Exploiting cloud utility models for profit and ruin

Proceedings - 2011 IEEE 4th International Conference on Cloud Computing, CLOUD 2011

Volumn , Issue , 2011, Pages 33-40

  Idziorek, Joseph ^a   Tannian, Mark ^a  

^a Iowa State University of Science and Technology   (United States)

Author keywords

Anomaly detection; Application layer DDoS; Cloud computing; Fraudulent resource consumption attack; Utility compute model

Indexed keywords

ANOMALY DETECTION; APPLICATION-LAYER DDOS; CLOUD SERVICES; COMPUTE MODEL; OPERATING EXPENSE; RESOURCE CONSUMPTION; UTILITY MODEL;

DISTRIBUTED DATABASE SYSTEMS; INTERNET; PROFITABILITY; TELECOMMUNICATION NETWORKS;

CLOUD COMPUTING;

EID: 80053144966     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CLOUD.2011.45     Document Type: Conference Paper

References (19)

1. J. Mirkovic and P. Reiher, "A taxonomy of ddos attack and ddos defense mechanisms," SIGCOMM Comput. Commun. Rev., vol. 34, pp. 39-53, April 2004.
2. Amazon Web Services. (2010, Nov.) Amazon EC2 pricing. [Online]. Available: http://aws.amazon.com/ec2/pricing/
3. S. Kandula, D. Katabi, M. Jacob, and A. Berger, "Botz-4-sale: surviving organized DDoS attacks that mimic flash crowds," in Proceedings of the 2nd conference on Symposium on Networked Systems Design & Implementation - Volume 2, ser. NSDI'05, 2005, pp. 287-300.
4. Z. Li, Q. Liao, and A. Striegel, "Botnet economics: Uncertainty matters," in Managing Information Risk and the Economics of Security. Springer US, 2009, pp. 245-267.
5. G. Oikonomou and J. Mirkovic, "Modeling human behavior for defense against flash-crowd attacks," in IEEE International Conference on Communications, 2009, pp. 1-6.
6. S. Wen, W. Jia, W. Zhou, W. Zhou, and C. Xu, "Cald: Surviving various application-layer ddos attacks that mimic flash crowd," in 2010 4th International Conference on Network and System Security (NSS), 2010, pp. 247-254.
7. J. Jung, B. Krishnamurthy, and M. Rabinovich, "Flash crowds and denial of service attacks: characterization and implications for cdns and web sites," in Proceedings of the 11th international conference on World Wide Web. New York, NY, USA: ACM, 2002, pp. 293-304.
8. S. Ramachandran. (2010, May) Web metrics: Size and number of resources. [Online]. Available: http://code.google.com/speed/articles/web-metrics.html
9. G. K. Zipf, Human Behavior and the Principle of Least Effort. Addison-Wesley, 1949.
10. K. Narisawa, D. Ikeda, Y. Yamada, and M. Takeda, "Detecting blog spams using the vocabulary size of all substrings in their copies," in In Proceedings of Workshop on Weblogging Ecosystem, 2006.
11. S.-M. Huang, D. C. Yen, L.-W. Yang, and J.-S. Hua, "An investigation of zipf's law for fraud detection," Decis. Support Syst., vol. 46, pp. 70-83, December 2008.
12. L. Breslau, P. Cao, L. Fan, G. Phillips, and S. Shenker, "Web caching and zipf-like distributions: evidence and implications," in Proceedings of IEEE INFOCOM '99, vol. 1, Mar. 1999, pp. 126-134 Vol.1.
13. L. Kroc, S. Eidenbenz, and J. Smith, "Sessionsim: Activity-based session generation for network simulation," in Winter Simulation Conference (WSC), Proceedings of the 2009, 2009, pp. 3169-3180.
14. Q. Le, M. Zhanikeev, and Y. Tanaka, "Methods of distinguishing flash crowds from spoofed DoS attacks," in Next Generation Internet Networks, 3rd EuroNGI Conference on, May 2007, pp. 167-173. (Pubitemid 47439984)
15. Traces available in the internet traffic archive. [Online]. Available: http://ita.ee.lbl.gov/html/traces.html
16. J. Wang, X. Yang, and K. Long, "A new relative entropy based app-DDoS detection method," in IEEE Symposium on Computers and Communications (ISCC), 2010, pp. 966-968. (Pubitemid 41000565)
17. Y. Xie and S.-Z. Yu, "Monitoring the application-layer ddos attacks for popular websites," Networking, IEEE/ACM Transactions on, vol. 17, no. 1, pp. 15-25, 2009.
18. C. Hoff. (2008, Nov.) Cloud computing security: From DDoS (distributed denial of service) to EDoS (economic denial of sustainability). [Online]. Available: http://www.rationalsurvivability.com/blog/?p=66
19. S. Ranjan, R. Swaminathan, M. Uysal, A. Nucci, and E. Knightly, "DDoS-shield: DDoS-resilient scheduling to counter application layer attacks," IEEE/ACM Trans. Netw., vol. 17, pp. 26-39, February 2009.