Common network attack types and defense mechanisms

Daş, Resul; Karabade, Abubakar; Tuna, Gürkan

doi:10.1109/siu.2015.7130435

Cited by 17 publications

(2 citation statements)

References 5 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Bandwidth and resource consumption attacks and application attacks are representative types of DDoS attacks [12], [13]. In bandwidth consumption attacks, the attacker controls many zombie computers that generate a sufficiently large number of packets and to exceed network bandwidth capacity [14]. In particular, bandwidth consumption attacks cause connection failures to other systems in the same network.…”

Section: B Abnormal Behaviormentioning

confidence: 99%

Intelligent Application Protection Mechanism for Transportation in V2C Environment

et al. 2020

View full text Add to dashboard Cite

The emergence of vehicle-to-cloud (V2C) technology is changing cloud computing and transportation ecosystems. V2C technology enables the development of smart services, such as driving assistance and vehicle maintenance, that transmit information to the driver. Recent studies have primarily focused on services. To date, there has not been sufficient research on security functions to detect abnormal behaviors on virtual application. If an abnormal behavior occurs in the application, the service not only notices the wrong information to driver, but also affects the transportation system around the vehicle. To defend against distributed denial of service (DDoS) attacks, system resources should be monitored constantly. However, continuous monitoring is difficult because V2C services change dynamically according to the service environment. In addition, rule-based or supervised monitoring is impossible for each of the numerous services provided by a cloud computing center. In this paper, we propose an intelligent application protection mechanism for smart vehicle services in a V2C environment that detects abnormal behavior through image-based system resource monitoring using artificial intelligence (ISRM-AI) to improve cloud vehicle service security. The ISRM-AI generates images about system information such as CPU, network, memory on V2C cloud services. Also, the mechanism analyzes the status using a convolutional neural network (CNN) to detect abnormal behavior of the each services. We constructed a service environment to test the performance of the proposed mechanism. In addition, we simulated the proposed mechanism's ability to detect DDoS attacks using real attack data. The proposed mechanism guarantees the reliability of a smart service by enhancing the security of the V2C environment.

show abstract

Section: B Abnormal Behaviormentioning

confidence: 99%

Intelligent Application Protection Mechanism for Transportation in V2C Environment

et al. 2020

View full text Add to dashboard Cite

show abstract

“…The a ttack doess not increase the bps(bit per seconds), but increases the system overhead due to an increases in pps(packet per second). The SYN flooding attack which depletes a resource usin g SYN packet is belongs to the resource consuming attack [17,18]. In the virtual environment, the attacker can exhaust the bandwidth and the resource of network to paralyze the entire net work.…”

Section: Malicious Behaviormentioning

confidence: 99%

Auto-configurable Security Mechanism for NFV

2018

KSII TIIS

View full text Add to dashboard Cite

Recently, NFV has attracted attention as a next-generation network virtualization technology for hardware-independent and efficient utilization of resources. NFV is a technology that not only virtualize computing, server, storage, network resources based on cloud computing but also connect Multi-Tenant of VNFs, a software network function. Therefore, it is possible to reduce the cost for constructing a physical network and to construct a logical network quickly by using NFV. However, in NFV, when a new VNF is added to a running Tenant, authentication between VNFs is not performed. Because of this problem, it is impossible to identify the presence of Fake-VNF in the tenant. Such a problem can cause an access from malicious attacker to one of VNFs in tenant as well as other VNFs in the tenant, disabling the NFV environment. In this paper, we propose Auto-configurable Security Mechanism in NFV including authentication between tenant-internal VNFs, and enforcement mechanism of security policy for traffic control between VNFs. This proposal not only authenticate identification of VNF when the VNF is registered, but also apply the security policy automatically to prevent malicious behavior in the tenant. Therefore, we can establish an independent communication channel for VNFs and guarantee a secure NFV environment.

show abstract