Traffic Scheduling Strategy for Mitigating DDoS Attack in Edge Computing-enabled TWDM-PON

Zhao, Yingqi; Li, Yajie; Zhang, Liangpei; Liu, Mingzhe; Niu, Yifan; Zhao, Yongli; Zhang, Jie

doi:10.1109/oecc48412.2020.9273645

Cited by 3 publications

(1 citation statement)

References 7 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…e motivations of DDoS attacks range from commercial competition to extortion and even political motives. ere are growing research interests on DDoS attacks, mainly including detecting DDoS attacks and mitigating DDoS attacks [1][2][3]. e biggest disadvantage of intrusion detection system (IDS), as a DDoS defense platform, is that IDS can only detect the attacks, but it does nothing to alleviate the attacks [4,5].…”

Section: Introductionmentioning

confidence: 99%

Stability of SDE-LJN System in the Internet to Mitigate Constant-Rate DDoS Attacks

Huang

Tan

Peng

2021

Security and Communication Networks

View full text Add to dashboard Cite

The Internet is nowadays suffering dramatically serious attacks, with the distributed denial of service (DDoS) attacks being the representative and dominant ones. It is seen that, to stabilize the buffer queue length around a given target under DDoS attacks in the relevant routes is vitally important and helpful to mitigate the attacks and to improve the quality of service (QoS) for normal users. In the current paper, a stochastic queue dynamic model with L e ´ vy jump noise, which is affected by the continuous Brownian motion and the discontinuous Poisson process, is worked out to develop a novel and accurate mathematical framework for the stability of a route queue that deals with constant-rate DDoS attacks. This article proposes a security defensive mechanism in the network for solving the network collapse that can possibly be caused by DDoS attacks, otherwise. Particularly, based on the formulation of a stochastic queue dynamic with L e ´ vy jump noise, the mechanism that characterizes the behavior of the queue at routers is presented for stabilizing the queue length under constant-rate DDoS attacks. By applying the stochastic control theory into analyzing the performance of queue dynamic under constant-rate DDoS attacks, some explicit conditions are established under which the instantaneous queue length converges to any given target in a route. Simulation results demonstrate the satisfaction of the proposed defense mechanism with sharp contrast to the state of the art active queue management (AQM) schemes.

show abstract

Section: Introductionmentioning

confidence: 99%

Stability of SDE-LJN System in the Internet to Mitigate Constant-Rate DDoS Attacks

Huang

Tan

Peng

2021

Security and Communication Networks

View full text Add to dashboard Cite

show abstract

DDoS Attack Mitigation Based on Traffic Scheduling in Edge Computing- Enabled TWDM-PON

Zhao

et al. 2021

IEEE Access

View full text Add to dashboard Cite

Time-Wavelength Division Multiplexing Passive Optical Network (TWDM-PON) is considered as a promising solution of next generation PON (NG-PON). The integration of Edge Computing (EC) and TWDM-PON can satisfy the QoS requirements of delay-sensitive applications by providing storage, processing and caching capabilities at the network edge. However, with limited resource capacity, edge nodes in TWDM-PON are vulnerable to network attacks (e.g., Distributed Denial of Service attacks). Resource exhaustion in the attacked nodes easily leads to QoS degradation and even service blocking. This paper investigates how to effectively schedule traffic to mitigate the DDoS attack in EC-enabled TWDM-PON. Based on the collaboration of edge nodes, an adaptive traffic scheduling algorithm is designed to minimize the impact of DDoS attacks on delay sensitive services. The performance of the proposed algorithm is evaluated in simulation, where direct and indirect DDoS attacks are simulated. Besides, the attack duration and the number of attacked nodes are considered in the evaluation. Simulation results show that the proposed algorithm can effectively mitigate DDoS attacks in terms of reducing the QoS degradation rate and blocking rate of delay-sensitive services.

show abstract

A Dynamic Framework for DDOS Attack Detection and Mitigation in Software Defined Network Using Machine Learning

Mankawade,

Kolpe,

Pote

et al. 2024

2024 International Conference on Intelligent Systems for Cybersecurity (ISCS)

View full text Add to dashboard Cite

Traffic Scheduling Strategy for Mitigating DDoS Attack in Edge Computing-enabled TWDM-PON

Cited by 3 publications

References 7 publications

Stability of SDE-LJN System in the Internet to Mitigate Constant-Rate DDoS Attacks

Stability of SDE-LJN System in the Internet to Mitigate Constant-Rate DDoS Attacks

DDoS Attack Mitigation Based on Traffic Scheduling in Edge Computing- Enabled TWDM-PON

A Dynamic Framework for DDOS Attack Detection and Mitigation in Software Defined Network Using Machine Learning

Contact Info

Product

Resources

About