SDN/NFV-based moving target DDoS defense mechanism

Chien Chang Liu; Bo Sheng Huang; Chia Wei Tseng; Yao Tsung Yang; Li Der Chou

doi:10.1007/978-3-319-99007-1_51

SDN/NFV-based moving target DDoS defense mechanism

Chien Chang Liu, Bo Sheng Huang, Chia Wei Tseng, Yao Tsung Yang, Li Der Chou

Department of Computer Science and Information Engineering

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

15 Scopus citations

Abstract

The rapid development of internet technology makes the hacker’s attack more mature and diversified. One of the most serious security problems is distributed denial of service (DDoS) attack. In order to cope with information security issues, a new form of defensive thinking, moving target defense (MTD), has been proposed. The emergence of new network architecture software defined network (SDN) and network function virtualization (NFV) - has also changed the future of network security schemes. In this paper, an SDN/NFV-based moving target DDoS defense mechanism using multiple fuzzy systems and a proxy virtual network function (VNF) is proposed to achieve DDoS detection and mitigation. The experimental results show that the proposed mechanism can redirect suspicious traffic and quarantine it, thereby shifting the attack surface.

Original language	English
Title of host publication	Recent Trends in Data Science and Soft Computing - Proceedings of the 3rd International Conference of Reliable Information and Communication Technology IRICT 2018
Editors	Fathey Mohammed, Faisal Saeed, Nadhmi Gazem, Abdelsalam Busalim
Publisher	Springer Verlag
Pages	548-556
Number of pages	9
ISBN (Print)	9783319990064
DOIs	https://doi.org/10.1007/978-3-319-99007-1_51
State	Published - 2019
Event	3rd International Conference of Reliable Information and Communication Technology, IRICT 2018 - Kuala Lumpur, Malaysia Duration: 23 Jun 2018 → 24 Jun 2018

Publication series

Name	Advances in Intelligent Systems and Computing
Volume	843
ISSN (Print)	2194-5357

Conference

Conference	3rd International Conference of Reliable Information and Communication Technology, IRICT 2018
Country/Territory	Malaysia
City	Kuala Lumpur
Period	23/06/18 → 24/06/18

Keywords

Distributed denial of service
Fuzzy logic
Moving target defense
Network function virtualization
Software defined network

Access to Document

10.1007/978-3-319-99007-1_51

基於SDN與NFV之訊務卸載分流管理機制(3/3)
Chou, L.-D. (PI)
1/08/18 → 31/08/19
Project: Research
Study of VI rtual Network Function Development Based on Software Defined Networking and Network Function VI rtualization (I)
Hsu, F.-H. (PI)
1/01/18 → 31/12/18
Project: Research
Service Management Mechanisms Based on Network Function Vi Rtualization and Service Function Chaining in Sdn Networks(3/3)
Chou, L.-D. (PI)
1/08/17 → 31/07/18
Project: Research

Cite this

Liu, C. C., Huang, B. S., Tseng, C. W., Yang, Y. T., & Chou, L. D. (2019). SDN/NFV-based moving target DDoS defense mechanism. In F. Mohammed, F. Saeed, N. Gazem, & A. Busalim (Eds.), Recent Trends in Data Science and Soft Computing - Proceedings of the 3rd International Conference of Reliable Information and Communication Technology IRICT 2018 (pp. 548-556). (Advances in Intelligent Systems and Computing; Vol. 843). Springer Verlag. https://doi.org/10.1007/978-3-319-99007-1_51

Liu, Chien Chang ; Huang, Bo Sheng ; Tseng, Chia Wei et al. / SDN/NFV-based moving target DDoS defense mechanism. Recent Trends in Data Science and Soft Computing - Proceedings of the 3rd International Conference of Reliable Information and Communication Technology IRICT 2018. editor / Fathey Mohammed ; Faisal Saeed ; Nadhmi Gazem ; Abdelsalam Busalim. Springer Verlag, 2019. pp. 548-556 (Advances in Intelligent Systems and Computing).

