Towards IoT-DDoS prevention using edge computing

USENIX Workshop on Hot Topics in Edge Computing, HotEdge 2018, co-located with USENIX ATC 2018

Volumn , Issue , 2018, Pages

  Bhardwaj, Ketan ^a   Miranda, Joaquin Chung ^a   Gavrilovska, Ada ^a  

^a GEORGIA INSTITUTE OF TECHNOLOGY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

DENIAL-OF-SERVICE ATTACK; EDGE COMPUTING;

APPLICATION LEVEL; CRITICAL PROBLEMS; DDOS ATTACK; EDGE FUNCTION; FAST PATH; INCOMING TRAFFIC; INTERNET TRAFFIC; NEW APPROACHES;

INTERNET OF THINGS;

EID: 85071446705     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (49)

1. Etsi mobile edge computing. http://goo.gl/Qef61X.
2. Network sliceing for 5g networks: 5g americas. http://www.5gamericas.org/files1414/8052/9095/5G_ Americas_Network_Slicing_11.21_Final.pdf.
3. Open edge computing. http://openedgecomputing.org/aboutoec.html.
4. Towards 5g network slicing - motivations and challenges. http://5g.ieee.org/tech-focus/march2017/towards-5g-network-slicing.
5. Breaking down mirai: An iot DDoS botnet analysis. https://www.incapsula.com/blog/malwareanalysis-mirai-ddos-botnet.html, 10 2016.
6. DDoS & cyber security insights. https://hello.neustar.biz/2016-soc-report-securitylp.html, 12 2016.
7. Dyn analysis summary of friday october 21 attack. http://dyn.com/blog/dyn-analysis-summaryof-friday-october-21-attack/, 11 2016.
8. KrebsOnSecurity hit with record DDoS. https://krebsonsecurity.com/2016/09/ krebsonsecurity-hit-with-record-ddos/, 11 2016.
9. Project shield. https://projectshield.withgoogle.com/public/, 7 2016.
10. BoNeSi. https://github.com/Markus-Go/bonesi, 7 2017.
11. DDoS mitigation. https://www.akamai.com/us/en/resources/ddos-mitigation.jsp, 4 2017.
12. DDoS protection. https://www.cloudflare.com/ddos/, 4 2017.
13. Global DDoS threat landscape q4 2016., 3 2017.
14. Hoic - high orbit ion cannon. https://www.incapsula.com/ddos/attack-glossary/high-orbit-ioncannon.html, 4 2017.
15. Hulk, web server DoS tool. http://www.sectorix.com/2012/05/17/hulk-web-server-dos-tool/, 4 2017.
16. Loic - low orbit ion cannon. https://www.incapsula.com/ddos/attack-glossary/low-orbit-ioncannon.html, 4 2017.
17. Open vSwitch. http://openvswitch.org/, 2017.
18. Owasp http post tool. https://www.owasp.org/index.php/OWASP_HTTP_Post_Tool, 4 2017.
19. Q4 2016 state of the internet / security report. https://www.akamai.com/us/en/about/ourthinking/state-of-the-internet-report/ global-state-of-the-internet-security-ddos-attack-reports.jsp, 2 2017.
20. sFlow - making the network visible. http://www.sflow.org/, 2017.
21. Slowloris. https://www.incapsula.com/ddos/attack-glossary/slowloris.html, 4 2017.
22. Worldwide infrastructure security report. https://www.arbornetworks.com/images/documents/ WISR2016_EN_Web.pdf, 1 2017.
23. ARNAUTOV, S., TRACH, B., GREGOR, F., ET AL. SCONE: Secure Linux Containers with Intel SGX. In Proc. of Symposium on Operating Systems Design and Implementation (OSDI’16) (Savannah, GA, 2016).
24. BHARDWAJ, K. Frames, Rods and Beads of the Edge Computing ABACUS. PhD thesis, 2016.
25. BHARDWAJ, K., SHIH, M., AGARWAL, P., GAVRILOVSKA, A., KIM, T., AND SCHWAN, K. Fast, scalable and secure onloading of edge functions using airbox. In Proceedings of first IEEE/ACM symposium on Edge Computing.
26. BONOMI, F., MILITO, R., ZHU, J., AND ADDEPALLI, S. Fog computing and its role in the internet of things. In Proceedings of the first edition of the MCC workshop on Mobile cloud computing.
27. BUKAC, V. Traffic characteristics of common dos tools. Tech. rep., Masaryk University, Technical report FIMU-RS-2014-02, 2014.
28. CHOWRIWAR, S. S., MOOL, M. S., SABALE, P. P., PARPELLI, S. S., AND SAMBHE, N. Mitigating denial-of-service attacks using secure service overlay model. International Journal of Engineering Trends and Technology (IJETT) 8, 9 (2014), 37.
