A confidence-based filtering method for DDoS attack defense in cloud environment

Future Generation Computer Systems

Volumn 29, Issue 7, 2013, Pages 1838-1850

  Dou, Wanchun ^a   Chen, Qi ^a   Chen, Jinjun ^b  

^a NANJING UNIVERSITY   (China)

^b UNIVERSITY OF TECHNOLOGY SYDNEY   (Australia)

Author keywords

Cloud environment; Confidence; Correlation characteristic; Distributed denial of service attack; Filtering; Network security

Indexed keywords

COMPUTER CRIME; FILTRATION; NETWORK SECURITY;

CLOUD COMPUTING ENVIRONMENTS; CLOUD ENVIRONMENTS; CONFIDENCE; CORRELATION CHARACTERISTICS; DISTRIBUTED DENIAL OF SERVICE ATTACK; EXTENSIVE SIMULATIONS; FILTERING ACCURACIES; STORAGE REQUIREMENTS;

DENIAL-OF-SERVICE ATTACK;

EID: 84885197342     PISSN: 0167739X     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.future.2012.12.011     Document Type: Article

References (23)

1. M. Armbrust, et al., A view of cloud computing, Commun. ACM 53 (4) (2010) 50-58.
2. L. Zhang, Q. Zhou, CCOA: cloud computing open architecture, in: Proceedings of the IEEE International Conference on Web Services, 2009, pp. 607-616.
3. T. Peng, C. Leckie, K. Ramamohanarao, Survey of network-based defense mechanisms countering the DoS and DDoS problems, ACM Comput. Surv. 39 (1) (2007) 3.
4. A. Chonka, J. Singh, W. Zhou, Chaos theory based detection against network mimicking DDoS attacks, IEEE Commun. Lett. 13 (9) (2009) 717-719.
5. Y. Xiang, K. Li, W. Zhou, Low-rate DDoS attacks detection and traceback by using new information metrics, IEEE Trans. Inf. Forensics Secur. 6 (2) (2011) 426-437.
6. H. Liu, M.S. Kim, Real-time detection of stealthy DDoS attacks using timeseries decomposition, in: Communications (ICC), 2010 IEEE International Conference, 2010.
7. Y. Kim, W.C. Lau, M.C. Chuah, H.J. Chao, Packetscore: a statistics-based packet filtering scheme against distributed denial-of-service attacks, IEEE Trans. Dependable Secure Comput. 3 (2) (2006) 141-155.
8. P.E. Ayres, H. Sun, H.J. Chao, W.C. Lau, ALPi: a DDoS defense system for highspeed networks, IEEE J. Sel. Areas Commun. 24 (10) (2006) 1864-1876.
9. H. Wang, C. Jin, K.G. Shin, Defense against spoofed IP traffic using hop-count filtering, IEEE/ACM Trans. Netw. 15 (1) (2007) 40-53. (Pubitemid 46464416)
10. P. Du, A. Nakao, DDoS defense deployment with network egress and ingress filtering, in: Proceeding of the IEEE International Conference on Communications, 2010, pp. 1-6.
11. Z. Duan, X. Yuan, J. Chandrashekar, Controlling IP spoofing through interdomain packet filters, IEEE Trans. Dependable Secure Comput. 5 (1) (2007) 22-36. (Pubitemid 351239530)
12. F. Soldo, A. Markopoulou, K. Argyraki, Optimal filtering of source address prefixes: models and algorithms, in: Proc. IEEE INFOCOM, 2009.
13. M.T. Goodrich, Probabilistic packet marking for large-scale IP traceback, IEEE/ACM Trans. Netw. 16 (1) (2008) 15-24. (Pubitemid 351386752)
14. Y. Xiang, W. Zhou, M. Guo, Flexible deterministic packet marking: an IP traceback system to find the real source of attacks, IEEE Trans. Parallel Distrib. Syst. 20 (4) (2009) 567-580.
15. S. Yu, W. Zhou, R. Doss, W. Jia, Traceback of DDoS attacks using entropy variations, IEEE Trans. Parallel Distrib. Syst. 22 (3) (2011) 412-425.
16. Y. Xie, S. Yu, Monitoring the application-layer DDoS attacks for popular websites, IEEE/ACM Trans. Netw. 17 (1) (2009) 15-25.
17. Y. Xie, S. Yu, A large-scale hidden semi-Markov model for anomaly detection on user browsing behaviors, IEEE/ACM Trans. Netw. 17 (1) (2009) 54-65.
18. W. Dou, L. Qi, X. Zhang, J. Chen, An evaluation method of outsourcing services for developing an elastic cloud platform, J. Supercomput. (2010) http://dx.doi.org/10.1007/s11227-010-0491-2. published online.
19. MAWI Traffic Archive [Online]. Available: http://tracer.csl.sony.co.jp/ mawi/.
20. H. Jiawei, M. Kamber, Data Mining: Concepts and Techniques, second ed., Morgan Kaufmann Publishers, 2011.
21. B. Babcock, et al. Models and issues in datastream systems, in: ACM Symp. Principles of Database Systems, 2002.
22. S. Kasera, et al. Fast and robust signaling overload control, in: Proc. Int'l Conf. Network Protocols, 2001.
23. netfilter/iptables project [Online]. Available: http://www.netfilter.org/ .