Distributed denial of service (DDoS) resilience in cloud: Review and conceptual cloud DDoS mitigation framework

被引:188
|
作者
Osanaiye, Opeyemi [1 ,2 ]
Choo, Kim-Kwang Raymond [2 ,3 ]
Dlodlo, Mqhele [1 ]
机构
[1] Univ Cape Town, Dept Elect Engn, ZA-7700 Rondebosch, South Africa
[2] Univ S Australia, Informat Assurance Res Grp, Adelaide, SA 5001, Australia
[3] INTERPOL Global Complex Innovat, Singapore, Singapore
关键词
Anomaly-based; Change point detection; Cloud distributed denial of service (DDoS) attacks; Cloud distributed denial of service (DDoS) survey; Distributed denial of service (DDoS) attack taxonomy; Flooding attacks; ATTACK DETECTION; DEFENSE; PROTECTION; DOS;
D O I
10.1016/j.jnca.2016.01.001
中图分类号
TP3 [计算技术、计算机技术];
学科分类号
0812 ;
摘要
Despite the increasing popularity of cloud services, ensuring the security and availability of data, resources and services remains an ongoing research challenge. Distributed denial of service (DDoS) attacks are not a new threat, but remain a major security challenge and are a topic of ongoing research interest. Mitigating DDoS attack in cloud presents a new dimension to solutions proffered in traditional computing due to its architecture and features. This paper reviews 96 publications on DDoS attack and defense approaches in cloud computing published between January 2009 and December 2015, and discusses existing research trends. A taxonomy and a conceptual cloud DDoS mitigation framework based on change point detection are presented. Future research directions are also outlined. (C) 2016 Elsevier Ltd. All rights reserved.
引用
收藏
页码:147 / 165
页数:19
相关论文
共 50 条
  • [1] Review on Mitigation of Distributed Denial of Service (DDoS) Attacks in Cloud Computing
    Khadke, Ashwini
    Madankar, Mangala
    Motghare, Manish
    [J]. PROCEEDINGS OF THE 10TH INTERNATIONAL CONFERENCE ON INTELLIGENT SYSTEMS AND CONTROL (ISCO'16), 2016,
  • [2] A Review on Distributed Denial of Service (DDoS) Mitigation Techniques in Cloud Computing Environment
    Ahamed, Junath Naseer
    Iyengar, N. Ch. S. N.
    [J]. INTERNATIONAL JOURNAL OF SECURITY AND ITS APPLICATIONS, 2016, 10 (08): : 277 - 294
  • [3] Intrusion Prevention Against Distributed Denial-of-Service(DDoS) on the cloud
    Vanitha, R.
    [J]. INTERNATIONAL JOURNAL OF COMPUTER SCIENCE AND NETWORK SECURITY, 2016, 16 (04): : 90 - 96
  • [4] DDOS Mitigation Cloud-Based Service
    Guenane, Fouad
    Nogueira, Michele
    Serhrouchni, Ahmed
    [J]. 2015 IEEE TRUSTCOM/BIGDATASE/ISPA, VOL 1, 2015, : 1363 - 1368
  • [5] Detection of Distributed Denial of Service (DDoS) Attacks Using Artificial Intelligence on Cloud
    Alzahrani, Saba
    Hong, Liang
    [J]. 2018 IEEE WORLD CONGRESS ON SERVICES (IEEE SERVICES 2018), 2018, : 35 - 36
  • [6] A Survey on Distributed Denial of Service (DDoS) Attacks in SDN and Cloud Computing Environments
    Dong, Shi
    Abbas, Khushnood
    Jain, Raj
    [J]. IEEE ACCESS, 2019, 7 : 80813 - 80828
  • [7] A New Framework for Classification of Distributed Denial of Service (DDOS) Attack in Cloud Computing by Machine Learning Techniques
    Behzadi, Mostafa
    Mahmod, Ramlan
    Barati, Mehdi
    Abdullah, Azizol Bin Hj
    Noura, Mahda
    [J]. ADVANCED SCIENCE LETTERS, 2014, 20 (01) : 175 - 178
  • [8] Distributed denial of service (DDoS) attack mitigation in software defined network (SDN)-based cloud computing environment
    Bhushan, Kriti
    Gupta, B. B.
    [J]. JOURNAL OF AMBIENT INTELLIGENCE AND HUMANIZED COMPUTING, 2019, 10 (05) : 1985 - 1997
  • [9] Distributed denial of service (DDoS) attack mitigation in software defined network (SDN)-based cloud computing environment
    Kriti Bhushan
    B. B. Gupta
    [J]. Journal of Ambient Intelligence and Humanized Computing, 2019, 10 : 1985 - 1997
  • [10] A Stabilizing Architecture for Cloud Control System against Distributed Denial of Service (DDoS) Attack
    Ali, Yasir
    Xia Yuanqing
    Ma, Liang
    [J]. 2017 CHINESE AUTOMATION CONGRESS (CAC), 2017, : 3423 - 3428