Distributed denial of service (DDoS) resilience in cloud: Review and conceptual cloud DDoS mitigation framework

Journal of Network and Computer Applications

Volumn 67, Issue , 2016, Pages 147-165

  Osanaiye, Opeyemi ^a,b   Choo, Kim Kwang Raymond ^b,c   Dlodlo, Mqhele ^a  

^a UNIVERSITY OF CAPE TOWN   (South Africa)

^b UNIVERSITY OF SOUTH AUSTRALIA   (Australia)

^c INTERPOL Global Complex for Innovation   (Singapore)

Author keywords

Anomaly based; Change point detection; Cloud distributed denial of service (DDoS) attacks; Cloud distributed denial of service (DDoS) survey; Distributed denial of service (DDoS) attack taxonomy; Flooding attacks

Indexed keywords

NETWORK SECURITY; TAXONOMIES; TRANSMISSION CONTROL PROTOCOL;

ANOMALY-BASED; CHANGE POINT DETECTION; DISTRIBUTED DENIAL OF SERVICE; DISTRIBUTED DENIAL OF SERVICE ATTACK; FLOODING ATTACKS;

DENIAL-OF-SERVICE ATTACK;

EID: 84956680241     PISSN: 10848045     EISSN: 10958592     Source Type: Journal    
DOI: 10.1016/j.jnca.2016.01.001     Document Type: Review

References (111)

