A game theoretical based system using holt-winters and genetic algorithm with fuzzy logic for DoS/DDoS mitigation on SDN networks

IEEE Access

Volumn 5, Issue , 2017, Pages 9485-9496

  De Assis, Marcos V O ^a   Hamamoto, Anderson H ^b   Abrao, Taufik ^b   Proenca, Mario Lemes ^b  

^a FEDERAL UNIVERSITY OF PARANÁ   (Brazil)

^b STATE UNIVERSITY OF LONDRINA   (Brazil)

Author keywords

Denial of service; Fuzzy logic; GADS; Game theory; HWDS

Indexed keywords

COMPUTATION THEORY; COMPUTER CIRCUITS; DECISION MAKING; DECISION THEORY; DENIAL-OF-SERVICE ATTACK; DISTRIBUTED COMPUTER SYSTEMS; GAME THEORY; GENETIC ALGORITHMS; HEURISTIC METHODS; SIGNAL DETECTION;

CLOUD COMPUTING ENVIRONMENTS; DENIAL OF SERVICE; EFFECTIVENESS AND EFFICIENCIES; GADS; HWDS; IS SECURITY MANAGEMENT; MANAGEMENT MECHANISMS; NETWORK ADMINISTRATOR;

FUZZY LOGIC;

EID: 85025627122     PISSN: None     EISSN: 21693536     Source Type: Journal    
DOI: 10.1109/ACCESS.2017.2702341     Document Type: Article

References (38)

