EDoS-shield - A two-steps mitigation technique against EDoS attacks in cloud computing

Proceedings - 2011 4th IEEE International Conference on Utility and Cloud Computing, UCC 2011

Volumn , Issue , 2011, Pages 49-56

  Sqalli, Mohammed H ^a   Al Haidari, Fahd ^a   Salah, Khaled ^b  

^a KING FAHD UNIVERSITY OF PETROLEUM AND MINERALS   (Saudi Arabia)

^b KHALIFA UNIVERSITY   (United Arab Emirates)

Author keywords

Cloud Computing; EDoS; Mitigation; Overlay Network; Virtual Firewall

Indexed keywords

CLOUD SERVICES; COMPUTING SYSTEM; DDOS ATTACK; DISCRETE SIMULATIONS; ECONOMIC RESOURCES; EDOS; END USERS; MITIGATION; MITIGATION TECHNIQUES; NETWORK RESOURCE; PAY-PER-USE; UTILITY COMPUTING; VIRTUAL FIREWALL;

COMPUTER SYSTEM FIREWALLS; INFORMATION TECHNOLOGY; OVERLAY NETWORKS; SUSTAINABLE DEVELOPMENT;

CLOUD COMPUTING;

EID: 84856328279     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/UCC.2011.17     Document Type: Conference Paper

References (43)