1. S. Arukonda, and S. Sinha The innocent perpetrators: reflectors and reflection attacks ACSIJ Adv Comput Sci: Int J 4 1 2015 94 98
2. Ali-Eldin A, Johan T, Erik E. An adaptive hybrid elasticity controller for cloud infrastructures. In: Proceedings of the IEEE network operations and management symposium (NOMS), Maui, Hawaii; 2012. p. 204-12.
3. Alqahtani S, Gamble R. DDoS attacks in service clouds. in: Proceedings of 48th IEEE international conference on system sciences (HICSS), Kauai, Hawaii; 2015. p. 5331-40.
4. Aishwarya R, Malliga S. Intrusion detection system - an efficient way to thwart against Dos/DDos attack in the cloud environment. in: Proceedings of IEEE international conference on recent trends in information technology (ICRTIT), Chennai, India; 2014. p. 1-6.
5. Z. Anwar, and A. Malik Can a DDoS attack meltdown my data center? A simulation study and defense strategies IEEE Commun Lett 18 7 2014 1175 1178
6. Ahmed E, Clark A, Mohay G. Effective change detection in large repositories of unsolicited traffic. In: Proceedings of the fourth IEEE international conference oninternet monitoring and protection (ICIMP'09), Venice/Mestre; May 24-28 2009. p. 1-6.
7. Arshadi L, Jahangir A. On the TCP flow inter-arrival times distribution. In: Proceedings of the fifth IEEEUKSim European symposium on computer modelling and simulation (EMS), Madrid; Nov. 16-18 2011. p. 360-5.
8. M.H. Bhuyan, D.K. Bhattacharyya, and J.K. Kalita An empirical evaluation of information metrics for low-rate and high-rate DDoS attack detection Pattern Recogn Lett 51 2015 1 7
9. H. Beitollahi, and G. Deconinck Analyzing well-known countermeasures against distributed denial of service attacks Comput Commun 35 11 2012 1312 1332
10. M.H. Bhuyan, H.J. Kashyap, D.K. Bhattacharyya, and J.K. Kalita Detecting distributed denial of service attacks: methods, tools and future directions Comput J 2013 bxt031
11. Bakshi A, Yogesh B. Securing cloud from ddos attacks using intrusion detection system in virtual machine. In: Proceedings of second IEEE international conference on communication software and networks (ICCSN' 10), Singapore; 2010. p. 260-4.
12. Bedi HS, Shiva S. Securing cloud infrastructure against co-resident dos attacks using game theoretic defense mechanisms. In: Proceedings of ACM international conference on advances in computing, communications and informatics (ICACCI'12), Chennai, India; 2012. p. 463-9.
13. M.H. Bhuyan, D.K. Bhattacharyya, and J.K. Kalita Network anomaly detection: methods, systems and tools IEEE Commun Surv Tutor 16 1 2014 303 336
14. W. Christof, D. Anandasivam, B. Blau, D. Borissov, D. Menin, D. Michalk, and J. Stober Cloud computing - a classification, business models, and research directions Bus Inf Syst Eng 1 5 2009 391 399
15. J. Choi, C. Choi, B. Ko, D. Choi, and P. Kim, P Detecting web based DDoS attack using MapReduce operations in cloud computing environment J Internet Serv Inf Secur 3 3-4 2013 28 37
16. Cha B, Kim J. Study of multistage anomaly detection for secured cloud computing resources in future internet. In: Proceedings of IEEE ninth international conference on dependable, autonomic and secure computing (DASC), Sydney, Australia; 2011. p. 1046-50.
17. J. Choi, C. Choi, B. Ko, and P. Kim A method of DDoS attack detection using HTTP packet pattern and rule engine in cloud computing environment Soft Comput 18 9 2014 1697 1703
18. Chonka A, Abawajy J. Detecting and mitigating HX-DoS attacks against cloud web services. In: Proceedings of 15th IEEE international conference on network-based information systems (NBiS), Melbourne, Australia; 2012. p. 429-34.
19. Chapade SS, Pandey KU, Bhade DS. Securing cloud servers against flooding based ddos attacks. In: Proceedings of IEEE international conference on communication systems and network technologies (CSNT), Gwalior, India; 2013. p. 524-8.
20. V. Chandola, B. Arindam, and K. Vipin Anomaly detection: a survey ACM Comput Surv (CSUR) 41 3 2009 1 58
21. A. Chonka, Y. Xiang, W. Zhou, and A. Bonti Cloud security defence to protect cloud computing against HTTP-DoS and XML-DoS attacks J Netw Comput Appl 34 4 2011 1097 1107
