Toward Proactive and Efficient DDoS Mitigation in IIoT Systems: A Moving Target Defense Approach

Zhou, Yuyang; Cheng, Guang; Zhao, Yuyu; Chen, Zihan; Jiang, Shanqing

doi:10.1109/tii.2021.3090719

Cited by 17 publications

(5 citation statements)

References 36 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…By flexibly deploying potential targets and dynamically changing system configurations, the MTD method can create cognitive barriers for attackers, increasing the difficulty of launching attacks or reducing attack effectiveness. This architecture is often effective, especially for zero-day attacks and advanced persistent threats (APTs) [42]. However, the cost of hardware and software deployment and target migration is usually high, requiring special security design.…”

Section: A Analysis Of Existing Ddos Defense Architecturesmentioning

confidence: 99%

Access-Side DDoS Defense for Space-Air-Ground Integrated 6G V2X Networks

Chen,

Feng,

Chen

et al. 2024

IEEE Open J. Commun. Soc.

View full text Add to dashboard Cite

Distributed Denial of Service (DDoS) attacks pose a significant threat to the Internet of Vehicles, causing delays in driving operations and risking personal safety. With the emerging of Space-Air-Ground Integrated Sixth-Generation (6G) networks, DDoS defense faces new challenges, especially in open and complex Vehicle-to-Everything (V2X) connections. In this study, we reviewed the requisites and challenges of DDoS defense in V2X and introduced a tailored access-side defense architecture for Space-Air-Ground Integrated 6G V2X. The objective is to provide ultra-low latency and privacy-assured services despite limited communication resources. Our architecture uses access-side control points (CPs) for rapid attack responses, collaborating with local controllers to create a seamless defense perimeter at the network edge. This prevents malicious traffic infiltration. Incorporating proactive defense strategies and lightweight detection methods, our approach ensures high attack detection rates with low defense costs. Simulation results confirm its efficacy and advantages in defense and network efficiency. We also discuss open issues for future research to facilitate practical applications.INDEX TERMS access-side defense architecture, distributed denial of service (DDoS), defense efficiency, sixth generation (6G), vehicle-to-everything (V2X).

show abstract

Section: A Analysis Of Existing Ddos Defense Architecturesmentioning

confidence: 99%

Access-Side DDoS Defense for Space-Air-Ground Integrated 6G V2X Networks

Chen,

Feng,

Chen

et al. 2024

IEEE Open J. Commun. Soc.

View full text Add to dashboard Cite

show abstract

“…The analyzed references considering Markov modelling for assessing the availability and cybersecurity of cloud and IoT systems can be divided into three groups: the references related to assessing availability and reliability [11][12][13][14][15][16][17][18][19][20][21][22][23][24][25][26][27], the references related to assessing cybersecurity [28][29][30][31][32][33][34][35][36][37][38][39], and references related to assessing both availability and cybersecurity as attributes of dependability of cloud and IoT systems [40][41][42][43].…”

Section: State Of the Artmentioning

confidence: 99%

“…The analysis results were utilized for facilitating a method to provide dependability assurance evidence for the Reactive Architecture. A multistage optimization problem of moving target defense mechanisms deployment was modelled in [26] as constrained by Markov decision processes. This modelling allowed maximizing the available resources of an intelligent system under the limitations of industrial Internet of Things environments.…”

Section: State Of the Artmentioning

confidence: 99%

Combining Markov and Semi-Markov Modelling for Assessing Availability and Cybersecurity of Cloud and IoT Systems

et al. 2022

View full text Add to dashboard Cite

This paper suggests a strategy (C5) for assessing cloud and IoT system (CIS) dependability, availability, and cybersecurity based on the continuous collection, comparison, choice, and combination of Markov and semi-Markov models (MMs and SMMs). It proposes the systematic building of an adequate and accurate model to evaluate CISs considering (1) continuous evolution of the model(s) together with systems induced by changes in the CIS or physical and cyber environment parameters; (2) the necessity of collecting data on faults, failures, vulnerabilities, cyber-attacks, privacy violations, and patches to obtain actual data for assessment; (3) renewing the model set based on analysis of CIS operation; (4) the possibility of choice and utilizing “off-the-shelf” models with understandable techniques for their development to assure improved accuracy of assessment; (5) renewing the models during application of CIS by time, component or mixed combining, taking into consideration different operation and maintenance events. The results obtained were algorithms for data collection and analysis, choice, and combining appropriate MM and SMMs and their different types, such as multi-fragmental and multiphase models, considering changing failure rates, cyber-attack parameters, periodical maintenance, etc. To provide and verify the approach, several private and public clouds and IoT systems were researched and discussed in the context of C5 and proposed algorithms.

show abstract

“…Relying on the ability to make multifaceted decisions on power grid security issues, game theory is widely applied in the field of network security [9][10][11][12][13][14][15][16]. In [9], a security resource allocation game model is established to discuss the load redistribution attacks problem.…”

Section: Introductionmentioning

confidence: 99%

“…[13] establishes a Markov anti-attack model, compares the effectiveness of network space simulation defense under different attack types, and uses dynamic games with incomplete information to determine the optimal strategy; ref. [14] formulates a multistage optimization model for the deployment of a mobile target defense mechanism under a Markov decision, maximizing the profits under environmental constraints. However, each iteration solution of [13,14] depends on the revenue in the current unit time, ignoring the previous revenue, bringing in an exponential increase in complex calculations; in [15], a Markovian-Stackelberg game is proposed to simulate the sequential actions of attackers and defenders, and a secure constrained optimal power flow is given, which preserves the safety margin of key components to minimize the power outage scale and potential future risks; in [16], the adversarial interaction of the attacker and defender is modeled as a resource-constrained game, and a linear-time algorithm is used to obtain the optimal defense strategy.…”

Section: Introductionmentioning

confidence: 99%

Attack–Defense Confrontation Analysis and Optimal Defense Strategy Selection Using Hybrid Game Theoretic Methods

Jin,

Zhao,

Yuan

2024

Symmetry

View full text Add to dashboard Cite

False data injection attacks are executed in the electricity markets of smart grid systems for financial benefits. The attackers can maximize their profits through modifying the estimated transmission power and changing the prices of market electricity. As a response, defenders need to minimize expected load losses and generator trips through load and power generation adjustments. The selection of strategies of the attacking and defending sides turns out to be a symmetric game process. This article proposes a hybrid game theory method for analyzing the attack–defense confrontation: firstly, a micro-grid-based power market model considering false data injection attacks is established using the Nash equilibrium method; secondly, the attack–defense game function is constructed and solved via the Stackelberg equilibrium algorithm. The Markov game algorithm and distributed learning algorithm are used to update equilibrium function; finally, a dynamic game behavior model of the two players is constructed through simulating the attack–defense probability. The evolutionary game method is used to select the optimal defense strategy for dynamic probability changes. Modified IEEE standard bus systems are illustrated to certify the effectiveness of the proposed model.

show abstract

Toward Proactive and Efficient DDoS Mitigation in IIoT Systems: A Moving Target Defense Approach

Cited by 17 publications

References 36 publications

Access-Side DDoS Defense for Space-Air-Ground Integrated 6G V2X Networks

Access-Side DDoS Defense for Space-Air-Ground Integrated 6G V2X Networks

Combining Markov and Semi-Markov Modelling for Assessing Availability and Cybersecurity of Cloud and IoT Systems

Attack–Defense Confrontation Analysis and Optimal Defense Strategy Selection Using Hybrid Game Theoretic Methods

Contact Info

Product

Resources

About