The growth and evolution of DDoS

Mansfield-Devine, Steve

doi:10.1016/s1353-4858(15)30092-1

Cited by 62 publications

(36 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…However, it is still an open issue since DDoS attacks are growing in scale, sophistication, duration and frequency [10]. The IETF is currently proposing a protocol [13] called DOTS (DDoS Open Threat Signaling) covering both intraorganization and inter-organization communications to advertise attacks.…”

Section: Related Workmentioning

confidence: 99%

“…DDoS attacks have the simple goal of interrupting or suspending services available on the Internet and its motivations range from personal grudges over blackmail to political reasons [10]. A recent example is an attack conducted against Domain Name System (DNS) servers responsible for domains such as Twitter, PayPal, and Spotify [20] in October 2016.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

A Blockchain-Based Architecture for Collaborative DDoS Mitigation with Smart Contracts

Rodrigues

Bocek

Lareida

et al. 2017

Lecture Notes in Computer Science

108

View full text Add to dashboard Cite

Abstract. The rapid growth in the number of insecure portable and stationary devices and the exponential increase of traffic volume makes Distributed Denial-of-Service (DDoS) attacks a top security threat to services provisioning. Existing defense mechanisms lack resources and flexibility to cope with attacks by themselves, and by utilizing other's companies resources, the burden of the mitigation can be shared. Emerging technologies such as blockchain and smart contracts allows for the sharing of attack information in a fully distributed and automated fashion. In this paper, the design of a novel architecture is proposed by combining these technologies introducing new opportunities for flexible and efficient DDoS mitigation solutions across multiple domains. Main advantages are the deployment of an already existing public and distributed infrastructure to advertise white or blacklisted IP addresses, and the usage of such infrastructure as an additional security mechanism to existing DDoS defense systems, without the need to build specialized registries or other distribution mechanisms, which enables the enforcement of rules across multiple domains.

show abstract

Section: Related Workmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

A Blockchain-Based Architecture for Collaborative DDoS Mitigation with Smart Contracts

Rodrigues

Bocek

Lareida

et al. 2017

Lecture Notes in Computer Science

108

View full text Add to dashboard Cite

show abstract

“…A different flavor of DoS is Distributed DoS, or DDoS, where attackers are a group of machines targeting a particular service [5]. There is a high rise in the number of reported incidents of DDoS, which makes it one of the most important and fatal threat amongst many [6].…”

Section: Introductionmentioning

confidence: 99%

DDoS attacks in cloud computing: Issues, taxonomy, and future directions

Somani

Gaur

Sanghi

et al. 2017

Computer Communications

238

102

View full text Add to dashboard Cite

Security issues related to the cloud computing are relevant to various stakeholders for an informed cloud adoption decision. Apart from data breaches, the cyber security research community is revisiting the attack space for cloud-specific solutions as these issues affect budget, resource management, and service quality. Distributed Denial of Service (DDoS) attack is one such serious attack in the cloud space. In this paper, we present developments related to DDoS attack mitigation solutions in the cloud. In particular, we present a comprehensive survey with a detailed insight into the characterization, prevention, detection, and mitigation mechanisms of these attacks. Additionally, we present a comprehensive solution taxonomy to classify DDoS attack solutions. We also provide a comprehensive discussion on important metrics to evaluate various solutions. This survey concludes that there is a strong requirement of solutions, which are designed keeping utility computing models in mind. Accurate auto-scaling decisions, multi-layer mitigation, and defense using profound resources in the cloud, are some of the key requirements of the desired solutions. In the end, we provide a definite guideline on effective solution building and detailed solution requirements to help the cyber security research community in designing defense mechanisms. To the best of our knowledge, this work is a novel attempt to identify the need of DDoS mitigation solutions involving multi-level information flow and effective resource management during the attack.

show abstract

“…Or on the other hand perhaps, they hope to make your site and servers blocked off to bona fide customers. DDoS can in like manner be used as a smokescreen for various malicious activities and to cut down security contraptions, breaking the target's security edge [3]. A productive DDoS ambush is an extraordinarily perceptible event influencing an entire online customer base.…”

Section: Introductionmentioning

confidence: 99%

Processing Overhead Reduced Effficient Malicious Traffic Flow Detection using Modified Firecol

Rathika*,

Marimuthu

2019

IJITEE

View full text Add to dashboard Cite

DDOS attacks are most found attack in real world which would cause the data drop/loss. DDOS attack prevention and detection is more concentrated research issue which is done in our previous work by introducing Burst Transmission aware DDOS Attack Detection (BT-DDOSAD) method. However, in this research method processing overhead will be high where traffic analysis processes would be carried out by primary server itself where there is a chance of server collapse. It is resolved in the proposed research method by introducing the Modified Firecol System (MFS) in which attack detection can be done accurately. In this work, secondary server is introduced to perform traffic flow analyses before allowing traffic data into the primary server, so that network collusion can be avoided considerably. Secondary server election is done based on trust values and resource availability such as energy and bandwidth. Here Modified genetic algorithm is applied to select the secondary server. In the modified genetic algorithm, crossover is performed by combining it with the mutation process. Here the genes to undergone cross over are selected by using diversity based mutation scheme where the variances of genes are measured. Modified Firecol is introduced by integrating the malicious traffic flow detection metrics such as “traffic flow metric, throughput metric, bandwidth allocation metrics, bandwidth deviation metric, Generalized Entropy (GE), Generalized Information Divergence (GID) metrics, Projected Entropy”. If Normalized Entropy is smaller than threshold entropy then, the received packet is from illegal user else comparison is done against another threshold value. The overall implementation of the research work is done in the Ns2 simulation environment from which it can be proved that the proposed research method can produce better result than the existing work.

show abstract

The growth and evolution of DDoS

Cited by 62 publications

References 0 publications

A Blockchain-Based Architecture for Collaborative DDoS Mitigation with Smart Contracts

A Blockchain-Based Architecture for Collaborative DDoS Mitigation with Smart Contracts

DDoS attacks in cloud computing: Issues, taxonomy, and future directions

Processing Overhead Reduced Effficient Malicious Traffic Flow Detection using Modified Firecol

Contact Info

Product

Resources

About