22. Z. Chen, G. Xu, V. Mahalingam, L. Ge, J. Nguyen, W. Yu, and C. Lu A cloud computing based network monitoring and threat detection system for critical infrastructures Big Data Res 2015 10.1016/j.bdr.2015.11.002
23. Darwish M, Ouda A, Capretz LF. Cloud-based DDoS attacks and defenses. In: Proceedings of the IEEE international conference on information society (i-Society), Toronto, Canada; 2013. p. 67-71.
24. R.V. Deshmukh, and K.K. Devadkar Understanding DDoS attack & its effect in cloud Environ Procedia Comput Sci 49 2015 202 210
25. Dantas YG, Nigam V, Fonseca IE. A selective defense for application layer DDoS attacks. In: Proceedings of IEEE joint intelligence and security informatics conference (JISIC), Hague, Netherlands; 2014. p. 75-82.
26. W. Dou, Q. Chen, and J. Chen A confidence-based filtering method for DDoS attack defense in cloud environment Future Gener Comput Syst 29 7 2013 1838 1850
27. V. De Oca, D. Jeske, Q. Zhang, C. Rendon, and M. Mazda A cusum change-point detection algorithm for non-stationary sequences with application to data network surveillance J Syst Softw 83 7 2010 1288 1297
28. M. Ficco, and M. Rak Stealthy denial of service strategy in cloud computing IEEE Trans Cloud Comput 3 1 2015 80 94
29. M. Ficco, S. Venticinque, and B. Di Martino An advanced intrusion detection framework for cloud computing Comput Syst Sci Eng 28 6 2013 401 411
30. M. Ficco Security event correlation approach for cloud computing Int J High Perform Comput Netw 7 3 2013 173 185
31. M. Ficco, and F. Palmieri Introducing fraudulent energy consumption in cloud infrastructures: a new generation of denial-of-service attacks IEEE Syst J 99 2015 1 11
32. N. Gonzalez, C. Miers, F. Redigolo, M. Naslund, and M. Pourzandi A quantitative analysis of current security concerns and solutions for cloud computing J Cloud Comput 1 1 2012 1 18
33. Gruschka N, Iacono LL. Vulnerable cloud: Soap message security validation revisited. In: Proceedings of IEEE international conference on web services (ICWS 2009), Los Angeles, USA; 2009. p. 625-31.
34. I. Gul, and M. Hussain Distributed cloud intrusion detection model Int J Adv Sci Technol 34 2011 71 82
35. Gupta S, Kumar P. Vm profile based optimized network attack pattern detection scheme for ddos attacks in cloud. In: Proceedings of international symposium of security in computing and communications (SSCC 2013), Mysore, India; 2013. p. 255-61.
36. Girma A, Garuba M, Li J, Liu C. Analysis of DDoS attacks and an introduction of a hybrid statistical model to detect DDoS attacks on cloud computing environment. In: Proceedings of 12th IEEE international conference on information technology - new generations (ITNG), Las Vegas, USA; 2015. p. 212-7.
37. S. Gupta, P. Kumar, and A. Abraham A profile based network intrusion detection and prevention system for securing cloud environment Int J Distrib Sensor Netw 2013 1 12
38. Guenane F, Nogueira M, Pujolle G. Reducing DDoS attacks impact using a hybrid cloud-based firewalling architecture. In: Proceedings of IEEE global information infrastructure and networking symposium (GIIS), Montreal, Canada; 2014. p. 1-6.
39. E. Garsva, N. Paulauskas, G. Grazulevicius, and L. Gulbinovic Packet inter-arrival time distribution in academic computer network ElektronikairElektrotechnika 20 3 2014 87 90
40. Hormati M, Khendek F, Toeroe M. Towards an evaluation framework for availability solutions in the cloud. In: Proceedings of IEEE international symposium on software reliability engineering workshops (ISSREW); 2014. p. 43-6.
41. Huang VS, Huang R, Chiang M. A DDoS mitigation system with multi-stage detection and text-based turing testing in cloud computing. In: Proceedings of 27th IEEE 27th international conference on advanced information networking and applications workshops (WAINA), Barcelona, Spain; 2013. p. 655-62.
42. Idziorek J, Tannian M, Jacobson D. Attribution of fraudulent resource consumption in the cloud. In: Proceedings of 5th IEEE international conference on cloud computing (CLOUD), Honolulu, Hawaii; 2012. p. 99-106.