1. D. Catteddu and G. Hogben, "Cloud Computing: benefits, risks and recommendations for information security", Technical Report, European Network and Information Security Agency, 2009.
2. R. Knode, "BP Fuels Cloud Computing Interest", available at http://www.trustedcloudservices.com/Individual-Case-Studies/bp-fuels-cloud- computing-interest.
3. J. Meiko and S. Joerg, "The accountability problem of flooding attacks in service-oriented architectures", in Proceedings of the IEEE International Conference on Availability, Reliability and Security (ARES), 2009.
4. R. Buyya, C.S. Yeo, S. Venugopal, J. Broberg, and I. Brandic, "Cloud computing and emerging IT platforms: vision, hype and reality for delivering computing as the 5th utility", Future Generation Computer Systems, vol. 25 (6), 2009.
5. C. Hoff, "Cloud Computing Security: From DDoS (Distributed Denial Of Service) to EDoS (Economic Denial of Sustainability)", Blog, Retrieved November 27, 2008, available at http://rationalsecurity.typepad.com/blog/2008/ 11/cloud-computing-security-from-ddos-distributed-denial-of-service-to-edos- economic-denial-of-sustaina.html
6. S. HinKhor and A. Nakao, "sPoW: On-Demand Cloud-based eDDoS Mitigation Mechanism", HotDep (Fifth Workshop on Hot Topics in System Dependability), Lisbon, Portugal, 2009.
7. "Amazon CloudWatch", Amazon Website, available at http://aws.amazon.com/cloudwatch/
8. J. Green, J. Juen, O. Fatemieh, R. Shankesi, D. Jin, and C. Gunter, "Reconstructing hash reversal based proof of work schemes", in LEET'11 Proceedings of the 4th USENIX conference on Large-scale exploits and emergent threats, Boston, MA, March 2011.
9. D. Keromytis, V. Misra, and D. Rubenstein, "Sos: Secure overlay services", In Proceedings of the Con-ference on Applications, Technologies, Architectures, and Protocols for Computer Communications (SIG-COMM'02), August 2002.
10. A. Stavrou, D. L. Cook, W. G. Morein, A. D. Keromytis, V. Misra, and D. Rubenstein, "Websos: An overlay-based system for protecting web servers from denial of service attacks", the International Journal of Computer and Telecommunications Networking, vol. 48(5), pp.781-807, August 2005.
11. H. Beitollahi and G. Deconinck, "Fosel: Filtering by helping an overlay secure layer to mitigate dos attacks", In Proceedings of the 7th IEEE Int. Symp. on Network Computing and Applications (NCA-2008), pages 19-28, Cambridge, MA (USA), July 2008.
12. D. Ping and A. Nakao, "DDoS defense as a network service", Network Operations and Management Symposium (NOMS), IEEE, Osaka, pp. 894-897, April 2010.
13. L. von Ahn, M. Blum, N. Hopper, and J. Langford, "CAPTCHA: Using hard AI problems for security", In Proceedings of Eurocrypt, 2003.
14. P. Karwaczynski and J. Kwiatkowski, "Analysis of overlay network impact on dependability", In proceedings of the 38th Hawaii International conference on system science, 2005.
15. H. Beitollahi and G. Deconinck, "An overlay protection layer against denial-of-service attacks", In Proceedings of the 22rd IEEE International Parallel and Distributed Processing Symposium, pp.1-8, April 2008.
16. J. Wang and A. Chien, "Understanding when location-hiding using overlay networks is feasible", Journal of Computer Networks, vol. 50(6), pp.763-780, April 2006. (Pubitemid 43234333)
17. W. G. Morein, A. Stavrou, D. L. Cook, A. D. Keromytis, V. Misra, and D. Rubenstein, "Using graphic turing tests to counter automated DDoS attacks against web servers", in ACM CCS, 2003.
18. J. Yan and A.s. El Ahmad, "CAPTCHA Security: A Case Study", Security & Privacy, IEEE, vol. 7, pp. 22-28, Aug. 2009.
19. M. Mehra, M. Agarwal, R. Pawar, and D. Shah, "Mitigating denial of service attack using CAPTCHA mechanism", ICWET Workshop on Emerging Trends in Technology, ACM New York, NY, USA, pp. 284-287, 2011.
20. S.B.E Raj, D. Devassy, and J. Jagannivas, "A new architecture for the generation of picture based CAPTCHA", Electronics Computer Technology (ICECT) 2011, 2011 3rd International Conference, Kanyakumari, India, pp. 67-71, April 2011.
21. J. Israr, M. Guennoun, and H. Mouftah, "Mitigating IP Spoofing by Validating BGP Routes Updates", IJCSNS International Journal of Computer Science and Network Security, vol. .9, no. 5, May 2009.
22. C. Schridde, M. Smith, and B. Freisleben, "TrueIP: prevention of IP spoofing attacks using identity-based cryptography", SIN '09 Proceedings of the 2nd international conference on Security of information and networks, ACM, pp. 128-137, 2009.
23. M. Ravi, S. Narasimman, G. K. Arun, and D. Karthikeyan, "A Cryptographic Approach to Defend against IP Spoofing", Communications in Computer and Information Science, CCIS, vol. 70, pp. 290-296, 2010.
24. M. Subramanian and T. Angamuthu, "An Autonomous Framework for Early Detection of Spoofed Flooding Attacks", International Journal of Network Security, vol. 10, no. 1, pp. 39-50, Jan. 2010.
25. C.F. Sharp and S. Dark, "System and method for detecting and eliminating IP spoofing in a data transmission network", US Patent 7,865,945 B2, Google Patents, Jan 2011.
26. N. Desai, S. Dillon, and D. Stone, "Methods and Systems for Load Balancing Using Forecasting and Overbooking Techniques", US Patent, Pub no. 2011/0078318 A1, Google Patents, March 2011.
27. J. Leitão, R. Renesse, and L. Rodrigues, "Balancing gossip exchanges in networks with firewalls", IPTPS'10 Proceedings of the 9th international conference on Peer-to-peer systems, USA, 2010.
28. V. Ramsurrun and K. Soyjaudah, "A stateful CSG-based distributed firewall architecture for robust distributed security", Communication Systems and Networks and Workshops, First International COMSNETS, Bangalore, pp. 1-10, Jan 2009.
29. C. O'rourke, G. Shah, L. Menditto, M. Albert, et al., "Method for protecting a firewall load balancer from a denial of service attack", US Patent 7,770,215 B2, Google Patents, Aug 2010.
30. S. Carlin and K. Curran, "Cloud Computing Security", International Journal of Ambient Computing and Intelligence, Vol. 3, No. 1, pp:38-46, June 2011.
31. VMware, Inc, White Paper, "vShield Edge Design Guide", Jun 8, 2011, available at http://www.vmware.com/files/pdf/techpaper/vShield-Edge- Design-Guide-WP.pdf
32. Cisco White Paper, "Secure Virtual Applications and Data Centers", 2011. available at http://www.cisco.com/en/US/solutions/ collateral/ns340/ns517/ns224/ns1097/white-paper-181-652663.html
33. Savvis, Inc, White paper, "Securing-Virtual-Compute-Infrastructure- in-the-Cloud", 2011, available at http://www.savvis.com/en-US/Info-Center/ Documents/HOS-WhitePaper- SecuringVirutalComputeInfrastructureintheCloud.pdf
34. W. Huang and J. Yang, "new network security based on cloud computing", Education Technology and Computer Science (ETCS), Second International Workshop, Wuhan, pp. 604-609, March 2010.
35. A. Law and W. Kelton, "Simulation Modeling and Analysis", McGraw-Hill, Third Edition, 2000.
36. O. Brun, and M., Garcia, "Analytical Solution of Finite Capacity M/D/1 Queues", Journal of Applied Probability, vol. 37, no. 4, pp. 1092-1098, December 2000. (Pubitemid 33241074)
37. S. Alouf, S. Nain, and D. Towsley, "Inferring Network Characteristics via Moment-Based Estimators", Proceeding of IEEE INFOCOM 2001, pp. 1045-1054, Anchorage, Alaska, April 2001. (Pubitemid 32478436)
38. P. Ulanovs and E. Petersons, "Modeling Methods of Self-similar Traffic for Network Performance Evaluation", Scientific Proceedings of RTU Series 7, Telecommunications and Electronics, 2002.
39. W. Willinger, M. Taqqu, R. Sherman, and D. Wilson, "Self-Similarity Through High-Variability: Statistical Analysis of Ethernet LAN Traffic at the Source Level", Proceedings of ACM SIGCOMM, Cambridge, Massachusetts, pp. 100-113, August 1995.
40. K. C. Claffy, G. Miller, and K. Thompson, "The Nature of theBeast: Recent Traffic Measurements from an Internet Backbone", In the Proceedings of INET 1998, Geneva, Switzerland, July 1998.
41. Ashford Computer Consulting Service, "GigaBit Ethernet to the Desktop- Client1 System Benchmarks", 2004, available at http://www.accs.com/p-and-p/GigaBit/Client1.html
42. Q. Zhu and G. Agrawal, "Resource provisioning with budget constraints for adaptive applications in cloud environments", in Proceedings of the 19th ACM International Symposium on High Performance Distributed Computing (HPDC'10), 2010.
43. Amazon EC2 Pricing, available at http://aws.amazon.com/ec2/pricing/