Performance Analysis of Agent Based Distributed Defense Mechanisms Against Ddos Attacks

Singh, Karanbir; Dhindsa, Kanwalvir Singh; Bhushan, Bharat

doi:10.47839/ijc.17.1.945

Cited by 7 publications

(2 citation statements)

References 16 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Consideration of collateral damage is a crucial part of evaluating the performance of a defence [25]. In CED3, the collateral damage of a defence consists of two parts: that caused by a defence when there is no attack, and that inflicted on servers that are not targeted, during an attack on a victim.…”

Section: Empirical Methodsmentioning

confidence: 99%

Towards Comparative Evaluation of DDoS Defences

Otung

Martin

2022

2022 15th International Conference on Security of Information and Networks (SIN)

View full text Add to dashboard Cite

DDoS defence evaluation provides a way to capture the usefulness of defensive solutions to one of the most notorious Internet attacks of our computing generation. An alternative approach to evaluation offers a valuable mechanism by which different DDoS defences can be commensurably and objectively compared. Such a development would not only enable individual organizations to make better informed decisions on which defences to implement but could also aid collaborations to realize global solutions; and reveal insights into aspects requiring further investigation.We present CED3 (pronounced "Seed"), a DDoS defence evaluation framework designed to facilitate the commensurable comparison between DDoS defences in a way that captures their strengths and weaknesses. Firstly, CED3 introduces the notion of true effectiveness, which addresses the problem, identified in the literature, of previously validated defences subsequently being shown to be ineffective when evaluated under different attack conditions. CED3 leverages a structured theoretical analysis process to drive empirical data acquisition in order to enhance consistency, transparency and, ultimately, longevity of evaluation conclusions. Lastly, CED3 introduces the concept of defence maps, which applies the idea of true effectiveness to "scopes" in order to communicate the strengths and weaknesses of defences in a way that allows them to be visually compared.We demonstrate the CED3 framework by applying it to comparatively evaluate three DDoS defences. Using results obtained from extensive simulations in NS-3, we show how the strengths and weaknesses of different defences can be visually compared. We conclude by discussing the merits and limitations of CED3.

show abstract

Section: Empirical Methodsmentioning

confidence: 99%

Towards Comparative Evaluation of DDoS Defences

Otung

Martin

2022

2022 15th International Conference on Security of Information and Networks (SIN)

View full text Add to dashboard Cite

show abstract

“…Smurf Attack: Es un ataque distribuido de denegación de servicio (DDoS, por sus siglas en inglés) en el que un atacante intenta inundar un servidor objetivo con paquetes del Protocolo de mensajes de control de Internet (ICMP, por sus siglas en inglés), al realizar solicitudes con la dirección IP falsificada del dispositivo objetivo a una o más redes informáticas, las redes informáticas luego responden al servidor objetivo, amplificando el tráfico de ataque inicial y potencialmente abrumando al objetivo, haciéndolo inaccesible (Aldaoud et al, 2021) UDP Flood: El host atacante lanza un ataque DoS emitiendo un comando de ataque con la dirección de la víctima, la duración del ataque, los métodos de ataque y otras instrucciones a los programas de control maestro, que sirven como controladores de ataques (Singh & Juneja, 2010). El objetivo es crear y enviar una gran cantidad de datagramas UDP, que se relaciona por medio del puerto 53 en UDP.…”

Section: Vulnerabilidadesunclassified

Mitigación de vulnerabilidades en la red central de un ISP: Un caso de estudio

Palate

Avila-Pesántez²

2021

Ecuad. Sci. J

View full text Add to dashboard Cite

Los incidentes de ciberseguridad en infraestructura de ISP (Internet Service Provider) han crecido de manera significativa y es necesario identificar las vulnerabilidades que necesitan una protección inmediata. En este entorno, el firewall tiene la capacidad de filtrar paquetes de datos, analizando las cabeceras y tomando una decisión del encaminamiento del paquete en base a las reglas establecidas. Este dispositivo es muy indispensable en una red ISP, debido a que mitiga las vulnerabilidades provenientes de la red, manteniendo un mayor grado de seguridad informática para su red interna. En el estudio de caso se seleccionó infraestructura de marca Mikrotik con sistema operativo RouterOS para aplicar reglas de seguridad en cada tipo de ataque que ingresa hacia el router de core, evitando causar graves fallas como la denegación del servicio. Como resultado se obtuvo una disminución del 50% del consumo del CPU en cada ataque generado, garantizando la estabilidad y la disponibilidad de la red de comunicaciones.

show abstract

Comprehensive Review of Artificial Intelligence and Statistical Approaches in Distributed Denial of Service Attack and Defense Methods

et al. 2019

View full text Add to dashboard Cite

Until now, an effective defense method against Distributed Denial of Service (DDoS) attacks is yet to be offered by security systems. Incidents of serious damage due to DDoS attacks have been increasing, thereby leading to an urgent need for new attack identification, mitigation, and prevention mechanisms. To prevent DDoS attacks, the basic features of the attacks need to be dynamically analyzed because their patterns, ports, and protocols or operation mechanisms are rapidly changed and manipulated. Most of the proposed DDoS defense methods have different types of drawbacks and limitations. Some of these methods have signature-based defense mechanisms that fail to identify new attacks and others have anomaly-based defense mechanisms that are limited to specific types of DDoS attacks and yet to be applied in open environments. Subsequently, extensive research on applying artificial intelligence and statistical techniques in the defense methods has been conducted in order to identify, mitigate, and prevent these attacks. However, the most appropriate and effective defense features, mechanisms, techniques, and methods for handling such attacks remain to be an open question. This review paper focuses on the most common defense methods against DDoS attacks that adopt artificial intelligence and statistical approaches. Additionally, the review classifies and illustrates the attack types, the testing properties, the evaluation methods and the testing datasets that are utilized in the methodology of the proposed defense methods. Finally, this review provides a guideline and possible points of encampments for developing improved solution models of defense methods against DDoS attacks. INDEX TERMS DDoS attack, DDoS defense, artificial intelligence technique, statistical technique.

show abstract

Performance Analysis of Agent Based Distributed Defense Mechanisms Against Ddos Attacks

Cited by 7 publications

References 16 publications

Towards Comparative Evaluation of DDoS Defences

Towards Comparative Evaluation of DDoS Defences

Mitigación de vulnerabilidades en la red central de un ISP: Un caso de estudio

Comprehensive Review of Artificial Intelligence and Statistical Approaches in Distributed Denial of Service Attack and Defense Methods

Contact Info

Product

Resources

About