43. N.C. Iyengar, G. Ganapathy, P.M. Kumar, and A. Abraham A multilevel thrust filtration defending mechanism against DDoS attacks in cloud computing environment Int J Grid Utility Comput 5 4 2014 236 248
44. Ismail MN, Aborujilah A, Musa S, Shahzad A. Detecting flooding based DoS attack in cloud computing environment using covariance matrix approach. In: Proceedings of the 7th ACM international conference on ubiquitous information management and communication (ICUIMC'13), Kota Kinabalu, Malaysia; 2013. p. 36.
45. N. Iyengar, and G. Ganapathy Trilateral trust based defense mechanism against DDoS attacks in cloud computing environment Cybern Inf Technol 15 2 2015 119 140
46. J. Idziorek, T. Mark, Tannian, and D. Jacobson The insecurity of cloud utility models IEEE IT Prof 15 2 2013 22 27
47. N. Jeyanthi, and N.C. Iyengar Escape-on-sight: an efficient and scalable mechanism for escaping DDoS attacks in cloud computing environment Cybern Inf Technol 13 1 2013 46 60
48. N. Jeyanthi, N.C. Iyengar, P.M. Kumar, and A. Kannammal An enhanced entropy approach to detect and prevent DDoS in cloud environment Int J Commun Netw Inf Secur ((IJCNIS)) 5 2 2013 119 140
49. N. Jeyanthi, U. Barde, M. Sravani, V. Tiwari, and N.C. Iyengar Detection of distributed denial of service attacks in cloud computing by identifying spoofed IP Int J Commun Netw Distrib Syst 11 3 2013 262 279
50. Joshi B, Joshi BK. Securing cloud computing environment against DDoS attacks. In: Proceedings of IEEE international conference on computer communication and informatics (ICCCI), Coimbatore, India; 2012. p. 1-5.
51. Jia Q, Wang H, Fleck D, Li F, Stavrou A, Powell W. Catch me if you can: a cloud-enabled DDoS defense. In: Proceedings of 44th annual IEEE/IFIP international conference on dependable systems and networks (DSN), Atlanta, GA; 2014. p. 264-75.
52. Jaber M, Cascella R, Barakat C. Can we trust the inter-packet time for traffic classification? In: Proceedings of the IEEE international conference on communications (ICC), Kyoto; June 5-9 2011. p. 1-5.
53. Md. Tanzim Khorshed, A.B.M. Shawkat Ali, and Saleh A. Wasimi A survey on gaps, threat remediation challenges and some thoughts for proactive attack detection in cloud computing Future Gener Comput Syst 28 6 2012 833 851
54. Karnwal T, Sivakumar T, Aghila G. A comber approach to protect cloud computing against XML DDoS and HTTP DDoS attack. In: Proceedings of IEEE students' conference on electrical, electronics and computer science (SCEECS), Bhopal, India; 2012. p. 1-5.
55. T. Karnwal, S. Thandapanii, and A. Gnanasekaran A filter tree approach to protect cloud computing against xml ddos and http DDoS attack Intell Inf 2013 459 469
56. Kwon H, Kim T, Yu SJ, Sim HK. Self-similarity based lightweight intrusion detection method for cloud computing. In: Proceedings of 3rd international conference on intelligent information and database systems (ACIIDS), Daegu, Korea; 2011. p. 353-62.
57. Krishnan D, Chatterjee M. An adaptive distributed intrusion detection system for cloud computing framework. In: Proceedings of international conference of recent trends in computer networks and distributed systems security (SNDS), Trivandrum, India; 2012. p. 466-73.
58. J.P. Liebeskind Keeping organizational secrets: protective institutional mechanisms and their costs Ind Corp Change 6 3 2007 623 663
59. Lonea AM, Popescu DE, Prostean Q, Tianfield H. Soft computing applications evaluation of experiments on detecting distributed denial of service (DDoS) attacks in eucalyptus private cloud; 2013. p. 367-79.
60. Lo CC, Huang CC, Ku J. A cooperative intrusion detection system framework for cloud computing networks. In: Proceedings of 39th IEEE international conference on parallel processing workshops (ICPPW), San Diego, USA; 2010. p. 280-4.
61. A.M. Lonea, D.E. Popescu, and H. Tianfield Detecting DDoS attacks in cloud computing environment Int J Comput Commun Control 8 1 2013 70 78
62. Liu H. A new form of DOS attack in a cloud and its avoidance mechanism. In: Proceedings of the 2010 ACM workshop on cloud computing security workshop, Chicago, Illinois; 2010. p. 65-76.
