Frequency-Minimal Utility-Maximal Moving Target Defense Against DDoS in SDN-Based Systems
| Autor: | Bidyut Mukherjee, Minh Nguyen, Roshan Lal Neupane, Prasad Calyam, Saptarshi Debroy, Ajay Kumar Eeralla, Khaled Salah |
|---|---|
| Rok vydání: | 2020 |
| Předmět: |
Computer Networks and Communications
Computer science business.industry Distributed computing Testbed Novelty 020206 networking & telecommunications Denial-of-service attack Cloud computing 02 engineering and technology Reduction (complexity) Server 0202 electrical engineering electronic engineering information engineering Minification Quality of experience Electrical and Electronic Engineering business |
| Zdroj: | IEEE Transactions on Network and Service Management. 17:890-903 |
| ISSN: | 2373-7379 |
| DOI: | 10.1109/tnsm.2020.2978425 |
| Popis: | With the increase of DDoS attacks, resource adaptation schemes need to be effective to protect critical cloud-hosted applications. Specifically, they need to be adaptable to attack behavior, and be dynamic in terms of resource utilization. In this paper, we propose an intelligent strategy for proactive and reactive application migration by leveraging the concept of ‘moving target defense’ (MTD). The novelty of our approach lies in: (a) stochastic proactive migration frequency minimization across heterogeneous cloud resources to optimize migration management overheads, (b) market-driven migration location selection during proactive migration to optimize resource utilization, cloud service providers (CSPs) cost and user quality of experience, and (c) fast converging cost-minimizing reactive migration coupled with a ‘false reality’ pretense to reduce the future attack success probability. We evaluate the effectiveness of our proposed MTD-based defense strategy using a Software-defined Networking (SDN) enabled GENI Cloud testbed for a “Just-in-time news articles and video feeds” application. Our frequency minimization results show more than 40% reduction in DDoS attack success rate in the best cases when compared to the traditional periodic migration schemes on homogeneous cloud resources. The results also show that our market-driven migration location selection strategy decreases CSP cost and increases resource utilization by 30%. |
| Databáze: | OpenAIRE |
| Externí odkaz: |
|