Mitigating DDoS Attacks Using a Resource Sharing Network

Abstract

Cloud computing is crucial to the internet just as air is crucial to breathing. Most users do not even come to think how the cloud architecture is one of the giant pillars on which the entire internet and all its related services depend. In recent times, cloud computing has gained noticeable popularity due to its ability to radically improve computing power through the application of virtual machines. In this era of the internet, however, security threats are increasing and it costs many businesses. The seemingly legitimate traffic of these application-level attacks renders the previous detection and mitigation methods ineffective. These cyber-attacks have grown ever so sophisticated and the detection and mitigation of these attacks have become one of the major concerns of security researchers and cloud service providers all around the globe. In our paper, we are trying to analyze existing research and implementation of the cloud architecture. This analysis will give us insight into the core mechanisms of the cloud architecture and DDoS attacks. Furthermore, we will apply this understanding of ours to design and build an universal mitigation technique for DDoS attacks. An universal solution that works for all scenarios, may take at least a few dozen developers working years on end to develop. Therefore, the goal of this paper will be to lay the foundation on which one day the universal solution may be created.

A comprehensive survey of performance, security and privacy issues in the network interface layer of the TCP/IP

“…Techniques like network traffic mapping, congestion control algorithms, and efficient routing protocols have been explored to improve network performance of the network interface layer. Researchers have identified and proposed mitigation mechanisms on various vulnerabilities in the network interface, such as Address Resolution Protocol (ARP) spoofing, Media Access Control (MAC) address spoofing, and Denial-of-Service (DoS) attacks [17]- [20]. Traffic sniffing, network intrusion detection, and user tracking in the network interface layer raise privacy concerns that researchers are actively addressing [21]- [24].…”