63. Mell P, Grance T. The NIST definition of cloud computing; 2011.
64. Mishra A, Gupta BB, Joshi RC. A comparative study of distributed denial of service attacks, intrusion tolerance and mitigation techniques. In: Proceedings of the IEEE European intelligence and security informatics conference (EISIC), Athens, Greece; 2011. p. 286-9.
65. C. Modi, D. Patel, B. Borisaniya, H. Patel, A. Patel, and M. Rajarajan A survey of intrusion detection techniques in cloud J Netw Comput Appl 36 1 2013 42 57
66. Michelin R, Zorzo AF, De Rose C. Mitigating DoS to authenticate cloud REST APIs. In: Proceedings of 9th IEEE international conference for Internet technology and secured transactions (ICITST), London, UK; 2014. p. 106-11.
67. Modi CN, Patel DR, Patel A, Muttukrishnan R. Bayesian Classifier and Snort based network intrusion detection system in cloud computing. In: Proceedings of 3rd international IEEE conference on computing communication & networking technologies (ICCCNT), Coimbatore, India; 2012. p. 1-7.
68. A. Merlo, M. Migliardi, N. Gobbo, F. Palmieri, and A. Castiglione A denial of service attack to UMTS networks using SIM-less devices IEEE Trans Depend Secure Comput 11 3 2014 280 291
69. Marnerides A, Spachos P, Chatzimisios P, Mauthe A. Malware detection in the cloud under ensemble empirical mode decomposition. In: Proceedings of IEEE International conference on computing, networking and communications (ICNC) and information security symposium, Garden Grove, CA; 2015. p. 82-8.
70. P. Negi, A. Mishra, and B.B. Gupta Enhanced CBF packet filtering method to detect DDoS attack in cloud computing environment Int J Comput Sci Issues 2 4 2013 142 146
71. T. Nguyen, and G. Armitage A survey of techniques for internet traffic classification using machine learning IEEE Commun Surv Tutor 10 4 2008 56 76
72. [online]
73. [online]
74. [online]
75. [online]
76. [online]
77. Osanaiye O. IP spoofing detection for preventing DDoS attack in cloud computing. in: Proceedings of 18th IEEE international conference on intelligence in next generation networks (ICIN), Paris, France; 2015. p. 139-41.
78. Online The Truth about DDoS Attacks: Part 1
79. Osanaiye O, Dlodlo M. TCP/IP header classification for detecting spoofed DDoS attack in Cloud environment. In: Proceedings of 16th IEEE international conference on computer as a tool (EUROCON 2015), Salamanca, Spain; 2015. p. 1-6.
80. Prabadevi B, Jeyanthi N. Distributed denial of service attacks and its effects on cloud environment - a survey. In: Proceedings of the IEEE international symposium on networks, computers and communications; 2014. p. 1-5.
81. F. Palmieri, U. Fiore, and A. Castiglione A distributed approach to network anomaly detection based on independent component analysis Concurr Comput: Pract Exp 26 5 2014 1113 1129
82. F. Palmieri, S. Ricciardi, U. Fiore, M. Ficco, and A. Castiglione Energy-oriented denial of service attacks: an emerging menace for large cloud infrastructures J Supercomput 71 5 2013 1620 1641
83. V. Prokhorenko, K-KR Choo, and K. Ashman Web application protection techniques: a taxonomy J Netw Comput Appl 60 2016 95 112
84. Palmieri F, Ficco M, Castiglione A. Adaptive stealth energy-related DoS attacks against cloud data centers. In: Proceedings of 8th IEEE international conference on innovative mobile and internet services in ubiquitous computing (IMIS), Birmingham, England; 2014. p. 265-72.
85. A. Polunchenko, and A. Tartakovsky State-of-the-art in sequential change-point detection Methodol Comput Appl Probab 14 3 2012 649 684
86. Peng T, Leckie C, Ramamohanarao K. Proactively detecting distributed denial of service attacks using source IP address monitoring. In: Proceedings of 3rd international networking conference (IFIO-TC6), Athens, Greece; May 9-14 2004. p. 771-82.
87. D. Quick, and K.-K.R. Choo Google drive: forensic analysis of data remnants J Netw Comput Appl 40 2014 179 193
88. Rui X, Wen-Li M, Wen-Ling Z. Defending against UDP flooding by negative selection algorithm based on eigenvalue sets. In: Proceedings of IEEE fifth international conference on information assurance and security (IAS' 09), Xi'an, China, vol. 2; 2009. p. 342-5.
