基于NFV的新的协作式DDoS防御技术

doi:10.11959/j.issn.2096-109x.2019018

Chinese Journal of Network and Information Security ›› 2019, Vol. 5 ›› Issue (2): 66-76.doi: 10.11959/j.issn.2096-109x.2019018

• Papers • Previous Articles Next Articles

New collaborative DDoS defense technology based on NFV

Chuanfeng XU^1,²,Hui LIN^1,²(),Xuancheng GUO^1,²,Xiaoding WANG^1,²

¹ School of Mathematics and Computer Science,Fujian Normal University,Fuzhou 350117,China
² Fujian Provincial Key Laboratory of Network Security and Cryptology,Fujian Nomal University,Fuzhou 350117,China

Revised:2019-01-25 Online:2019-04-15 Published:2019-04-16
Supported by:
The National Natural Science Foundation of China(61772008);Fujian Province Guiding Project (formerly Key Industrial Project)(2016Y0031);Fuzhou Science and Technology Bureau Project(2017-G-79);The Natural Science Foundation of Fujian Province(2016J01289)

Abstract

Abstract:

To solve the problem of selfish behavior for self-security due to limited resources in the process of resisting distributed denial of service (DDoS) attacks by a collaborative network built with network function virtualization (NFV) technology,a new collaborative DDoS defense network model was proposed.a repeat prisoner's dilemma game model was built in the collaborative network,a reward and punishment incentive mechanism was introduced to strengthen the cooperation of the collaborative network,and a dynamic resource allocation mechanism based on social reputation value assessment was adopted.Simulation results show that the new collaborative DDoS attack defense technology outperforms existing solutions in terms of packet loss rate,cooperation,and resource allocation rate,improving the effectiveness of DDoS attack defense.

Key words: distributed denial of service attack, network function virtualization, collaborative network, selfish behavior, prisoner's dilemma game

CLC Number:

TP393.08

Chuanfeng XU,Hui LIN,Xuancheng GUO,Xiaoding WANG. New collaborative DDoS defense technology based on NFV[J]. Chinese Journal of Network and Information Security, 2019, 5(2): 66-76.

Figures/Tables 10

References 16

[1]	YAN Q , YU F R , GONG Q ,et al. Software-defined networking (SDN) and distributed denial of service (DDoS) attacks in cloud computing environments:a survey,some research issues,and challenges[J]. IEEE Communications Surveys ＆ Tutorials, 2016,18(1): 602-622.
[2]	MIRKOVIC ， REIHER P . A taxonomy of DDoS attack and DDoS defense mechanisms[J]. ACM SIGCOMM Computer Communication Review, 2004,34(2): 39-53.
[3]	CHANG R K C . Defending against flooding-based distributed denial-of-service attacks:a tutorial[J]. Communications Magazine IEEE, 2002,40(10): 42-51.
[4]	HERRERA J G , BOTERO J F . Resource allocation in NFV:a comprehensive survey[M]. IEEE Press, 2016.
[5]	RASHIDI B , FUNG C , BERTINO E . A collaborative DDoS defence framework using network function virtualization[C]// 2016 12th International Conference on Network and Service Management (CNSM). 2016.
[6]	FENG L , YANG Q , KIM K ,et al. Dynamic rate allocation and forwarding strategy adaption for wireless networks[J]. IEEE Signal Processing Letters, 2018,25(7): 1034-1038.
[7]	FAYAZ S K , TOBIOKA Y , SEKAR V ,et al. Bohatei:flexible and elastic DDoS defense[C]// Usenix Conference on Security Symposium. 2015: 817-832.
[8]	GUENANE F , NOGUEIRA M , SERHROUCHNI A . DDoS mitigation cloud-based service[C]// IEEE Trustcom/Bigdatase/ISPA. 2015: 1363-1368.
[9]	FUNG C J , MCCORMICK B . VGuard:a distributed denial of service attack mitigation method using network function virtualization[C]// International Conference on Network and Service Management. 2015: 64-70.
[10]	RASHIDI B , FUNG C , RAHMAN M . A scalable and flexible DDoS mitigation system using network function virtualization[C]// IEEE/IFIP Network Operations and Management Symposium. 2018: 1-6.
[11]	JAKARIA A H M , YANG W , RASHIDI B ,et al. VFence:a defense against distributed denial of service attacks using network function virtualization[C]// Computer Software and Applications Conference. 2016: 431-436.
[12]	LUO C , ZHANG X , LIU H ,et al. Cooperation in memory-based prisoner’s dilemma game on interdependent networks[J]. Physica A Statistical Mechanics ＆ Its Applications, 2016,450: 560-569
[13]	PERC M , SZOLNOKI A . Social diversity and promotion of cooperation in the spatial prisoner’s dilemma[J]. Physical Review E Statistical Nonlinear ＆ Soft Matter Physics, 2008,77(1 Pt 1):011904.
[14]	ASHLOCK D , KIM E Y , ASHLOCK W . A fingerprint comparison of different prisoner's dilemma payoff matrices[J]. IEEE Transportations on Biological Science, 2010(6): 219-226.
[15]	YANG H X , WU Z X , RONG Z ,et al. Peer pressure:enhancement of cooperation through mutual punishment[J]. Phys Rev E Stat Nonlin Soft Matter Phys, 2015,91(2):022121.
[16]	XU Z , LIANG W , GALIS A ,et al. Throughput optimization for admitting NFV-enabled requests in cloud networks[J]. Computer Networks, 2018

Metrics

Recommended 0

No Suggested Reading articles found!

New collaborative DDoS defense technology based on NFV

RichHTML

PDF下载

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 10

References 16

Related Articles 4

Metrics

Recommended 0

[1]	Zenan WANG, Jiahao LI, Chaohong TAN, Dechang PI. Design and analysis of intelligent service chain system for network security resource pool [J]. Chinese Journal of Network and Information Security, 2022, 8(4): 175-181.
[2]	Haoyu CHEN, Deqing ZOU, Hai JIN. Verification on policies for network functions in SDN/NFV-based environment [J]. Chinese Journal of Network and Information Security, 2021, 7(3): 59-71.
[3]	Qingqing ZHANG, Hongbo TANG, Wei YOU, Yingle LI. Network function heterogeneous redundancy deployment method based on immune algorithm [J]. Chinese Journal of Network and Information Security, 2021, 7(1): 46-56.
[4]	Meisheng HAI,Peng YI,Yiming JIANG,Jichao XIE. Large-scale resource state monitoring strategy in network function virtualization environment [J]. Chinese Journal of Network and Information Security, 2019, 5(6): 42-49.