Real-Time DDoS Defense in 5G-Enabled IoT: A Multidomain Collaboration Perspective

Chen, Xu; Chen, Yunfei; Feng, Wei; Xiao, Liang; Li, Xiangling; Zhang, Jie; Ge, Ning

doi:10.1109/jiot.2022.3218728

Cited by 4 publications

(8 citation statements)

References 56 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…To compensate for the information loss caused by the above limitations, additional sources of information must be used, and lightweight detection methods should be developed to ensure the accuracy of DDoS detection at the access side. We propose a multidomain collaborative DDoS detection framework to integrate multidomain information [52]. In fact, the sources of information at the access side are not fully utilized.…”

Section: Multidomain Collaborative Ddos Detection Frameworkmentioning

confidence: 99%

“…This statistical problem can be solved using standard statistical methods. We have discussed this in detail in our recent work [52]. The minimum-variance unbiased estimator (MVUE) of the session size (denoted by L) based on the observations from packet counters of attack sessions can be formulated as…”

Section: Self-optimizing Packet Sampling Strategymentioning

confidence: 99%

“…See [57], [58] for more details. Based on the estimation of the attack session size L, the optimal PSR can be formulated as [52]…”

Section: Self-optimizing Packet Sampling Strategymentioning

confidence: 99%

“…We assume that IPv6 is used as the network layer protocol in collaboration. The length of the attack session information description is 248 bits each [52], including 232 bits for basic information and 16 bits for the packet counter. We take the PSR as the defense strategy, and the message length is set to 8 bits.…”

Section: B Communication Efficiencymentioning

confidence: 99%

“…The bandwidth consumption of the proposed architecture comes from two aspects: one is session information collection, that is, the CPs send description information of attack sessions to LC1, and each attack session has a triplet [52]; The second is defense strategy distribution, that is, LC1 sends defense strategy related information to the CPs, including the optimal PSR, blacklist, and trust value of the accessed vehicles.…”

Section: ) Bandwidth Costmentioning

confidence: 99%

See 4 more Smart Citations

Access-Side DDoS Defense for Space-Air-Ground Integrated 6G V2X Networks

Chen,

Feng,

Chen

et al. 2024

IEEE Open J. Commun. Soc.

Self Cite

View full text Add to dashboard Cite

Distributed Denial of Service (DDoS) attacks pose a significant threat to the Internet of Vehicles, causing delays in driving operations and risking personal safety. With the emerging of Space-Air-Ground Integrated Sixth-Generation (6G) networks, DDoS defense faces new challenges, especially in open and complex Vehicle-to-Everything (V2X) connections. In this study, we reviewed the requisites and challenges of DDoS defense in V2X and introduced a tailored access-side defense architecture for Space-Air-Ground Integrated 6G V2X. The objective is to provide ultra-low latency and privacy-assured services despite limited communication resources. Our architecture uses access-side control points (CPs) for rapid attack responses, collaborating with local controllers to create a seamless defense perimeter at the network edge. This prevents malicious traffic infiltration. Incorporating proactive defense strategies and lightweight detection methods, our approach ensures high attack detection rates with low defense costs. Simulation results confirm its efficacy and advantages in defense and network efficiency. We also discuss open issues for future research to facilitate practical applications.INDEX TERMS access-side defense architecture, distributed denial of service (DDoS), defense efficiency, sixth generation (6G), vehicle-to-everything (V2X).

show abstract

Section: Multidomain Collaborative Ddos Detection Frameworkmentioning

confidence: 99%

Section: Self-optimizing Packet Sampling Strategymentioning

confidence: 99%

“…See [57], [58] for more details. Based on the estimation of the attack session size L, the optimal PSR can be formulated as [52]…”

Section: Self-optimizing Packet Sampling Strategymentioning

confidence: 99%

Section: B Communication Efficiencymentioning

confidence: 99%

Section: ) Bandwidth Costmentioning

confidence: 99%

See 3 more Smart Citations

Access-Side DDoS Defense for Space-Air-Ground Integrated 6G V2X Networks

Chen,

Feng,

Chen

et al. 2024

IEEE Open J. Commun. Soc.

Self Cite

View full text Add to dashboard Cite

show abstract

A Perspicacious Multi-level Defense System Against DDoS Attacks in Cloud Using Information Metric & Game Theoretical Approach

Mohan,

Tamizhazhagan,

Balaji

2023

J Netw Syst Manage

View full text Add to dashboard Cite

FFTC: A DDoS attack detection and defense mechanism based on flow feature and threshold control in SDN

junhan

2024

Third International Conference on Electronic Information Engineering and Data Processing (EIEDP 2024)

View full text Add to dashboard Cite

Recent advancement in Software Defined Networking (SDN) has provided great opportunities for general architectural design for future networks. Current SDN is appealing for facilely mastering the separation of control plane and data processing to enhance network control and management. However, the susceptibility of existing SDN networks to malicious distributed denial of service (DDoS) attacks poses serious cybersecurity risks, which potentially results in catastrophic consequences. In this paper, we propose a DDoS attack detection and defense mechanism called FFTC based on flow-based feature extraction and dynamic threshold control to automatically identify adversarial attacks and ensure the security of SDN networks. It aims to analyse the flow behaviour, extract available pattern and adjust threshold to realize accurate identification and real-time response to DDoS attacks, and provide corresponding defense strategies. Experimental results demonstrate that the proposed FFTC mechanism can not only maintain the proper precision and reduce the processing time, but also successfully detect various DDoS attacks and restore the corresponding port communication.

show abstract

Real-Time DDoS Defense in 5G-Enabled IoT: A Multidomain Collaboration Perspective

Cited by 4 publications

References 56 publications

Access-Side DDoS Defense for Space-Air-Ground Integrated 6G V2X Networks

Access-Side DDoS Defense for Space-Air-Ground Integrated 6G V2X Networks

A Perspicacious Multi-level Defense System Against DDoS Attacks in Cloud Using Information Metric & Game Theoretical Approach

FFTC: A DDoS attack detection and defense mechanism based on flow feature and threshold control in SDN

Contact Info

Product

Resources

About