New collaborative DDoS defense technology based on NFV

Chuanfeng XU; Hui LIN; Xuancheng GUO; Xiaoding WANG

doi:10.11959/j.issn.2096-109x.2019018

您当前的位置：

首页 >

文章列表页 >

New collaborative DDoS defense technology based on NFV

Papers | 更新时间：2024-06-03

- New collaborative DDoS defense technology based on NFV
- Chinese Journal of Network and Information Security Vol. 5, Issue 2, Pages: 66-76(2019)
- 作者机构：
  
  1. 福建师范大学数学与信息学院，福建福州 350117
  2. 福建师范大学福建省网络安全与密码技术重点实验室，福建福州 350117
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2019018
  CLC： TP393.08
- Online First：2019-04，
  
  Published：15 April 2019
- 稿件说明：
移动端阅览
Chuanfeng XU, Hui LIN, Xuancheng GUO, et al. New collaborative DDoS defense technology based on NFV[J]. Chinese Journal of Network and Information Security, 2019, 5(2): 66-76.
DOI：

Chuanfeng XU, Hui LIN, Xuancheng GUO, et al. New collaborative DDoS defense technology based on NFV[J]. Chinese Journal of Network and Information Security, 2019, 5(2): 66-76. DOI： 10.11959/j.issn.2096-109x.2019018.

摘要

在采取网络功能虚拟化技术构建的协作式网络抵御分布式拒绝服务攻击的过程中，由于协作网络中的资源有限，协作网络中的参与者存在为了自身安全而采取自私行为的问题，进而减弱协作网络缓解 DDoS攻击能力。针对上述问题，提出了一种新的缓解DDoS攻击策略。该策略在协作网络中构建重复囚徒困境博弈模型，引入奖罚分明激励机制加强协作网络的合作性，并采取基于社会信誉值评估的动态资源分配机制。仿真实验表明，新的协作式DDoS攻击防御技术在分组丢失率、合作性和资源分配率方面优于现有方案，提高了DDoS攻击防御的有效性。

Abstract

To solve the problem of selfish behavior for self-security due to limited resources in the process of resisting distributed denial of service (DDoS) attacks by a collaborative network built with network function virtualization (NFV) technology

a new collaborative DDoS defense network model was proposed.a repeat prisoner's dilemma game model was built in the collaborative network

a reward and punishment incentive mechanism was introduced to strengthen the cooperation of the collaborative network

and a dynamic resource allocation mechanism based on social reputation value assessment was adopted.Simulation results show that the new collaborative DDoS attack defense technology outperforms existing solutions in terms of packet loss rate

cooperation

and resource allocation rate

improving the effectiveness of DDoS attack defense.

关键词

Keywords

references

YAN Q , YU F R , GONG Q , et al . Software-defined networking (SDN) and distributed denial of service (DDoS) attacks in cloud computing environments:a survey,some research issues,and challenges [J ] . IEEE Communications Surveys ＆ Tutorials , 2016 , 18 ( 1 ): 602 - 622 .

MIRKOVIC ， REIHER P . A taxonomy of DDoS attack and DDoS defense mechanisms [J ] . ACM SIGCOMM Computer Communication Review , 2004 , 34 ( 2 ): 39 - 53 .

CHANG R K C . Defending against flooding-based distributed denial-of-service attacks:a tutorial [J ] . Communications Magazine IEEE , 2002 , 40 ( 10 ): 42 - 51 .

HERRERA J G , BOTERO J F . Resource allocation in NFV:a comprehensive survey [M ] . IEEE Press , 2016 .

RASHIDI B , FUNG C , BERTINO E . A collaborative DDoS defence framework using network function virtualization [C ] // 2016 12th International Conference on Network and Service Management (CNSM) . 2016 .

FENG L , YANG Q , KIM K , et al . Dynamic rate allocation and forwarding strategy adaption for wireless networks [J ] . IEEE Signal Processing Letters , 2018 , 25 ( 7 ): 1034 - 1038 .

FAYAZ S K , TOBIOKA Y , SEKAR V , et al . Bohatei:flexible and elastic DDoS defense [C ] // Usenix Conference on Security Symposium . 2015 : 817 - 832 .

GUENANE F , NOGUEIRA M , SERHROUCHNI A . DDoS mitigation cloud-based service [C ] // IEEE Trustcom/Bigdatase/ISPA . 2015 : 1363 - 1368 .

FUNG C J , MCCORMICK B . VGuard:a distributed denial of service attack mitigation method using network function virtualization [C ] // International Conference on Network and Service Management . 2015 : 64 - 70 .

RASHIDI B , FUNG C , RAHMAN M . A scalable and flexible DDoS mitigation system using network function virtualization [C ] // IEEE/IFIP Network Operations and Management Symposium . 2018 : 1 - 6 .

JAKARIA A H M , YANG W , RASHIDI B , et al . VFence:a defense against distributed denial of service attacks using network function virtualization [C ] // Computer Software and Applications Conference . 2016 : 431 - 436 .

LUO C , ZHANG X , LIU H , et al . Cooperation in memory-based prisoner’s dilemma game on interdependent networks [J ] . Physica A Statistical Mechanics ＆ Its Applications , 2016 , 450 : 560 - 569

PERC M , SZOLNOKI A . Social diversity and promotion of cooperation in the spatial prisoner’s dilemma [J ] . Physical Review E Statistical Nonlinear ＆ Soft Matter Physics , 2008 , 77 ( 1 Pt 1 ):011904.

ASHLOCK D , KIM E Y , ASHLOCK W . A fingerprint comparison of different prisoner's dilemma payoff matrices [J ] . IEEE Transportations on Biological Science , 2010 ( 6 ): 219 - 226 .

YANG H X , WU Z X , RONG Z , et al . Peer pressure:enhancement of cooperation through mutual punishment [J ] . Phys Rev E Stat Nonlin Soft Matter Phys , 2015 , 91 ( 2 ):022121.

XU Z , LIANG W , GALIS A , et al . Throughput optimization for admitting NFV-enabled requests in cloud networks [J ] . Computer Networks , 2018

Views

848

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Design and analysis of intelligent service chain system for network security resource pool

Verification on policies for network functions in SDN/NFV-based environment

Network function heterogeneous redundancy deployment method based on immune algorithm

Large-scale resource state monitoring strategy in network function virtualization environment

Related Author

Zenan WANG

Jiahao LI

Chaohong TAN

Dechang PI

Haoyu CHEN

Deqing ZOU

Hai JIN

Qingqing ZHANG

Related Institution

Purple Mountain Laboratories

Nanjing University of Aeronautics and Astronautics

Jiangsu Future Networks Innovation Institute

National Engineering Research Center for Big Data Technology and System, School of Computer Science and Technology, Huazhong University of Science and Technology

Services Computing Technology and System Lab, School of Computer Science and Technology, Huazhong University of Science and Technology

⁰