mitigation

On the Impact of Flooding Attacks on 5G Slicing with Different VNF Sharing Configurations

Contact Info

Product

Resources

About