DDoS attack protection in the era of cloud computing and Software-Defined Networking

Computer Networks

Volumn 81, Issue , 2015, Pages 308-319

  Wang, Bing ^a   Zheng, Yao ^a   Lou, Wenjing ^a   Hou, Y Thomas ^a  

^a VIRGINIA POLYTECHNIC INSTITUTE AND STATE UNIVERSITY   (United States)

Author keywords

DDoS mitigation; Graphical model; Networking; Software Defined

Indexed keywords

CLOUD COMPUTING; COST EFFECTIVENESS; DENIAL-OF-SERVICE ATTACK; MOBILE SECURITY; NETWORK ARCHITECTURE; NETWORK MANAGEMENT; NETWORK SECURITY;

DDOS ATTACK MITIGATIONS; DDOS MITIGATIONS; GRAPHICAL MODEL; IN-NETWORK MANAGEMENT; NETWORKING; PROGRAMMABLE NETWORK; SOFTWARE DEFINED NETWORKING (SDN); SOFTWARE-DEFINED NETWORKINGS;

DISTRIBUTED COMPUTER SYSTEMS;

EID: 84925396031     PISSN: 13891286     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.comnet.2015.02.026     Document Type: Article

References (28)

1. D. Geneiatakis, G. Portokalidis, A.D. Keromytis, A multilayer overlay network architecture for enhancing IP services availability against DoS, in: 7th International Conference,ICISS, Kolkata, India, December 2011.
2. X. Liu, X. Yang, and Y. Lu To filter or to authorize: network-layer DoS defense against multimillion-node botnets ACM SIGCOMM Computer Communication Review 2008 ACM
3. P. Mittal, D. Kim, Y.C. Hu, M. Caesar, Mirage: Towards Deployable DDoS Defense for Web Applications, arXiv preprint, August 2012.
4. W.G. Morein, A. Stavrou, D.L. Cook, A.D. Keromytis, V. Misra, and D. Rubenstein Using graphic turing tests to counter automated DDoS attacks against web servers 10th ACM Conference on CCS 2003 ACM
5. H. Wang, L. Xu, G. Gu, Of-guard: A DoS Attack Prevention Extension in Software-defined Networks, The Open Network Summit (ONS), 2014.
6. D. Kreutz, F. Ramos, and P. Verissimo Towards secure and dependable software-defined networks Proceedings of the Second ACM SIGCOMM Workshop on Hot Topics in Software defined Networking 2013 ACM 55 60
7. C. Kruegel, D. Mutz, W. Robertson, and F. Valeur Bayesian event classification for intrusion detection Computer Security Applications Conference, 2003, Proceedings, 19th Annual 2003 IEEE
8. K.K. Gupta, B. Nath, and R. Kotagiri Layered approach using conditional random fields for intrusion detection IEEE Trans. Dependable Sec. Comput. 2010
9. J. Xu, and C.R. Shelton Intrusion detection using continuous time bayesian networks J. Artif. Intell. Res. 2010
10. B. Wang, Y. Zheng, W. Lou, and Y.T. Hou DDoS attack protection in the era of cloud computing and software-defined networking 9th Workshop on Secure Network Protocols (NPSec) in Conjunction with ICNP 2014 IEEE
11. C. Clark, K. Fraser, S. Hand, J.G. Hansen, E. Jul, C. Limpach, I. Pratt, A. Warfield, Live migration of virtual machines, in: Proceedings of the 2nd Conference on Symposium NSDI, USENIX, 2005.
12. N. McKeown, T. Anderson, H. Balakrishnan, G. Parulkar, L. Peterson, J. Rexford, S. Shenker, and J. Turner Openflow: enabling innovation in campus networks ACM SIGCOMM Comput. Commun. Rev. 2008
13. D. Kollar, and N. Friedman Probabilistic Graphical Models: Principles and Techniques 2009 The MIT Press
14. C. Chow, and C. Liu Approximating discrete probability distributions with dependence trees IEEE Trans. Inform. Theory 1968
15. K.P. Murphy Machine Learning: A Probabilistic Perspective 2012 The MIT Press
16. K. Thompson, G. Miller, and R. Wilder Wide-area internet traffic patterns and characteristics IEEE Netw. 1997
17. J. Quionero-Candela, M. Sugiyama, A. Schwaighofer, and N.D. Lawrence Dataset Shift in Machine Learning 2009 The MIT Press
18. B. Lantz, B. Heller, and N. McKeown A network in a laptop: rapid prototyping for software-defined networks 9th ACM SIGCOMM Workshop HotSDN 2010 ACM
19. Floodlight OpenFlow Controller. < http://floodlight.openflowhub.org >.
20. A. Shiravi, H. Shiravi, M. Tavallaee, A.A. Ghorbani, Toward developing a systematic approach to generate benchmark datasets for intrusion detection, 2012.
21. T. Peng, C. Leckie, and K. Ramamohanarao Survey of network-based defense mechanisms countering the dos and DDoS problems ACM Comput. Surv. 1 2007
22. S. Zargar, J. Joshi, and D. Tipper A survey of defense mechanisms against distributed denial of service (DDoS) flooding attacks IEEE Commun. Surv. Tutorials 2013
23. J.H. Jafarian, E. Al-Shaer, and Q. Duan Openflow random host mutation: transparent moving target defense using software defined networking Proceedings of the 1st Workshop on HotSDN, SIGCOMM 2012 ACM
24. P. Porras, S. Shin, V. Yegneswaran, M. Fong, M. Tyson, and G. Gu A security enforcement kernel for openflow networks Proceedings of the 1st Workshop on HotSDN, SIGGCOMM 2012 ACM
25. G. Yao, J. Bi, P. Xiao, Source address validation solution with openflow/noxarchitecture, in: IEEE ICNP, 2011.
26. S. Shin, P. Porras, V. Yegneswaran, M. Fong, G. Gu, M. Tyson, Fresco: modular composable security services for software-defined networks, in: Proceedings of NDSS, 2013.
27. A. Patcha, and J.M. Park An overview of anomaly detection techniques: existing solutions and latest technological trends Comput. Netw. 2007
28. D. Heckerman A Tutorial on Learning with Bayesian Networks 2008 Springer