Robust Self-Protection Against Application-Layer (D)DoS Attacks in SDN Environment

被引:20
作者
Benzaid, Chafika [1 ]
Boukhalfa, Mohammed [1 ]
Taleb, Tarik [1 ,2 ]
机构
[1] Aalto Univ, Espoo, Finland
[2] Univ Oulu, Oulu, Finland
来源
2020 IEEE WIRELESS COMMUNICATIONS AND NETWORKING CONFERENCE (WCNC) | 2020年
基金
芬兰科学院;
关键词
D O I
10.1109/wcnc45663.2020.9120472
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
The expected high bandwidth of 5G and the envisioned massive number of connected devices will open the door to increased and sophisticated attacks, such as application-layer DDoS attacks. Application-layer DDoS attacks are complex to detect and mitigate due to their stealthy nature and their ability to mimic genuine behavior. In this work, we propose a robust application-layer DDoS self-protection framework that empowers a fully autonomous detection and mitigation of the application-layer DDoS attacks leveraging on Deep Learning (DL) and SDN enablers. The DL models have been proven vulnerable to adversarial attacks, which aim to fool the DL model into taking wrong decisions. To overcome this issue, we build a DL-based application-layer DDoS detection model that is robust to adversarial examples. The performance results show the effectiveness of the proposed framework in protecting against application-layer DDoS attacks even in the presence of adversarial attacks.
引用
收藏
页数:6
相关论文
共 23 条
  • [1] [Anonymous], 2019, IEEE COMMUN SURVEYS
  • [2] Barreno M., 2006, P ASIACCS06
  • [3] Benzaid C., IEEE NETWORK MAGAZIN
  • [4] Bhatia S., 2018, VERSATILE CYBERSECUR, V72, P55, DOI DOI 10.1007/978-3-319-97643-3_3
  • [5] Assessing Lightweight Virtualization for Security-as-a-Service at the Network Edge
    Boudi, Abderrahmane
    Farris, Ivan
    Bagaa, Miloud
    Taleb, Tarik
    [J]. IEICE TRANSACTIONS ON COMMUNICATIONS, 2019, E102B (05) : 970 - 977
  • [6] Boudi A, 2018, 2018 IEEE CONFERENCE ON STANDARDS FOR COMMUNICATIONS AND NETWORKING (IEEE CSCN)
  • [7] Braga R, 2010, C LOCAL COMPUT NETW, P408, DOI 10.1109/LCN.2010.5735752
  • [8] A Survey on Emerging SDN and NFV Security Mechanisms for IoT Systems
    Farris, Ivan
    Taleb, Tarik
    Khettab, Yacine
    Song, Jaeseung
    [J]. IEEE COMMUNICATIONS SURVEYS AND TUTORIALS, 2019, 21 (01): : 812 - 837
  • [9] Goodfellow I. J., 2015, ARXIV14126572
  • [10] Reinforcement Learning for Autonomous Defence in Software-Defined Networking
    Han, Yi
    Rubinstein, Benjamin I. P.
    Abraham, Tamas
    Alpcan, Tansu
    De Vel, Olivier
    Erfani, Sarah
    Hubczenko, David
    Leckie, Christopher
    Montague, Paul
    [J]. DECISION AND GAME THEORY FOR SECURITY, GAMESEC 2018, 2018, 11199 : 145 - 165