Taxonomy of Distributed Denial of Service mitigation approaches for cloud computing

作者: Alireza Shameli-Sendi , Makan Pourzandi , Mohamed Fekih-Ahmed , Mohamed Cheriet

DOI: 10.1016/J.JNCA.2015.09.005

关键词: Taxonomy (general)Network topologyComputer scienceComputer securityDenial-of-service attackCloud computingDDoS mitigationApplication layer DDoS attackTrinoo

摘要: Cloud computing has a central role to play in meeting today's business requirements. However, Distributed Denial-of-Service (DDoS) attacks can threaten the availability of cloud functionalities. In recent years, many effort been expended detect various DDoS attack types. this survey paper, our concentration is on how mitigate these attacks. We believe that technology substantially change way we respond attack, based number new characteristics, which were introduced with advent technology. first present taxonomy mitigation strategies organize work. Then, go discuss main features existing and explain their functionalities environment. Afterwards, show mechanisms fit into network topology cloud. Finally, some detail, compare behavior Our objective characteristics bring novel perspective mechanisms, so give researchers insights computing.

参考文章(92)
Ratul Mahajan, Steven M. Bellovin, Sally Floyd, John Ioannidis, Vern Paxson, Scott Shenker, Aggregate congestion control acm special interest group on data communication. ,vol. 32, pp. 69- 69 ,(2002) , 10.1145/510726.510743
Chu YuHunag, Tseng MinChi, Chen YaoTing, Chou YuChieh, Chen YanRen, A novel design for future on-demand service and security international conference on communication technology. pp. 385- 388 ,(2010) , 10.1109/ICCT.2010.5689156
Tao Peng, Christopher Leckie, Kotagiri Ramamohanarao, Survey of network-based defense mechanisms countering the DoS and DDoS problems ACM Computing Surveys. ,vol. 39, pp. 3- ,(2007) , 10.1145/1216370.1216373
Dimitrios Zissis, Dimitrios Lekkas, Addressing cloud computing security issues Future Generation Computer Systems. ,vol. 28, pp. 583- 592 ,(2012) , 10.1016/J.FUTURE.2010.12.006
Jeff Kline, Sangnam Nam, Paul Barford, David Plonka, Amos Ron, Traffic Anomaly Detection at Fine Time Scales with Bayes Nets international conference on internet monitoring and protection. pp. 37- 46 ,(2008) , 10.1109/ICIMP.2008.33
Karim El Defrawy, Athina Markopoulou, Katerina Argyraki, Optimal Allocation of Filters against DDoS Attacks information theory and applications. pp. 140- 149 ,(2007) , 10.1109/ITA.2007.4357573
Soo Bum Lee, Min Suk Kang, Virgil D. Gligor, CoDef: collaborative defense against large-scale link-flooding attacks conference on emerging network experiment and technology. pp. 417- 428 ,(2013) , 10.1145/2535372.2535398
Dongwon Seo, Heejo Lee, Adrian Perrig, APFS: Adaptive Probabilistic Filter Scheduling against distributed denial-of-service attacks Computers & Security. ,vol. 39, pp. 366- 385 ,(2013) , 10.1016/J.COSE.2013.09.002
Changwang Zhang, Zhiping Cai, Weifeng Chen, Xiapu Luo, Jianping Yin, Flow level detection and filtering of low-rate DDoS Computer Networks. ,vol. 56, pp. 3417- 3431 ,(2012) , 10.1016/J.COMNET.2012.07.003