89. SC Magazine, Website,
90. Sqalli MH, Al-Haidari F, Salah K. Edos-shield-a two-steps mitigation technique against edos attacks in cloud computing. In: Proceedings of the fourth IEEE international conference on utility and cloud computing (UCC), Victoria, Australia; 2011. p. 49-56.
91. Shamsolmoali P, Zareapoor M. Statistical-based filtering system against DDOS attacks in cloud computing. In: Proceedings of international conference on advances in computing, communications and informatics (ICACCI), New Delhi, India; 2014. p. 1234-9.
92. Swathi RM. DDoS attacks on the rice: increased 132% in Q2 2015, HTTPS most targeted. Available from:
93. M. Srivastava, and Y. Wu Comparison of EWMA, CUSUM and Shiryayev-Roberts procedures for detecting a shift in the mean Ann Stat 1993 645 670
94. Tsai WT, Sun X, Balasooriya J. Service-oriented cloud computing architecture. In: Proceedings of the seventh IEEE international conference of information technology: new generations (ITNG); 2010. p. 684-9.
95. S. Teng, C. Zheng, H. Zhu, D. Liu, and W. Zhang A cooperative intrusion detection model for cloud computing networks Int J Secur Appl 8 3 2014 107 118
96. Tavallaee M, Bagheri E, Lu W, Ghorbani A. A detailed analysis of the KDD CUP 99 data set. In: Proceedings of the second IEEE symposium on computational intelligence for security and defense applications (CISDA 2009), Ottawa, Canada; 2009. p.1-6.
97. Takada H, Hofmann U. Application and analyses of cumulative sum to detect highly distributed denial of service attacks using different attack traffic patterns; 2004.
98. T. Vissers, T.S. Somasundaram, L. Pieters, K. Govindarajan, and P. Hellinckx DDoS defense system for web services in a cloud environment Future Gener Comput Syst 37 2014 37 45
99. V. Varadharajan, and U. Tupakula Counteracting security attacks in virtual machines in the cloud using property based attestation J Netw Comput Appl 40 2014 31 45
100. Wayne J. Cloud hooks: security and privacy issues in cloud computing. In: Proceedings of the IEEE 44th Hawaii international conference on system sciences (HICSS); 2011. p. 1-10.
101. B. Wang, Y. Zheng, W. Lou, and Y. Hou DDoS attack protection in the era of cloud computing and software-defined networking Comput Netw 81 2015 308 319
102. F. Wong, and C.X. Tan A survey of trends in massive DDoS attacks and cloud-based mitigations Int J Netw Secur Appl (IJNSA) 6 3 2014 57 71
103. Wang B, Zheng Y, Lou W, Hou Y. DDoS attack protection in the era of cloud computing and software-defined networking. In: Proceedings of the 22nd IEEE international conference on network protocols (ICNP), Raleigh, NC; 2014. p. 624-9.
104. H. Wang, Z. Danlu, and G. Kang Change-point monitoring for the detection of DoS attacks IEEE Trans Depend Secur Comput 1 4 2004 193 208
105. Yang L, Zhang T, Song J, Wang J, Chen P. Defense of DDoS attack for cloud computing. In: Proceedings of IEEE international conference on computer science and automation engineering (CSAE), vol. 2, Zhangjiajie, China; 2012. p. 626-9.
106. S. Yu, Y. Tian, S. Guo, and D.O. Wu Can we beat DDoS attacks in clouds? IEEE Trans Parallel Distrib Syst 25 9 2014 2245 2254
107. Q. Yan, R. Yu, Q. Gong, and J. Li Software-defined networking (SDN) and distributed denial of service (DDoS) attacks in cloud computing environments: a survey, some research issues, and challenges IEEE Commun Surv Tutor 99 2015 1 23
108. S.T. Zargar, J. Joshi, and T. David A survey of defense mechanisms against distributed denial of service (DDoS) flooding attacks IEEE Commun Surv Tutor 15 4 2013 2046 2069
109. M. Zakarya DDoS verification and attack packet dropping algorithm in cloud computing World Appl Sci J 23 11 2013 1418 1424
110. J. Zhang, C. Zou, and Z. Wang An adaptive Shiryaev-Roberts procedure for monitoring dispersion Comput Ind Eng 61 4 2011 1166 1172
111. Zhou Z, Chen X, Wang J, Li X. A distributed detection scheme based on adaptive CUSUM and weighted CAT against DDoS Attacks. In: Proceedings of the 3rd international conference on multimedia technology (ICMT 2013), Guangzhou, China; 2013. p. 97-105.