基于熵变的多租户云内DDoS检测方法研究

doi:10.11959/j.issn.1000-436x.2016268

Abstract

Abstract:

An attacker compromised a number of VMs in the cloud to form his own network to launch a powerful distrib-uted denial of service (DDoS) attack.DDoS attack is a serious threat to multi-tenant cloud.It is difficult to detect which VM in the cloud are compromised and what is the attack target,especially when the VM in the cloud is the victim.A DDoS detection method was presented suitable for multi-tenant cloud environment by identifying the malicious VM at-tack sources first and then the victims.A distributed detection framework was proposed.The distributed agent detects the suspicious VM which generate the potential DDoS attack traffic flows on the source side.A central server confirms the real attack flows.The feasibility and effectiveness of the proposed detection method are verified by experiments in the multi-tenant cloud environment.

Key words: DDoS attack, detection, multi-tenant, cloud computing system, entropy

Miao WANG,Li-ming WANG,Zhen XU,Duo-he MA. Research on DDoS detection in multi-tenant cloud based on entropy change[J]. Journal on Communications, 2016, 37(Z1): 204-210.

Figures/Tables 8

References 19

[1]	Amazon Inc. Amazon elastic compute cloud (Amazon EC2)[EB/OL]. , 2011.
[2]	CHOWDHURY N M M K , BOUTABA R . A survey of network virtu-alization[J]. Computer Networks, 2010,54(5):862-876.
[3]	HASHIZUME K , ROSADO D G , FERNáNDEZ-MEDINA E , et al. An analysis of security issues for cloud computing[J]. Journal of Inter-net Services and Applications, 2013,4(1):1.
[4]	JASTI A , SHAH P , NAGARAJ R , et al. Security in multi-tenancy cloud[C]//2010 IEEE International Carnahan Conference on Security Technology (ICCST). 2010:35-41.
[5]	MIRKOVIC J , REIHER P . A taxonomy of DDoS attack and DDoS defense mechanisms[J]. ACM SIGCOMM Computer Communication Review, 2004,34(2):39-53.
[6]	PENG T , LECKIE C , RAMAMOHANARAO K . Survey of network-based defense mechanisms countering the DoS and DDoS problems[J]. ACM Computing Surveys (CSUR), 2007,39(1):3.
[7]	BHUYAN M H , KASHYAP H J , BHATTACHARYYA D K , et al. Detecting distributed denial of service attacks:methods,tools and fu-ture directions[J]. Computer Journal, 2013,57(4):537-556.
[8]	FEINSTEIN L , SCHNACKENBERG D , BALUPARI R , et al. Statis-tical approaches to DDoS attack detection and response[C]//DARPA Information Survivability Conference and Exposition. 2003:303-314.
[9]	YI F , YU S , ZHOU W , et al. Source-based filtering scheme against DDOS attacks[J]. International Journal of Database Theory and Ap-plication, 2008,1(1):9-20.
[10]	CHOUHAN V , PEDDOJU S K . Packet monitoring approach to pre-vent DDoS attack in cloud computing[J]. International Journal of Computer Science and Electrical Engineering (IJCSEE) ISSN. 2013:2315-4209.
[11]	GAVASKAR S , SURENDIRAN R , RAMARAJ D E . Three counter defense mechanism for TCP SYN flooding attacks[J]. International Journal of Computer Applications, 2010,6(6):0975-8887.
[12]	RAI M K , MISHRA V S . Detection of UDP and HTTP anomalies on real time traffic based on NIDS using OURMON tool[J]. 2015.
[13]	SHANNON C E . A mathematical theory of communication[J]. ACM SIGMOBILE Mobile Computing and Communications Review, 2001,5(1):3-55.
[14]	KUMAR K , JOSHI R C , SINGH K . A distributed approach using entropy to detect DDoS attacks in ISP domain[C]//2007 International Conference on Signal Processing,Communications and Networking.IEEE, 2007:331-337.
[15]	DAVID J , THOMAS C . DDoS attack detection using fast entropy approach on flow-based network traffic[J]. Procedia Computer Science, 2015,50:30-36.
[16]	XIANG Y , LI K , ZHOU W . Low-rate DDoS attacks detection and traceback by using new information metrics[J]. IEEE Transactions on Information Forensics and Security, 2011,6(2):426-437.
[17]	BHUYAN M H , BHATTACHARYYA D K , KALITA J K . An empiri-cal evaluation of information metrics for low-rate and high-rate DDoS attack detection[J]. Pattern Recognition Letters, 2015,51:1-7.
[18]	TAO Y , YU S . DDoS attack detection at local area networks using information theoretical metrics[C]//2013 12th IEEE International Conference on Trust,Security and Privacy in Computing and Commu-nications.IEEE, 2013:233-240.
[19]	AIN A , BHUYAN M H , BHATTACHARYYA D K , et al. Rank corre-lation for low-rate DDoS attack detection:an empirical evaluation[J]. International Journal of Network Security, 2016,18(3):474-480.