29. Cisco IoT Networking. https://www.cisco.com/c/m/en_us/solutions/internet-of-things/iot-system.html.
30. FAYAZ, S. K., TOBIOKA, Y., SEKAR, V., AND BAILEY, M. Bohatei: Flexible and elastic ddos defense. In Usenix Security (2015).
31. GIOTIS, K., ARGYROPOULOS, C., ANDROULIDAKIS, G., KALOGERAS, D., AND MAGLARIS, V. Combining openflow and sflow for an effective and scalable anomaly detection and mitigation mechanism on sdn environments. Computer Networks.
32. HOLMES, D. 2016 DDoS attack trends. https://f5.com/Portals/1/PDF/security/2016_DDoS_AttackTrends.pdf, 11 2016.
33. HU, Y. C., PATEL, M., SABELLA, D., SPRECHER, N., AND YOUNG, V. Mobile edge computingâĂŤa key technology towards 5g. ETSI White Paper 11 (2015).
34. JUNG, J., KRISHNAMURTHY, B., AND RABINOVICH, M. Flash crowds and denial of service attacks: Characterization and implications for cdns and web sites. In Proceedings of the 11th International Conference on World Wide Web, WWW’02.
35. KREUTZ, D., RAMOS, F. M. V., VERÃ■SSIMO, P. E., ROTHENBERG, C. E., AZODOLMOLKY, S., AND UHLIG, S. Software-defined networking: A comprehensive survey. Proceedings of the IEEE 103, 1 (Jan 2015), 14–76.
36. LI, Q., WU, G., PAPATHANASSIOU, A., AND UDAYAN, M. An end-to-end network slicing framework for 5g wireless communication systems. CoRR abs/1608.00572 (2016).
37. LoRa Alliance. https://www.lora-alliance.org/technology.
38. MICRO, T. Persirai: New internet of things (IoT) botnet targets ip cameras. http://blog.trendmicro.com/trendlabs-securityintelligence/persirai-new-internet-things-iot-botnet-targets-ipcameras/, 5 2017.
39. MIRKOVIC, J., AND REIHER, P. D-WARD: a source-end defense against flooding denial-of-service attacks. IEEE Transactions on Dependable and Secure Computing 2, 3 (July 2005), 216–232.
40. PASSITO, A., MOTA, E., BENNESBY, R., AND FONSECA, P. Agnos: A framework for autonomous control of software-defined networks. In 2014 IEEE 28th International Conference on Advanced Information Networking and Applications (May 2014), pp. 405–412.
41. PENG, T., LECKIE, C., AND RAMAMOHANARAO, K. Survey of network-based defense mechanisms countering the dos and ddos problems. ACM Comput. Surv. 39, 1 (Apr. 2007).
42. ROBINSON, M., MIRKOVIC, J., MICHEL, S., SCHNAIDER, M., AND REIHER, P. Defcom: defensive cooperative overlay mesh. In Proceedings DARPA Information Survivability Conference and Exposition (April 2003), vol. 2, pp. 101–102 vol.2.
43. SAHAY, R., BLANC, G., ZHANG, Z., AND DEBAR, H. Towards autonomic ddos mitigation using software defined networking. In SENT 2015: NDSS Workshop on Security of Emerging Networking Technologies (2015), Internet society.
44. SATYANARAYANAN, M. A brief history of cloud offload: A personal journey from odyssey through cyber foraging to cloudlets. GetMobile: Mobile Comp. and Comm. 18, 4 (Jan. 2015), 19–23.
45. SEKAR, V., DUFFIELD, N. G., SPATSCHECK, O., VAN DER MERWE, J. E., AND ZHANG, H. Lads: Large-scale automated DDoS detection system. In USENIX Annual Technical Conference, General Track (2006), pp. 171–184.
46. SITARAMAN, R. K., KASBEKAR, M., LICHTENSTEIN, W., AND JAIN, M. Overlay networks: An akamai perspective. Advanced Content Delivery, Streaming, and Cloud Services 51, 4 (2014), 305–328.
47. WANG, Y.-P. E., LIN, X., ADHIKARY, A., GROÌĹVLEN, A., SUI, Y., BLANKENSHIP, Y., BERGMAN, J.,, AND RAZAGHI, H. S. A Primer on 3GPP Narrowband Internet of Things (NBIoT). In arxiv.org (2016).
48. WILLIS, D. F., DASGUPTA, A., AND BANERJEE, S. Paradrop: A multi-tenant platform for dynamically installed third party services on home gateways. In Proceedings of the 2014 ACM SIGCOMM Workshop on Distributed Cloud Computing (New York, NY, USA, 2014), DCC’14, ACM, pp. 43–44.
49. ZARGAR, S. T., JOSHI, J., AND TIPPER, D. A survey of defense mechanisms against distributed denial of service (ddos) flooding attacks. IEEE Communications Surveys Tutorials 15, 4 (Fourth 2013), 2046–2069.