{"title":"Adaptive Bubble Burst (ABB): Mitigating DDoS attacks in Software-Defined Networks","authors":"Danish Sattar, A. Matrawy, Olufemi Adeojo","doi":"10.1109/NETWKS.2016.7751152","DOIUrl":null,"url":null,"abstract":"The availability of online services is threatened by the Distributed Denial of Service (DDoS) attacks. As computing resources are getting cheaper, DDoS attacks are becoming more frequent and powerful. When DDoS attacks are directed towards a specific service, a small number of bots can overwhelm the service, making it unavailable to legitimate users. This paper presents Adaptive Bubble Burst (ABB), which takes advantage of the logically centralized architecture of Software-Defined Networks to provide mitigation against DDoS attacks that are targeted towards a specific service. ABB works by dispersing the incoming traffic in the network. Our experimental results show that ABB mitigates the DDoS attacks by enhancing the availability of a specific network resource.","PeriodicalId":239896,"journal":{"name":"2016 17th International Telecommunications Network Strategy and Planning Symposium (Networks)","volume":"42 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2016-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"13","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"2016 17th International Telecommunications Network Strategy and Planning Symposium (Networks)","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/NETWKS.2016.7751152","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 13
Abstract
The availability of online services is threatened by the Distributed Denial of Service (DDoS) attacks. As computing resources are getting cheaper, DDoS attacks are becoming more frequent and powerful. When DDoS attacks are directed towards a specific service, a small number of bots can overwhelm the service, making it unavailable to legitimate users. This paper presents Adaptive Bubble Burst (ABB), which takes advantage of the logically centralized architecture of Software-Defined Networks to provide mitigation against DDoS attacks that are targeted towards a specific service. ABB works by dispersing the incoming traffic in the network. Our experimental results show that ABB mitigates the DDoS attacks by enhancing the availability of a specific network resource.
在线服务的可用性受到DDoS (Distributed Denial of Service)攻击的威胁。随着计算资源的日益廉价,DDoS攻击变得越来越频繁和强大。当DDoS攻击指向特定的服务时,少量的僵尸程序可以淹没该服务,使其对合法用户不可用。本文介绍了自适应气泡爆发(ABB),它利用软件定义网络的逻辑集中式架构来提供针对特定服务的DDoS攻击的缓解。ABB通过分散网络中的传入流量来工作。我们的实验结果表明,ABB通过增强特定网络资源的可用性来减轻DDoS攻击。