Metrics

Recommended 0

No Suggested Reading articles found!

Research on DDoS detection in multi-tenant cloud based on entropy change

RichHTML

PDF

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 8

References 19

Related Articles 15

Metrics

Recommended 0

[1]	Yang GAO, Hongli ZHANG. Survey on community detection method based on random walk [J]. Journal on Communications, 2023, 44(6): 198-210.
[2]	Jinzhi ZHENG, Ruyi JI, Libo ZHANG, Chen ZHAO. End-to-end scene text detection and recognition algorithm based on Transformer decoders [J]. Journal on Communications, 2023, 44(5): 64-78.
[3]	Ping ZHANG, Jincheng DAI, Yuming ZHANG, Sixian WANG, Xiaoqi QIN, Kai NIU. Nonlinear transform coding for semantic communications [J]. Journal on Communications, 2023, 44(4): 1-14.
[4]	Xin SUN, Guifu ZHANG, Hongyan XING, Wang Zenghui. Research on intrusion detection for maritime meteorological sensor network based on balancing generative adversarial network [J]. Journal on Communications, 2023, 44(4): 124-136.
[5]	Qianyi DAI, Bin ZHANG, Song GUO, Kaiyong XU. Blockchain network layer anomaly traffic detection method based on multiple classifier integration [J]. Journal on Communications, 2023, 44(3): 66-80.
[6]	Bingpeng ZHOU, Shanshan MA. Simultaneous vehicular location and velocity detection towards 6G integrated communication and sensing [J]. Journal on Communications, 2023, 44(3): 81-92.
[7]	Helin SUN, Hongyuan GAO, Yanan DU, Jianhua CHENG, Yapeng LIU. Joint estimation method of target number and orientation parameters for FDA-MIMO radar [J]. Journal on Communications, 2023, 44(2): 41-51.
[8]	Weigang HUO, Rui LIANG, Yonghua LI. Anomaly detection model for multivariate time series based on stochastic Transformer [J]. Journal on Communications, 2023, 44(2): 94-103.
[9]	Guojun LI, Xu HOU, Changrong YE, Yiping LUO. Wide area cooperative resource allocation algorithm for shortwave communication access network [J]. Journal on Communications, 2023, 44(2): 112-121.
[10]	Guojun LI, Cuiling XIANG, Changrong YE, Zunli WANG. Fast link-establishment method of integrated of communication and detection based on short-wave digital channelization [J]. Journal on Communications, 2023, 44(1): 89-102.
[11]	Hongyu YANG, Haiyun YANG, Liang ZHANG, Xiang CHENG. Feature dependence graph based source code loophole detection method [J]. Journal on Communications, 2023, 44(1): 103-117.
[12]	Yanhua LIU, Jiaqi LI, Zhengui OU, Xiaoling GAO, Ximeng LIU, Weizhi MENG, Baoxu LIU. Adversarial training driven malicious code detection enhancement method [J]. Journal on Communications, 2022, 43(9): 169-180.
[13]	Chengsheng YUAN, Qiang GUO, Zhangjie FU. Copyright protection algorithm based on differential privacy deep fake fingerprint detection model [J]. Journal on Communications, 2022, 43(9): 181-193.
[14]	Rui JIANG, Jun LI, Youyun XU, Xiaoming WANG, Dapeng LI. Fault tolerant GPS-AOA-SINS integrated navigation algorithm based on federated Kalman filter [J]. Journal on Communications, 2022, 43(8): 78-89.
[15]	Weiyu CHEN, Junshan LUO, Fanggang WANG, Haiyang DING, Shilian WANG, Guojiang XIA. Survey of capacity limits and implementation techniques in wireless covert communication [J]. Journal on Communications, 2022, 43(8): 203-218.