SDN-Assisted Network-Based Mitigation of Slow DDoS Attacks

Lukaseder T, Maile L, Erb B, Kargl F (2018)

Publication Language: English

Publication Type: Book chapter / Article in edited volumes

Publication year: 2018

Publisher: Springer International Publishing

Edited Volumes: SecureComm 2018: Security and Privacy in Communication Networks

City/Town: Cham

Book Volume: abs/1804.06750

Pages Range: 102--121

ISBN: 978-3-030-01704-0

URI: http://arxiv.org/abs/1804.06750

DOI: 10.1007/978-3-030-01704-0_6

Open Access Link: https://arxiv.org/pdf/1804.06750.pdf

Abstract

Slow-running attacks against network applications are often not easy to detect, as the attackers behave according to the specification. The servers of many network applications are not prepared for such attacks, either due to missing countermeasures or because their default configurations ignores such attacks. The pressure to secure network services against such attacks is shifting more and more from the service operators to the network operators of the servers under attack. Recent technologies such as software-defined networking offer the flexibility and extensibility to analyze and influence network flows without the assistance of the target operator. Based on our previous work on a network-based mitigation, we have extended a framework to detect and mitigate slow-running DDoS attacks within the network infrastructure, but without requiring access to servers under attack. We developed and evaluated several identification schemes to identify attackers in the network solely based on network traffic information. We showed that by measuring the packet rate and the uniformity of the packet distances, a reliable identificator can be built, given a training period of the deployment network.

Authors with CRIS profile

Lisa Maile Computer Science 7 (Computer Networks and Communication Systems)

Related research project(s)

Network Calculus for Time-Sensitive Networking (NC for TSN) Oct. 1, 2018 - Oct. 1, 2021

Involved external institutions

Universität Ulm DE Germany (DE)

How to cite

APA:

Lukaseder, T., Maile, L., Erb, B., & Kargl, F. (2018). SDN-Assisted Network-Based Mitigation of Slow DDoS Attacks. In Beyah Raheem, Chang Bing, Li Yingjiu, Zhu Sencun (Eds.), SecureComm 2018: Security and Privacy in Communication Networks. (pp. 102--121). Cham: Springer International Publishing.

MLA:

Lukaseder, Thomas, et al. "SDN-Assisted Network-Based Mitigation of Slow DDoS Attacks." SecureComm 2018: Security and Privacy in Communication Networks. Ed. Beyah Raheem, Chang Bing, Li Yingjiu, Zhu Sencun, Cham: Springer International Publishing, 2018. 102--121.

BibTeX: Download