1. N. Hoque, D. K. Bhattacharyya, and J. K. Kalita, "Botnet in DDoS attacks: Trends and challenges," IEEE Commun. Surveys. Tuts., vol. 17, no. 4, pp. 2242-2270, 4th Quart., 2015.
2. Q. Yan, F. R. Yu, Q. Gong, and J. Li, "Software-de-ned networking (SDN) and distributed denial of service (DDoS) attacks in cloud computing environments: A survey, some research issues, and challenges," IEEE Commun. Surveys Tuts., vol. 18, no. 1, pp. 602-622, 1st Quart., 2016.
3. W. Li,W. Meng, and L. F. Kwok, "A survey on OpenFlow-based software de-ned networks: Security challenges and countermeasures," J. Netw. Comput. Appl., vol. 68, pp. 126-139, Jun. 2016.
4. S.-S. Seo, Y. J. Won, and J. W.-K. Hong, "Witnessing distributed denialof-service traf-c from an attacker's network," in Proc. 7th Int. Conf. Netw. Ser. Manage. (CNSM), Oct. 2011, pp. 1-7.
5. A. Kind, M. P. Stoecklin, and X. Dimitropoulos, "Histogram-based traf-c anomaly detection," IEEE Trans. Netw. Ser. Manage., vol. 6, no. 2, pp. 110-121, Jun. 2009.
6. M. H. A. C. Adaniya, M. F. Lima, J. J. P. C. Rodrigues, T. Abraõ, M. L. Proencą, Jr., "Anomaly detection using DSNS and-re-y harmonic clustering algorithm," in Proc. IEEE Int. Conf. Commun. (ICC), Jun. 2012, pp. 1183-1187.
7. Q. Guan and S. Fu, "Wavelet-based multi-scale anomaly identi-cation in cloud computing systems," in Proc. IEEE Global Commun. Conf. (GLOBECOM), Dec. 2013, pp. 1379-1384.
8. M. V. O. de Assis, J. J. P. C. Rodrigues, and M. L. Proencą, Jr., "A novel anomaly detection system based on seven-dimensional-ow analysis," in Proc. IEEE Global Commun. Conf. (GLOBECOM), Dec. 2013, pp. 735-740.
9. M. V. O. de Assis, J. J. P. C. Rodrigues, and M. L. Proencą, Jr., "A sevendimensional-ow analysis to help autonomous network management," Inf. Sci., vol. 278, pp. 900-913, Sep. 2014.
10. Y. Cui et al., "SD-Anti-DDoS: Fast and ef-cient DDoS defense in software-de-ned networks," J. Netw. Comput. Appl., vol. 68, pp. 65-79, Jun. 2016.
11. K. Giotis, C. Argyropoulos, G. Androulidakis, D. Kalogeras, and V. Maglaris, "Combining OpenFlow and sFlow for an effective and scalable anomaly detection and mitigation mechanism on SDN environments," Comput. Netw., vol. 62, pp. 122-136, Apr. 2014.
12. M. Lee, X. Ye, D. Marconett, S. Johnson, R. Vemuri, and S. J. B. Yoo, "Autonomous network management using cooperative learning for network-wide load balancing in heterogeneous networks," in Proc. IEEE Global Telecommun. Conf. (GLOBECOM), Nov. 2008, pp. 1-5.
13. J. Gao, S. A. Vorobyov, and H. Jiang, "Game theoretic solutions for precoding strategies over the interference channel," in Proc. IEEE Global Telecommun. Conf. (GLOBECOM), Nov. 2008, pp. 1-5.
14. O. E. Ferkouss and W. Ajib, "Game theory based resource allocation for cognitive radio networks," in Proc. IEEE Global Commun. Conf. (GLOBECOM), Dec. 2012, pp. 1174-1179.
15. M. Hamdi and H. Abie, "Game-based adaptive security in the Internet of Things for eHealth," in Proc. IEEE Int. Conf. Commun. (ICC), Jun. 2014, pp. 920-925.
16. M. V. O. de Assis and M. L. Proencą, Jr., "Scorpius: SFlow network anomaly simulator," J. Comput. Sci., vol. 11, no. 4, pp. 662-674, Apr. 2015.
17. A. H. Hamamoto, L. F. Carvalho, and M. L. Proencą, Jr., "ACO and GA metaheuristics for anomaly detection," in Proc. 34th Int. Conf. Chilean Comput. Sci. Soc. (SCCC), Nov. 2015, pp. 1-6.
18. C. Basile, D. Canavese, A. Lioy, C. Pitscheider, and F. Valenza, "Interfunction anomaly analysis for correct SDN/NFV deployment," Int. J. Netw. Manage., vol. 26, no. 1, pp. 25-43, Jan. 2016.
19. J. Li, J.-H. Yoo, and J.W.-K. Hong, "Dynamic control plane management for software-de-ned networks," Int. J. Netw. Manage., vol. 26, no. 2, pp. 111-130, Mar. 2016.
20. S. Song, H. Park, B.-Y. Choi, T. Choi, and H. Zhu, "Control path management framework for enhancing software-de-ned network (SDN) reliability," IEEE Trans. Netw. Ser. Manage., to be published, doi: 10.1109/TNSM.2017.2669082.
21. G. Poulios, K. Tsagkaris, P. Demestichas, A. Tall, Z. Altman, and C. Destré, "Autonomics and SDN for self-organizing networks," in Proc. 11th Int. Symp. Wireless Commun. Syst. (ISWCS), Aug. 2014, pp. 830-835.
22. Z. Tan, A. Jamdagni, X. He, P. Nanda, and R. P. Liu, "A system for denial-of-service attack detection based on multivariate correlation analysis," IEEE Trans. Parallel Distrib. Syst., vol. 25, no. 2, pp. 447-456, Feb. 2014.
23. M. Long, C.-H.Wu, and J. Y. Hung, "Denial of service attacks on networkbased control systems: Impact and mitigation," IEEE Trans Ind. Informat., vol. 1, no. 2, pp. 85-96, May 2005.
24. L. F. Carvalho, S. Barbon, Jr., L. S. de Mendes, and M. L. Proencą, Jr., "Unsupervised learning clustering and self-organized agents applied to help network management," Expert Syst. Appl., vol. 54, pp. 29-47, Jul. 2016.
25. C. Röpke and T. Holz, "On network operating system security," Networks, vol. 26, no. 1, pp. 6-24, Jan. 2016.
26. A. Lara and B. Ramamurthy, "OpenSec: Policy-based security using software-de-ned networking," IEEE Trans. Netw. Ser. Manage., vol. 13, no. 1, pp. 30-42, Mar. 2016.
27. L. M. Bruce, "Game theory applied to big data analytics in geosciences and remote sensing," in Proc. IEEE Int. Geosci. Remote Sens. Symp. (IGARSS), Jul. 2013, pp. 4094-4097.
28. Q. Wu, S. Shiva, S. Roy, C. Ellis, and V. Datla, "On modeling and simulation of game theory-based defense mechanisms against DoS and DDoS attacks," in Proc. Spring Simul. Multiconf., San Diego, CA, USA, 2010, pp. 159:1-159:8.
29. H. S. Bedi, S. Roy, and S. Shiva, "Game theory-based defense mechanisms against DDoS attacks on TCP/TCP-friendly-ows," in Proc. IEEE Symp. Comput. Intell. Cyber Secur. (CICS), Apr. 2011, pp. 129-136.
30. S. Roy, C. Ellis, S. Shiva, D. Dasgupta, V. Shandilya, and Q.Wu, "A survey of game theory as applied to network security," in Proc. 43rd Hawaii Int. Conf. Syst. Sci. (HICSS), Jan. 2010, pp. 1-10.
31. M. J. Osborne and A. Rubinstein, A Course in Game Theory, 1st ed. Cambridge, MA, USA: MIT Press, 1994.
32. J. H. Holland, Adaptation in Natural and Arti-cial Systems: An Introduc-tory Analysis with Applications to Biology, Control and Arti-cial Intelli-gence. Cambridge, MA, USA: MIT Press, 1992.
33. R. L. Haupt and S. E. Haupt, Practical Genetic Algorithms, 2nd ed. Hoboken, NJ, USA: Wiley, 2004.
34. S. X. Wu and W. Banzhaf, "The use of computational intelligence in intrusion detection systems: A review," Appl. Soft Comput., vol. 10, no. 1, pp. 1-35, Jan. 2010.
35. L. A. Zadeh, "Is there a need for fuzzy logic?" in Proc. Annu. Meeting North Amer. Fuzzy Inf. Process. Soc. (NAFIPS), May 2008, pp. 1-3.
36. R. Matias, A. M. M. Carvalho, L. B. Araujo, and P. R. M. Maciel, "Comparison analysis of statistical control charts for quality monitoring of network traf-c forecasts," in Proc. IEEE Int. Conf. Syst., Man, Cybern., Oct. 2011, pp. 404-409.
37. D. C. Montgomery, Introduction to Statistical Quality Control, 6th ed. Hoboken, NJ, USA: Wiley, 2008.
38. J. F. Nash, Jr., "Equilibrium points in n-person games," Proc. Nat. Acad. Sci. USA, vol. 36, no. 1, pp. 48-49, 1950.