A Cost-effective Shuffling Method against DDoS Attacks using Moving Target Defense

Abstract

Moving Target Defense (MTD) has emerged as a newcomer into the asymmetric field of attack and defense, and shuffling-based MTD has been regarded as one of the most effective ways to mitigate DDoS attacks. However, previous work does not acknowledge that frequent shuffles would significantly intensify the overhead. MTD requires a quantitative measure to compare the cost and effectiveness of available adaptations and explore the best trade-off between them. In this paper, therefore, we propose a new costeffective shuffling method against DDoS attacks using MTD. By exploiting Multi-Objective Markov Decision Processes to model the interaction between the attacker and the defender, and designing a cost-effective shuffling algorithm, we study the best trade-off between the effectiveness and cost of shuffling in a given shuffling scenario. Finally, simulation and experimentation on an experimental software defined network (SDN) indicate that our approach imposes an acceptable shuffling overload and is effective in mitigating DDoS attacks. CCS CONCEPTS• Networks → Denial-of-service attacks; • Security and privacy → Formal security models.

Cyber Deception against DDoS attack using Moving Target Defence Framework in SDN IOT-EDGE Networks

“…3) Measurement Metrics of Evaluation: The metrics by [21] are utilized to assess the proposed MTD defensive mechanisms' security, performance, and overhead impact.…”

“…A major consideration to reviewed work such as author [19], [20], [21], [22], and [23] whom some have not considered evaluation of system performance and QoS; and that of some whose proposed technique impacted performance and degraded QoS. The proposed MTD mechanism will cover this research gap and covered ranges of performance metrics to prove the theory.…”

Overview on MTD technology based on game theory

“…Zhou Y et al [18] used multi-target Markov decision process to model the interaction between attacker and defender, and designed an effective DDoS attack defense scheme based on moving target transformation. Maleki et al [19] proposed an MTD game model based on Markov decision process. Markov game model is used to compare the single -target IP jump and multi -target IP jump.…”

Toward Domain Name System privacy enhancement using intent‐based Moving Target Defense framework over software defined networks

“…There are many security solutions proposed so far based on MTD in many areas including cloud computing, DDoS protection, and web security. [8][9][10][11] Software defined networking (SDN) is a very well-established networking paradigm. 12,13 Its fundamental goal is the separation of control and data planes and provision of central management.…”