Toward Proactive and Efficient DDoS Mitigation in IIoT Systems: A Moving Target Defense Approach

Zhou, Yuyang; Cheng, Guang; Zhao, Yuyu; Chen, Zihan; Jiang, Shanqing

doi:10.1109/tii.2021.3090719

Cited by 16 publications

(3 citation statements)

References 36 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…By flexibly deploying potential targets and dynamically changing system configurations, the MTD method can create cognitive barriers for attackers, increasing the difficulty of launching attacks or reducing attack effectiveness. This architecture is often effective, especially for zero-day attacks and advanced persistent threats (APTs) [42]. However, the cost of hardware and software deployment and target migration is usually high, requiring special security design.…”

Section: A Analysis Of Existing Ddos Defense Architecturesmentioning

confidence: 99%

Access-Side DDoS Defense for Space-Air-Ground Integrated 6G V2X Networks

Chen,

Feng,

Chen

et al. 2024

IEEE Open J. Commun. Soc.

View full text Add to dashboard Cite

Distributed Denial of Service (DDoS) attacks pose a significant threat to the Internet of Vehicles, causing delays in driving operations and risking personal safety. With the emerging of Space-Air-Ground Integrated Sixth-Generation (6G) networks, DDoS defense faces new challenges, especially in open and complex Vehicle-to-Everything (V2X) connections. In this study, we reviewed the requisites and challenges of DDoS defense in V2X and introduced a tailored access-side defense architecture for Space-Air-Ground Integrated 6G V2X. The objective is to provide ultra-low latency and privacy-assured services despite limited communication resources. Our architecture uses access-side control points (CPs) for rapid attack responses, collaborating with local controllers to create a seamless defense perimeter at the network edge. This prevents malicious traffic infiltration. Incorporating proactive defense strategies and lightweight detection methods, our approach ensures high attack detection rates with low defense costs. Simulation results confirm its efficacy and advantages in defense and network efficiency. We also discuss open issues for future research to facilitate practical applications.INDEX TERMS access-side defense architecture, distributed denial of service (DDoS), defense efficiency, sixth generation (6G), vehicle-to-everything (V2X).

show abstract

Section: A Analysis Of Existing Ddos Defense Architecturesmentioning

confidence: 99%

Access-Side DDoS Defense for Space-Air-Ground Integrated 6G V2X Networks

Chen,

Feng,

Chen

et al. 2024

IEEE Open J. Commun. Soc.

View full text Add to dashboard Cite

show abstract

“…The analyzed references considering Markov modelling for assessing the availability and cybersecurity of cloud and IoT systems can be divided into three groups: the references related to assessing availability and reliability [11][12][13][14][15][16][17][18][19][20][21][22][23][24][25][26][27], the references related to assessing cybersecurity [28][29][30][31][32][33][34][35][36][37][38][39], and references related to assessing both availability and cybersecurity as attributes of dependability of cloud and IoT systems [40][41][42][43].…”

Section: State Of the Artmentioning

confidence: 99%

“…The analysis results were utilized for facilitating a method to provide dependability assurance evidence for the Reactive Architecture. A multistage optimization problem of moving target defense mechanisms deployment was modelled in [26] as constrained by Markov decision processes. This modelling allowed maximizing the available resources of an intelligent system under the limitations of industrial Internet of Things environments.…”

Section: State Of the Artmentioning

confidence: 99%

Combining Markov and Semi-Markov Modelling for Assessing Availability and Cybersecurity of Cloud and IoT Systems

et al. 2022

View full text Add to dashboard Cite

This paper suggests a strategy (C5) for assessing cloud and IoT system (CIS) dependability, availability, and cybersecurity based on the continuous collection, comparison, choice, and combination of Markov and semi-Markov models (MMs and SMMs). It proposes the systematic building of an adequate and accurate model to evaluate CISs considering (1) continuous evolution of the model(s) together with systems induced by changes in the CIS or physical and cyber environment parameters; (2) the necessity of collecting data on faults, failures, vulnerabilities, cyber-attacks, privacy violations, and patches to obtain actual data for assessment; (3) renewing the model set based on analysis of CIS operation; (4) the possibility of choice and utilizing “off-the-shelf” models with understandable techniques for their development to assure improved accuracy of assessment; (5) renewing the models during application of CIS by time, component or mixed combining, taking into consideration different operation and maintenance events. The results obtained were algorithms for data collection and analysis, choice, and combining appropriate MM and SMMs and their different types, such as multi-fragmental and multiphase models, considering changing failure rates, cyber-attack parameters, periodical maintenance, etc. To provide and verify the approach, several private and public clouds and IoT systems were researched and discussed in the context of C5 and proposed algorithms.

show abstract

Industrial cyber-physical systems protection: A methodological review

Canonico,

Sperlì

2023

Computers & Security

View full text Add to dashboard Cite

Toward Proactive and Efficient DDoS Mitigation in IIoT Systems: A Moving Target Defense Approach

Cited by 16 publications

References 36 publications

Access-Side DDoS Defense for Space-Air-Ground Integrated 6G V2X Networks

Access-Side DDoS Defense for Space-Air-Ground Integrated 6G V2X Networks

Combining Markov and Semi-Markov Modelling for Assessing Availability and Cybersecurity of Cloud and IoT Systems

Industrial cyber-physical systems protection: A methodological review

Contact Info

Product

Resources

About