Introducing fraudulent energy consumption in cloud infrastructures: A new generation of denial-of-service attacks

IEEE Systems Journal

Volumn 11, Issue 2, 2017, Pages 460-470

  Ficco, Massimo ^a   Palmieri, Francesco ^a  

^a SECOND UNIVERSITY OF NAPLES   (Italy)

Author keywords

Cloud infrastructures; denial of service; fraudulent energy consumption; intrusion prevention; low rate attacks

Indexed keywords

COMPUTER CRIME; DENIAL-OF-SERVICE ATTACK; ENERGY UTILIZATION; NETWORK SECURITY; PLATFORM AS A SERVICE (PAAS);

BUSINESS ENVIRONMENTS; CLOUD ENVIRONMENTS; CLOUD INFRASTRUCTURES; DENIAL OF SERVICE; GOVERNMENT ORGANIZATIONS; INFORMATION TECHNOLOGY SECTOR; INTRUSION PREVENTION; LOW RATES;

GREEN COMPUTING;

EID: 85027465865     PISSN: 19328184     EISSN: 19379234     Source Type: Journal    
DOI: 10.1109/JSYST.2015.2414822     Document Type: Article

References (26)

1. F. Palmieri, S. Ricciardi, and U. Fiore, "Evaluating network-based DoS attacks under the energy consumption perspective: New security issues in the coming green ICT area, " in Proc. IEEE Int. Conf. BWCCA, 2011, pp. 374-379.
2. L. Caviglione, A. Merlo, and M. Migliardi, "Green- Aware security: Towards a new research field, " J. Inf. Assurance Security, vol. 7, no. 5, pp. 338-346, 2012.
3. J. Lin, F. Leu, and Y. Chen, "Analyzing job completion reliability and job energy consumption for a general map reduce infrastructure, " J. High Speed Netw, vol. 19, no. 3, pp. 203-214, Jul. 2013.
4. Z. Wu, M. Xie, and H. Wang, "On energy security of server systems, " IEEE Trans. Dependable Secure Comput, vol. 9, no. 6, pp. 865-876, Nov. 2012.
5. Palmieri F.,Ricciardi S.,Fiore U.,Castiglione A.,Ficco M.Energy-oriented denial of service attacks: an emerging menace for large cloud infrastructures.Journal of Supercomputing 71(5),2015.pp:1620-1641
6. C. Esposito, M. Ficco, F. Palmieri, and A. Castiglione, "Interconnecting federated clouds by using publish-subscribe service, " Cluster Comput, vol. 16, no. 4, pp. 887-903, Dec. 2013.
7. J. Idziorek, "Exploiting cloud utility models for profit and ruin, " in Proc. IEEE CLOUD, 2011, pp. 33-40.
8. J. Idziorek, M. F. Tannian, and D. Jacobson, "The insecurity of cloud utility models, " IEEE IT Prof, vol. 15, no. 2, pp. 22-27, Mar./Apr. 2013.
9. M. Ficco, "Security event correlation approach for cloud computing, " J. High Perform. Comput. Netw, vol. 7, no. 3, pp. 173-185, Sep. 2013.
10. S. Antonatos, M. Locasto, S. Sidiroglou, A. D. Keromytis, and E. Markatos, "Defending against next generation through network/endpoint collaboration and interaction, " in Proc. 3rd Eur. Conf. Comput. Netw. Defense, 2009, pp. 131-141.
11. A. Kuzmanovic, and E. Knightly, "Low-rate TCP-Targeted denial of service attacks and counter strategies, " Proc. IEEE/ACM TON, vol. 14, no. 4, pp. 683-696, Aug. 2006.
12. A. Kuzmanovic, and E. Knightly, "Low-rate TCP-Targeted denial of service attacks: The shrew versus the mice and elephants, " in Proc. Conf. Appl., Technol., ACM, 2003, pp. 75-86.
13. V. Durcekova, L. Schwartz, and N. Shahmehri, "Sophisticated denial of service attacks aimed at application layer, " in Proc. 9th Int. Conf. ELEKTRO, 2012, pp. 55-60.
14. G. Macia-Fernandez, E. Diaz-Verdejo, and P. Garcia-Teodoro, "LoRDAS: A low-rate DoS attack against application servers, " in Proc. 2th Int. Conf. Critical Inf. Infrastructures Security, LNCS, 2008, vol. 5141, pp. 197-209.
15. X. Luo, and R. K. Chang, "On a new class of pulsing denial-of-service attacks and the defense, " in Proc. Netw. Distrib. Syst. Security Symp., 2005, pp. 61-79.
16. G. Macia-Fernandez, J. E. Diaz-Verdejo, and P. Garcia-Teodoro, "Mathematical model for low-rate DoS attacks against application server, " IEEE Trans. Inf. Forensics Security, vol. 4, no. 3, pp. 519-529, Sep. 2009.
17. X. Xu, X. Guo, and S. Zhu, "A queuing analysis for low-rate DoS attacks against application servers, " in Proc. IEEE Conf. Wireless Commun., Netw. Inf. Security, 2010, pp. 500-504.
18. G. Macia-Fernandez, J. E. Daz-Verdejo, and P. Garca-Teodoro, "Evaluation of a low-rate dos attack against iterative servers, " Comput. Netw, vol. 51, no. 4, pp. 1013-1030, Mar. 2007.
19. G. Macia-Fernandez, J. E. Daz-Verdejo, and P. Garcia-Teodoro, "Evaluation of a low-rate DoS attack against application servers, " Comput. Security, vol. 27, no. 7/8, pp. 335-354, Dec. 2008.
20. F. Palmieri, M. Ficco, and A. Castiglione, "Adaptive stealth energy-related DoS attacks against cloud data centers, " in Proc. 8th Int. Conf. IMIS, 2014, pp. 265-272.
21. A. Chonka, Y. Xiang, and A. Bonti, "Cloud security defense to protect cloud computing against HTTP-DOS and XML-DoS attacks, " J. Netw. Comput. Appl, vol. 34, no. 4, pp. 1097-1107, Jul. 2011.
22. OpenNebula Archives, "Oneflow server configuration 4.4." [Online]. Available: http://archives.opennebula.org/documentation:rel4.4:appflow-configure
23. H. Liu, and M. S. Kim, "Real-Time detection of stealthy DDoS attacks using time-series decomposition, " in Proc. IEEE ICC, 2010, pp. 1-6.
24. F. Palmieri, and U. Fiore, "Network anomaly detection through nonlinear analysis, " Comput. Security, vol. 29, no. 7, pp. 737-755, Oct. 2010.
25. F. Palmieri, U. Fiore, and A. Castiglione, "A distributed approach to network anomaly detection based on independent component analysis, " Concurrency Comput.: Practice Exp, vol. 25, no. 5, pp. 1113-1129, Apr. 2014.
26. G. Macia-Fernandez, R. A. Rodriguez-Gomez, and J. E. Diaz-Verdejo, "Defense techniques for low-rate DoS attacks against application servers, " Comput. Netw, vol. 54, no. 15, pp. 2711-2727, Oct. 2010.