From high-availability to collapse: quantitative analysis of “Cloud-Droplet-Freezing” attack threats to virtual machine migration in cloud computing

Wang, Yichuan; Ma, Jianfeng; Lu, Di; Lü, Xiang; Zhang, Liumei

doi:10.1007/s10586-014-0388-6

Cited by 10 publications

(7 citation statements)

References 19 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…CDF (Cloud Droplet Freezing) [12] is a new type of DDoS attack in cloud computing platform that uses virtual machines to flood each other to consume the bandwidth resources of the internal communication link of the cluster and the computing resources of the physical server. The flow table flood attack [13] is a DDoS attack against the SDN architecture.…”

Section: Characteristics Of Ldos Attacks: Ldos Vs Ddosmentioning

confidence: 99%

Low-Rate DoS Attacks, Detection, Defense, and Challenges: A Survey

Liu

et al. 2020

IEEE Access

View full text Add to dashboard Cite

Low-rate Denial of service (LDoS) attacks has become one of the biggest threats to the Internet, cloud computing platforms, and big data centers. As an evolutionary species of DDoS attack, LDoS attack is essentially different from the DDoS attack. DDoS attacks are the behavior of malicious blocking legitimate network traffic by destroying the targets and the infrastructure around it with huge network traffic. While, LDoS attacks are the behavior of intentional degrading the quality of TCP links by throttling TCP flows to a small fraction of its ideal rate with periodic small pulse sequence. Hence, LDoS attack has a very small flow (around 10%-20% of the background traffic), it is easy to eluding the detection of routers and counter-DoS mechanisms. We try to reveal the mechanism of the LDoS attack and attempt to figure out the generation principle of LDoS attack in this paper. We classify the LDoS attacks and existing defense methods according to time domain and frequency domain in which detection and defense are performed. Furthermore, we highlight the filter approach to defense against LDoS attack. The initial purpose of our work is to encourage researchers to study effective ways to detect and defend against LDoS attacks with innovation and aggressiveness. INDEX TERMS Low-rate Denial of Service attacks (LDoS), detection method, attack prevention system, defense mechanism.

show abstract

Section: Characteristics Of Ldos Attacks: Ldos Vs Ddosmentioning

confidence: 99%

Low-Rate DoS Attacks, Detection, Defense, and Challenges: A Survey

Liu

et al. 2020

IEEE Access

View full text Add to dashboard Cite

show abstract

“…Once the attack gets over, the isolated environment again shifts the VM back to its real place. On the other hand, there are characterizations which shows the exploitation of VM migrations using DDoS attacks [94]. Authors in [21] have shown in their characterization that the DDoS attacks may lead to migrations which may even spread the collateral damages from one physical server to other physical servers.…”

Section: Victim Migration (M2)mentioning

confidence: 99%

DDoS attacks in cloud computing: Issues, taxonomy, and future directions

Somani

Gaur

Sanghi

et al. 2017

Computer Communications

238

102

View full text Add to dashboard Cite

Security issues related to the cloud computing are relevant to various stakeholders for an informed cloud adoption decision. Apart from data breaches, the cyber security research community is revisiting the attack space for cloud-specific solutions as these issues affect budget, resource management, and service quality. Distributed Denial of Service (DDoS) attack is one such serious attack in the cloud space. In this paper, we present developments related to DDoS attack mitigation solutions in the cloud. In particular, we present a comprehensive survey with a detailed insight into the characterization, prevention, detection, and mitigation mechanisms of these attacks. Additionally, we present a comprehensive solution taxonomy to classify DDoS attack solutions. We also provide a comprehensive discussion on important metrics to evaluate various solutions. This survey concludes that there is a strong requirement of solutions, which are designed keeping utility computing models in mind. Accurate auto-scaling decisions, multi-layer mitigation, and defense using profound resources in the cloud, are some of the key requirements of the desired solutions. In the end, we provide a definite guideline on effective solution building and detailed solution requirements to help the cyber security research community in designing defense mechanisms. To the best of our knowledge, this work is a novel attempt to identify the need of DDoS mitigation solutions involving multi-level information flow and effective resource management during the attack.

show abstract

“…Y. Wang proposed to reduce the cost of victim migration through a virtual machine. However, migration caused by DDoS attacks may cause overall damage to users' resources during the migration process [16].…”

Section: Related Workmentioning

confidence: 99%

DDoS Attacks Defense Mechanism based on Secure Routing Alliance

Yang¹

2018

IJPE

View full text Add to dashboard Cite

Distributed Denial of Service (DDoS) attacks on the cloud computing platform has become one of the key issues affecting cloud security. According to the sources of security threat of cloud computing platform, construct secure routing alliance, filter and resist DDoS from the route of cloud user to cloud computing center, design data forwarding mechanism and fault nodes replacement mechanism. The strategy of secure overlay services is combined with the structural characteristics of the ubiquitous routing platform to defend against DDoS attacks. The Chord ring is improved, the nodes are divided according to the distance in the physical network, and the Chord algorithm is avoided repeatedly ignoring the forwarding of physical paths. Since the original Chord algorithm is applied to the P2P network, in order to make it more suitable for the hierarchical physical topology, only the first three jumps of the Chord algorithm's query steps are taken. Fault nodes replacement mechanism uses virtual machine technology to convert nodes in the network into a large number of virtual nodes and serve as backup nodes in the security structure in time to replace the attacked nodes with backup nodes to minimize the impact of attacks on the nodes. The simulation results show that with the increase of the number of nodes, the data passing rate of the secure routing alliance can exceed 90% and the pass rate can be guaranteed to be over 35% when the number of attack nodes is large, which ensures data security and the availability of the transmission paths.

show abstract

From high-availability to collapse: quantitative analysis of “Cloud-Droplet-Freezing” attack threats to virtual machine migration in cloud computing

Cited by 10 publications

References 19 publications

Low-Rate DoS Attacks, Detection, Defense, and Challenges: A Survey

Low-Rate DoS Attacks, Detection, Defense, and Challenges: A Survey

DDoS attacks in cloud computing: Issues, taxonomy, and future directions

DDoS Attacks Defense Mechanism based on Secure Routing Alliance

Contact Info

Product

Resources

About