Reducing DDoS attacks impact using a hybrid cloud-based firewalling architecture

Guenane, Fouad Amine; Nogueira, Michele; Pujolle, Guy

doi:10.1109/giis.2014.6934276

Cited by 16 publications

(8 citation statements)

References 11 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Major theme of the contribution Resource Scaling (M1) [82] Multi-level (VM, service, application and cloud) [78] Dynamic resource scaling for quick detection [72] Resource scaling in federated clouds [47] Scaling to absorb the attack [ [90] Victim cloud-based network service [91] Proof-of-work scheme and ephemeral servers [92] Hybrid (On-premise firewall plus Cloud firewall) [46] Resource caps to limit the attack effects [45] Cloud metric monitoring and alarms Table 7: DDoS Attack Mitigation Techniques in Cloud clude external attacks to internal servers, internal attacks to internal servers and internal attacks to external servers. Authors provided strategies to detect the attack and get recovered using scaling and migrations in a federated cloud environment.…”

Section: Solution Category Contributionmentioning

confidence: 99%

“…On the other hand, there are not many specific products available to mitigate DDoS targeting a cloud. Authors in [92] proposed a DDoS mitigation service. This service is intended to help the physical on-premise firewall to do the mitigation quickly.…”

Section: Ddos Mitigation As a Service (Dmaas) (M5)mentioning

confidence: 99%

“…A solution which involves communication between hypervisor and cloud manager would be a good design to deal with the defense mechanisms. Few novel solutions, which are based on cloud level of defense are [41][78] [82][72] [92]. Network level defense capabilities provided by SDN infrastructures can also become very helpful at this level to gain the quick control of the network (detailed in Section 7.4).…”

Section: Cloud Level Defensementioning

confidence: 99%

See 2 more Smart Citations

DDoS attacks in cloud computing: Issues, taxonomy, and future directions

Somani

Gaur

Sanghi

et al. 2017

Computer Communications

236

102

View full text Add to dashboard Cite

Security issues related to the cloud computing are relevant to various stakeholders for an informed cloud adoption decision. Apart from data breaches, the cyber security research community is revisiting the attack space for cloud-specific solutions as these issues affect budget, resource management, and service quality. Distributed Denial of Service (DDoS) attack is one such serious attack in the cloud space. In this paper, we present developments related to DDoS attack mitigation solutions in the cloud. In particular, we present a comprehensive survey with a detailed insight into the characterization, prevention, detection, and mitigation mechanisms of these attacks. Additionally, we present a comprehensive solution taxonomy to classify DDoS attack solutions. We also provide a comprehensive discussion on important metrics to evaluate various solutions. This survey concludes that there is a strong requirement of solutions, which are designed keeping utility computing models in mind. Accurate auto-scaling decisions, multi-layer mitigation, and defense using profound resources in the cloud, are some of the key requirements of the desired solutions. In the end, we provide a definite guideline on effective solution building and detailed solution requirements to help the cyber security research community in designing defense mechanisms. To the best of our knowledge, this work is a novel attempt to identify the need of DDoS mitigation solutions involving multi-level information flow and effective resource management during the attack.

show abstract

Section: Solution Category Contributionmentioning

confidence: 99%

Section: Ddos Mitigation As a Service (Dmaas) (M5)mentioning

confidence: 99%

Section: Cloud Level Defensementioning

confidence: 99%

See 1 more Smart Citation

DDoS attacks in cloud computing: Issues, taxonomy, and future directions

Somani

Gaur

Sanghi

et al. 2017

Computer Communications

236

102

View full text Add to dashboard Cite

show abstract

“…The result shows that the overall performance of this algorithm in detection accuracy and time consumption is superior to existing models. Regarding DDoS attacks, various detection strategies such as detection [36][37][38][39][40][41][42][43][44][45], mitigation [46][47][48][49][50][51][52][53][54] and Defence techniques [55][56][57][58][59][60][61][62][63][64][65][66] proposed for the cloud, and the performance compared. The comparative analysis based on the above said categories are given in Table-5, Table-6, and Table-7.…”

Section: A Survey Of Ddos Attacksmentioning

confidence: 99%

A Performance Perspective Analysis: A Detailed Vision on Denial of Service and Distributed Denial of Service on Cloud Computing

Mayuranathan*¹,

Murugan²,

Dhanakoti³

2019

IJRTE

View full text Add to dashboard Cite

In recent days cloud computing and cloud-based service, provisions play a vital and significant role in Internet-based information computing. It interrelates various applications like sales, purchase, banking, customer service, etc. and it behaves entirely as a service-oriented platform or environment. The primary objective of the cloud computing is sharing the resources within increased efficiency regarding time and cost for all kind of customers who needs a cloud service badly and immediately. Though the energy is high, it cannot assure that the cloud computing, service providing, and customer maintenance are highly secured. Service providers in the cloud are not strictly public; it may be private, community and hybrid. Malicious activities can be created or occurred in the middle of the communication and it is difficult to predict a particular person in the middle becomes a malicious user, from where and how. Secured data transmission and discussion in cloud computing considered as the main problem, and various earlier research works focused on tightening the security. The primary objective of this paper is to discuss different security mechanisms applied to multiple malicious threats in the cloud to understand the various issues and challenges faced in earlier research works. It provides a summary of the risks, appropriate method and the limitations and it helps to understand the primary and main problems related to security.

show abstract

“…Guenane et al [48] present a DDoS mitigation service using an innovative architecture that provides hybrid (Physical and Virtual) cloud-based firewalling services. The physical firewalls represent the physical IT-security infrastructure of the company.…”

Section: Security Architecturementioning

confidence: 99%

A Survey of Denial-of-Service and Distributed Denial of Service Attacks and Defenses in Cloud Computing

Bonguet

Bellaïche

2017

Future Internet

View full text Add to dashboard Cite

Cloud Computing is a computing model that allows ubiquitous, convenient and on-demand access to a shared pool of highly configurable resources (e.g., networks, servers, storage, applications and services). Denial-of-Service (DoS) and Distributed Denial-of-Service (DDoS) attacks are serious threats to the Cloud services' availability due to numerous new vulnerabilities introduced by the nature of the Cloud, such as multi-tenancy and resource sharing. In this paper, new types of DoS and DDoS attacks in Cloud Computing are explored, especially the XML-DoS and HTTP-DoS attacks, and some possible detection and mitigation techniques are examined. This survey also provides an overview of the existing defense solutions and investigates the experiments and metrics that are usually designed and used to evaluate their performance, which is helpful for the future research in the domain.

show abstract

Reducing DDoS attacks impact using a hybrid cloud-based firewalling architecture

Cited by 16 publications

References 11 publications

DDoS attacks in cloud computing: Issues, taxonomy, and future directions

DDoS attacks in cloud computing: Issues, taxonomy, and future directions

A Performance Perspective Analysis: A Detailed Vision on Denial of Service and Distributed Denial of Service on Cloud Computing

A Survey of Denial-of-Service and Distributed Denial of Service Attacks and Defenses in Cloud Computing

Contact Info

Product

Resources

About