Stealthy denial of service strategy in cloud computing

IEEE Transactions on Cloud Computing

Volumn 3, Issue 1, 2015, Pages 80-94

  Ficco, Massimo ^a   Rak, Massimiliano ^a  

^a SECOND UNIVERSITY OF NAPLES   (Italy)

Author keywords

Cloud computing; intrusion detection; low rate attacks; sophisticated attacks strategy

Indexed keywords

CLOUD COMPUTING; COSTS; INTRUSION DETECTION; MAINTENANCE; SECURITY OF DATA; TRANSMISSION CONTROL PROTOCOL;

BRUTE-FORCE ATTACK; DENIAL OF SERVICE; DETECTION DELAYS; DETECTION MECHANISM; LOW RATES; RESOURCE CONSUMPTION; SOPHISTICATED ATTACKS STRATEGY; WORST-CASE PERFORMANCE;

DENIAL-OF-SERVICE ATTACK;

EID: 84924706348     PISSN: None     EISSN: 21687161     Source Type: Journal    
DOI: 10.1109/TCC.2014.2325045     Document Type: Article

References (41)

1. M. C. Mont, K. McCorry, N. Papanikolaou, and S. Pearson, "Security and privacy governance in cloud computing via SLAS and a policy orchestration service, " in Proc. 2nd Int. Conf. Cloud Comput. Serv. Sci., 2012, pp. 670-674.
2. F. Cheng and C. Meinel, "Intrusion Detection in the Cloud, " in Proc. IEEE Int. Conf. Dependable, Autonom. Secure Comput., Dec. 2009, pp. 729-734.
3. C. Metz. (2009, Oct.). DDoS attack rains down on Amazon Cloud [Online]. Available: http://www.theregister.co.uk/2009/10/05/amazon-bitbucket-outage/S
4. K. Lu, D. Wu, J. Fan, S. Todorovic, and A. Nucci, "Robust and efficient detection of DDoS attacks for large-scale internet, " Comput. Netw., vol. 51, no. 18, pp. 5036-5056, 2007.
5. H. Sun, J. C. S. Lui, and D. K. Yau, "Defending against low-rate TCP attacks: Dynamic detection and protection, " in Proc. 12th IEEE Int. Conf. Netw. Protocol., 2004, pp. 196-205.
6. A. Kuzmanovic and E. W. Knightly, "Low-rate TCP-Targeted denial of service attacks: The shrew vs. the mice and elephants, " in Proc. Int. Conf. Appl., Technol., Archit., Protocols Comput. Commun., 2003, pp. 75-86.
7. M. Guirguis, A. Bestavros, I. Matta, and Y. Zhang, "Reduction of quality (RoQ) attacks on internet end-systems, " in Proc. IEEE Int. Conf. Comput. Commun., Mar. 2005, pp. 1362-1372.
8. X. Xu, X. Guo, and S. Zhu, "A queuing analysis for low-rate DoS attacks against application servers, " in Proc. IEEE Int. Conf. Wireless Commun., Netw. Inf. Security, 2010, pp. 500-504.
9. L. Wang, Z. Li, Y. Chen, Z. Fu, and X. Li, "Thwarting zero-day polymorphic worms with network-level length-based signature generation, " IEEE/ACM Trans. Netw., vol. 18, no. 1, pp. 53-66, Feb. 2010.
10. A. Chonka, Y. Xiang, W. Zhou, and A. Bonti, "Cloud security defense to protect cloud computing against HTTP-DOS and XMLDoS attacks, " J. Netw. Comput. Appl., vol. 34, no. 4, pp. 1097-1107, Jul. 2011.
11. D. Petcu, C. Craciun, M. Neagul, S. Panica, B. Di Martino, S. Venticinque, M. Rak, and R. Aversa, "Architecturing a sky computing platform, " in Proc. Int. Conf. Towards Serv.-Based Int., 2011, vol. 6569, pp. 1-13.
12. U. Ben-Porat, A. Bremler-Barr, and H. Levy, "Evaluating the vulnerability of network mechanisms to sophisticated DDoS attacks, " in Proc. IEEE Int. Conf. Comput. Commun., 2008, pp. 2297-2305.
13. S. Antonatos, M. Locasto, S. Sidiroglou, A. D. Keromytis, and E. Markatos, "Defending against next generation through network/endpoint collaboration and interaction, " in Proc. IEEE 3rd Eur. Int. Conf. Comput. Netw. Defense, 2008, vol. 30, pp. 131-141.
14. R. Smith, C. Estan, and S. Jha, "Backtracking algorithmic complexity attacks against a NIDS, " in Proc. Annu. Comput. Security Appl. Conf., Dec. 2006, pp. 89-98.
15. C. Castelluccia, E. Mykletun, and G. Tsudik, "Improving secure server performance by re-balancing SSL/TLS handshakes, " in Proc. ACM Symp. Inf., Apr. 2005, pp. 26-34.
16. Y. Zhang, Z. M. Mao, and J. Wang, "Low-rate TCP-targeted DoS attack disrupts internet routing, " in Proc. 14th Netw. Distrib. Syst. Security Symp., Feb. 2007, pp. 1-15.
17. U. Ben-Porat, A. Bremler-Barr, and H. Levy, "On the exploitation of CDF based wireless scheduling, " in Proc. IEEE Int. Conf. Comput. Commun., Apr. 2009, pp. 2821-2825.
