VFence: A Defense against Distributed Denial of Service Attacks Using Network Function Virtualization

Jakaria, A H M; Wei, Yang; Rashidi, Bahman; Fung, Carol; Rahman, Mohammad Ashiqur

doi:10.1109/compsac.2016.219

Cited by 40 publications

(20 citation statements)

References 4 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…As such, it represents an affordable trade-off when compared to the advantages a distributed management application can bring. Recent literature has highlighted examples of how SDN [30], [31] and NFV [32] technologies can be effectively used to mitigate the effects of DDoS attacks [33], [34]. A representative example of these advantages in the context of a DDoS mitigation system can be found in [35], where a distributed set of classifiers, traffic throttles and packet markers is used, together with an alarm propagation system, to react to DDoS in a collaborative fashion.…”

Section: ) Resultsmentioning

confidence: 99%

SigMA: Signaling Framework for Decentralized Network Management Applications

Valocchi

Tuncer

Charalambides

et al. 2017

IEEE Trans. Netw. Serv. Manage.

View full text Add to dashboard Cite

Abstract-The management of network infrastructures has become increasingly complex over time, which is mainly attributed to the introduction of new functionality to support emerging services and applications. To address this important issue, research efforts in the last few years focused on developing software-defined networking solutions. While initial work proposed centralized architectures, their scalability limitations have led researchers to investigate a distributed control plane. Controller placement algorithms and mechanisms for building a logically centralized network view are some examples of challenges addressed in this context. A critical issue that requires specific attention concerns the communication between distributed entities involved in decision-making processes. To this end, we propose SigMA, a signaling framework that supports communication between the different entities of a decentralized management and control system. We also define the communication primitives and interfaces involved in such a decentralized environment. The benefits of SigMA are illustrated through three realistic network resource management use cases with different communication requirements. Based on simulation, we demonstrate the flexibility and extensibility of our solution in satisfying these requirements, thus effectively supporting advanced decentralized decision-making processes.

show abstract

Section: ) Resultsmentioning

confidence: 99%

SigMA: Signaling Framework for Decentralized Network Management Applications

Valocchi

Tuncer

Charalambides

et al. 2017

IEEE Trans. Netw. Serv. Manage.

View full text Add to dashboard Cite

show abstract

“…Scaling a network function in/out (horizontal) or up/down (vertical) can be done through the NFV orchestrator (NFVO). With these advantages, many works have proposed DDoS mitigation approaches with the help of SDN and NFV features [150]- [153].…”

Section: Ddos Attack Mitigation Techniquesmentioning

confidence: 99%

Machine Learning Approaches for Combating Distributed Denial of Service Attacks in Modern Networking Environments

Aljuhani

2021

IEEE Access

View full text Add to dashboard Cite

“…However, it would be more realistic and effective to use public datasets for real‐scale test environments 30,31 . To do so, DDoS attack technique is created as in VFence work 15 . Numbers of DDoS attack packets are 6–10 times larger than normal traffic packets that is sent to server.…”

Section: The Proposed Framework Of Ddos Mitigationmentioning

confidence: 99%

“…The comparison between our solution and the relevant studies presented in the literature can also be seen in Table 1. Basically, the proposed architecture has been inspired by VFence architecture based on a dynamic NFV DDoS filtering 15 . It is consisted of VNFs and an algorithm implemented to detect and filter SYN floods.…”

Section: Introductionmentioning

confidence: 99%

Distributed denial‐of‐service attack mitigation in network functions virtualization‐based 5G networks using management and orchestration

Köksal

Dalveren

Maiga

et al. 2021

Int J Communication

View full text Add to dashboard Cite

Summary The fifth generation (5G) technology is expected to allow connectivity to billions of devices, known as Internet of Things (IoT). However, IoT devices will inevitably be the main target of various cyberattack types. The most common one is known as distributed denial‐of‐service (DDoS) attack. In order to mitigate such attacks, network functions virtualization (NFV) has a great potential to provide the benefit of elasticity and low‐cost solutions for protecting 5G networks. In this context, this study proposes a new mechanism developed to mitigate DDoS attacks in 5G NFV networks. The proposed mechanism utilizes intrusion prevention system's (IPS) virtual machines (VMs) to intercept the queries. Based on the volume of DDoS traffic, IPS's VMs are dynamically deployed by means of management and orchestration (MANO) in order to balance the load. To evaluate the effectiveness of the mechanism, experiments are conducted in a real 5G NFV environment built by using 5G NFV environment tools. To our best knowledge, this is the first time that NFV‐based mechanism is experimentally tested in a real 5G NFV environment for mitigating DDoS attacks in 5G networks. The experimental results verify that the proposed mechanism can mitigate DDoS attacks effectively.

show abstract

VFence: A Defense against Distributed Denial of Service Attacks Using Network Function Virtualization

Cited by 40 publications

References 4 publications

SigMA: Signaling Framework for Decentralized Network Management Applications

SigMA: Signaling Framework for Decentralized Network Management Applications

Machine Learning Approaches for Combating Distributed Denial of Service Attacks in Modern Networking Environments

Distributed denial‐of‐service attack mitigation in network functions virtualization‐based 5G networks using management and orchestration

Contact Info

Product

Resources

About