| Autor: |
Chen, Xiang, Liu, Hongyan, Huang, Qun, Zhang, Dong, Zhou, Haifeng, Wu, Chunming, Liu, Xuan |
| Zdroj: |
IEEE/ACM Transactions on Networking; February 2024, Vol. 32 Issue: 1 p191-206, 16p |
| Abstrakt: |
To date, security researchers evaluate their solutions of mitigating distributed denial-of-service (DDoS) attacks via kernel-based or kernel-bypassing testing tools. However, kernel-based tools exhibit poor scalability in attack traffic generation while kernel-bypassing tools incur unacceptable monetary cost. We propose Excalibur, a scalable and low-cost testing framework for evaluating DDoS defense solutions. The key idea is to leverage the emerging programmable switch to empower testing tasks with Tbps-level scalability and low cost. Specifically, Excalibur offers intent-based primitives to enable academic researchers to customize testing tasks on demand. Moreover, in view of switch resource limitations, Excalibur coordinates both a server and a programmable switch to jointly perform testing tasks. It realizes flexible attack traffic generation, which requires a large number of resources, in the server while using the switch to increase the sending rate of attack traffic to Tbps-level. We have implemented Excalibur on a $64\times 100$ Gbps Tofino switch. Our experiments on a $64\times 100$ Gbps Tofino switch show that Excalibur achieves orders-of-magnitude higher scalability and lower cost than existing tools. |
| Databáze: |
Supplemental Index |
| Externí odkaz: |
|