18. A. Kuzmanovic and E. W. Knightly, "Low-rate TCP-targeted denial of service attacks and counter strategies, " IEEE/ACM Trans. Netw., vol. 14, no. 4, pp. 683-696, Aug. 2006.
19. S. Ebrahimi-Taghizadeh, A. Helmy, and S. Gupta, "TCP vs. TCP: A systematic study of adverse impact of short-lived TCP flows on long lived TCP flows, " in Proc. IEEE Int. Conf. Comput. Commun., Mar. 2005, pp. 926-937.
20. M. Guirguis, A. Bestavros, I. Matta, and Y. Zhang, "Reduction of quality (RoQ) attacks on dynamic load balancers: Vulnerability assessment and design tradeoffs, " in Proc. IEEE Int. Conf. Comput. Commun., 2007, pp. 857-865.
21. Y. Xuan, I. Shin, M. T. Thai, and T. Znati, "Detecting application denial-of-service attacks: A group-testing-based approach, " IEEE Tran. Parallel Distrib. Syst., vol. 21, no. 8, pp. 1203-1216, Aug. 2010.
22. V. Durcekova, L. Schwartz, and N. Shahmehri, "Sophisticated denial of service attacks aimed at application layer, " in Proc. 9th Int. Conf. ELEKTRO, 2012, pp. 55-60.
23. G. Macia-Fernandez, E. Diaz-Verdejo, and P. Garcia-Teodoro, "LoRDAS: A low-rate DoS attack against application servers, " in Proc. 2nd Int. Conf. Critical Inf. Infrastruct. Security, 2008, vol. 5141, pp. 197-209.
24. G. Macia-Fernandez, J. E. Diaz-Verdejo, and P. Garcia-Teodoro, "Mathematical model for low-rate DoS attacks against application server, " IEEE Trans. Inf. Forensics Security, vol. 4, no. 3, pp. 519-529, Sep. 2009.
25. X. Luo and R. K. Chang, "On a new class of pulsing denial-of-service attacks and the defense, " in Proc. Netw. Distrib. Syst. Security Symp., Feb. 2005, pp. 61-79.
26. Y. Chen and K. Hwang, "Collaborative detection and filtering of shrew DDoS attacks using spectral analysis, " J. Parallel Distrib. Comput., vol. 66, no. 9, pp. 1137-1151, Sep. 2006.
27. H. Liu. "Real-time detection of stealthy ddos attacks using timeseries decomposition, " in Proc. Int. Conf. Commun., 2010, pp. 1-6.
28. A. Jumratjaroenvanit and Y. Teng-amnuay, "Probability of attack based on system vulnerability life cycle, " in Proc. IEEE Int. Conf. Electron. Commerce Security, Aug. 2008, pp. 531-535.
29. Amazon EC2-Auto Scaling Feature. Giu. (2012) [Online]. Available: http://aws.amazon.com/autoscaling/
30. M. Jensen, N. Gruschka, and R. Herkenh, "A survey of attacks on web services, " Comput. Sci., vol. 24, no. 4, pp. 185-197, 2009.
31. M. Ficco and M. Rak, "Intrusion tolerance of stealth DoS attacks to web services, " in Proc. Int. Conf. Inf. Security Privacy, 2012, vol. 376, pp. 579-584.
32. M. Ficco and M. Rak, "Intrusion tolerant approach for denial of service attacks to web services, " in Proc. IEEE Int. Conf. Data Compression, Commun. Process., Jun. 2011, pp. 285-292.
33. TPC Benchmark W (TPC-W). A transactional web benchmark. (2013) [Online]. Available: at http://www.tpc.org/tpcw/
34. C. Guang, G. Jian, and D. Wei, "A time-series decomposed model of network traffic, " in Proc. 1st Int. Conf. Adv. Natural Comput., 2005, pp. 338-345.
35. B. Brodsky and B. Darkhovsky, Nonparametric Methods in Changepoint Problems. Norwell, MA, USA: Kluwer, 1993.
36. Y. Mei, L. Liu, and X. Pu, "Performance analysis of network I/O workloads in virtualized data centers, " IEEE Trans. Services Comput., vol. 6, no. 1, pp. 48-63, Jan. 2013.
37. C. C Thimmarayappa and A. Jayadharmarajan, "VMON-virtual environment application monitoring, " in Proc. Int. Conf. Adv. Comput., Commun. Inf., 2013, pp. 1936-1941.
38. H. Wu, A. N. Tantawi, and T. Yu, "A self-optimizing workload management solution for cloud applications, " in Proc. IEEE 20th Int. Conf. Web Serv., 2013, pp. 483-490.
39. S. Meng, T. Wang, and L. Liu, "Monitoring continuous state violation in datacenters: Exploring the time dimension, " in Proc. IEEE 26th Int. Conf. Data Eng., 2010, pp. 968-979.
40. Auto Scaling in the Amazon Cloud. (2012, Jan.) [Online]. Available: http://techblog.netflix.com/2012/01/auto-scalingin-amazoncloud. html
41. M. Ficco, "Security event correlation approach for cloud computing, " Int. J. High Perform. Comput. Netw., vol. 7, no. 3, pp. 173-185, 2013.