Orchestrating DDoS mitigation via blockchain-based network provider collaborations

Pavlidis, Adam; Dimolianis, Marinos; Giotis, Kostas; Anagnostou, Loukas; Kostopoulos, Nikolaos; Tsigkritis, Theocharis; Kotinas, Ilias; Kalogeras, Dimitrios; Maglaris, Vasilis

doi:10.1017/s0269888920000259

Cited by 12 publications

(6 citation statements)

References 17 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Such work will center on collaborative detection and costeffective mitigation of malicious traffic across network federations, e.g. extending our previous effort [44].…”

Section: Discussionmentioning

confidence: 99%

Signature-Based Traffic Classification and Mitigation for DDoS Attacks Using Programmable Network Data Planes

2021

Self Cite

View full text Add to dashboard Cite

Distributed Denial of Service (DDoS) mitigation typically relies on source IP-based filtering rules; these may present scaling issues due to the vast amount of involved sources. By contrast, we propose a source IP-agnostic DDoS traffic classification and filtering schema that identifies malicious packet signatures via supervised Machine Learning methods and subsequently generates signature-based filtering rules. To accelerate packet processing, our schema utilizes XDP middleboxes operating as programmable Deep Packet Inspectors. Signatures are extracted from network traffic as unique combinations of the most significant packet features; these are subsequently fed to supervised Machine Learning algorithms that classify them as malicious or benign. Malicious signatures undergo a reduction process tailored to the attack vector in order to generate a concise set of filtering rules, thus expediting mitigation performance. Our schema was implemented as a proof-of-concept and evaluated for DNS volumetric attacks in terms of signature classification accuracy and packet filtering throughput. Experiments were based on benign and malicious traffic datasets recorded in production network environments. Our approach was compared to source-based mechanisms in terms of (i) malicious traffic identification, (ii) filtering rules cardinality, and (iii) packet processing throughput required in modern high speed networks. The experimental results demonstrate that our signature-based approach outperforms IP-based alternatives, achieving high detection accuracy and significant generalization capabilities.

show abstract

“…Such work will center on collaborative detection and costeffective mitigation of malicious traffic across network federations, e.g. extending our previous effort [44].…”

Section: Discussionmentioning

confidence: 99%

Signature-Based Traffic Classification and Mitigation for DDoS Attacks Using Programmable Network Data Planes

2021

Self Cite

View full text Add to dashboard Cite

show abstract

“…Pavlidis et al [70] proposed a blockchain based network provider collaboration for DDoS mitigation. The AS's are selected based on the reputation scores to participate in the DDoS mitigation plan.…”

Section: Rodrigues Et Al [75] [64]mentioning

confidence: 99%

The role of Blockchain in DDoS attacks mitigation: techniques, open challenges and future directions

Chaganti¹,

Bhushan²,

Sowmya³

2022

Preprint

View full text Add to dashboard Cite

With the proliferation of new technologies such as Internet of Things (IOT) and Software-Defined Networking (SDN) in the recent years, the distributed denial of service (DDoS) attack vector has broadened and opened new opportunities for more sophisticated DDoS attacks on the targeted victims. The new attack vector includes unsecured and vulnerable IoT devices connected to the internet, denial of service vulnerabilities like southbound channel saturation in the SDN architecture. Given the high-volume and pervasive nature of these attacks, it is beneficial for stakeholders to collaborate in detecting and mitigating the denial of service attacks in a timely manner. The blockchain technology is considered to improve the security aspects owing to the decentralized design, secured distributed storage and privacy. A thorough exploration and classification of blockchain techniques used for DDoS attack mitigation is not explored in the prior art. This paper reviews and categorizes the existed state-of-the-art DDoS mitigation solutions based on blockchain technology. The DDoS mitigation techniques are classified based on the solution deployment location i.e. network based, near attacker location, near victim location and hybrid solutions in the network architecture with emphasis on the IoT and SDN architectures. Additionally, based on our study, the research challenges and future directions to implement the blockchain based DDoS mitigation solutions are discussed. We believe that this paper could serve as a starting point and reference resource for future researchers working on denial of service attacks detection and mitigation using blockchain technology.

show abstract

“…Each organization may have the SDN controller to run the blockchain application and act as a blockchain node for updating the threat information in other nodes (Chaganti et al, 2022). Pavlidis et al (2020) proposed a blockchain based network provider collaboration for DDoS mitigation. The AS's are selected based on the reputation scores to participate in the DDoS mitigation plan.…”

Section: Literature Reviewmentioning

confidence: 99%

Protecting Cloud Infrastructure from DDOS Assaults the use of Blockchain to Achieve Cloud Security

Alghmadi¹,

Alghamdi²

2022

IJCCR

View full text Add to dashboard Cite

Cloud Infrastructure has become the need of the hour which has resulted in increasing interest of attackers. The most prominent attack on the cloud in recent years is DDoS. DDoS attack results in service unavailability due to a botnet that overflood the network with service requests. The blockchain technology used to diminish DDoS has not yet been completely researched and arranged. This project will survey, and position cutting-edge DDoS decrease arrangements in light of blockchain technology. Considering our research, we will likewise talk about the research difficulties and future headings for executing a blockchain-based DDoS moderation arrangement. We expect this project will fill in as a beginning stage and reference for future researchers attempting to recognize and moderate denial of service attacks utilizing blockchain technology.

show abstract

Orchestrating DDoS mitigation via blockchain-based network provider collaborations

Cited by 12 publications

References 17 publications

Signature-Based Traffic Classification and Mitigation for DDoS Attacks Using Programmable Network Data Planes

Signature-Based Traffic Classification and Mitigation for DDoS Attacks Using Programmable Network Data Planes

The role of Blockchain in DDoS attacks mitigation: techniques, open challenges and future directions

Protecting Cloud Infrastructure from DDOS Assaults the use of Blockchain to Achieve Cloud Security

Contact Info

Product

Resources

About