@inproceedings{52d69393a10440e284fdfa708da92b6b,

title = "SDN/NFV-based moving target DDoS defense mechanism",

abstract = "The rapid development of internet technology makes the hacker{\textquoteright}s attack more mature and diversified. One of the most serious security problems is distributed denial of service (DDoS) attack. In order to cope with information security issues, a new form of defensive thinking, moving target defense (MTD), has been proposed. The emergence of new network architecture software defined network (SDN) and network function virtualization (NFV) - has also changed the future of network security schemes. In this paper, an SDN/NFV-based moving target DDoS defense mechanism using multiple fuzzy systems and a proxy virtual network function (VNF) is proposed to achieve DDoS detection and mitigation. The experimental results show that the proposed mechanism can redirect suspicious traffic and quarantine it, thereby shifting the attack surface.",

keywords = "Distributed denial of service, Fuzzy logic, Moving target defense, Network function virtualization, Software defined network",

author = "Liu, {Chien Chang} and Huang, {Bo Sheng} and Tseng, {Chia Wei} and Yang, {Yao Tsung} and Chou, {Li Der}",

note = "Publisher Copyright: {\textcopyright} Springer Nature Switzerland AG 2019.; 3rd International Conference of Reliable Information and Communication Technology, IRICT 2018 ; Conference date: 23-06-2018 Through 24-06-2018",

year = "2019",

doi = "10.1007/978-3-319-99007-1_51",

language = "???core.languages.en_GB???",

isbn = "9783319990064",

series = "Advances in Intelligent Systems and Computing",

publisher = "Springer Verlag",

pages = "548--556",

editor = "Fathey Mohammed and Faisal Saeed and Nadhmi Gazem and Abdelsalam Busalim",

booktitle = "Recent Trends in Data Science and Soft Computing - Proceedings of the 3rd International Conference of Reliable Information and Communication Technology IRICT 2018",

}

Liu, CC, Huang, BS, Tseng, CW, Yang, YT & Chou, LD 2019, SDN/NFV-based moving target DDoS defense mechanism. in F Mohammed, F Saeed, N Gazem & A Busalim (eds), Recent Trends in Data Science and Soft Computing - Proceedings of the 3rd International Conference of Reliable Information and Communication Technology IRICT 2018. Advances in Intelligent Systems and Computing, vol. 843, Springer Verlag, pp. 548-556, 3rd International Conference of Reliable Information and Communication Technology, IRICT 2018, Kuala Lumpur, Malaysia, 23/06/18. https://doi.org/10.1007/978-3-319-99007-1_51

SDN/NFV-based moving target DDoS defense mechanism. / Liu, Chien Chang; Huang, Bo Sheng; Tseng, Chia Wei et al.
Recent Trends in Data Science and Soft Computing - Proceedings of the 3rd International Conference of Reliable Information and Communication Technology IRICT 2018. ed. / Fathey Mohammed; Faisal Saeed; Nadhmi Gazem; Abdelsalam Busalim. Springer Verlag, 2019. p. 548-556 (Advances in Intelligent Systems and Computing; Vol. 843).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - SDN/NFV-based moving target DDoS defense mechanism

AU - Liu, Chien Chang

AU - Huang, Bo Sheng

AU - Tseng, Chia Wei

AU - Yang, Yao Tsung

AU - Chou, Li Der

N1 - Publisher Copyright: © Springer Nature Switzerland AG 2019.

PY - 2019

Y1 - 2019

N2 - The rapid development of internet technology makes the hacker’s attack more mature and diversified. One of the most serious security problems is distributed denial of service (DDoS) attack. In order to cope with information security issues, a new form of defensive thinking, moving target defense (MTD), has been proposed. The emergence of new network architecture software defined network (SDN) and network function virtualization (NFV) - has also changed the future of network security schemes. In this paper, an SDN/NFV-based moving target DDoS defense mechanism using multiple fuzzy systems and a proxy virtual network function (VNF) is proposed to achieve DDoS detection and mitigation. The experimental results show that the proposed mechanism can redirect suspicious traffic and quarantine it, thereby shifting the attack surface.

AB - The rapid development of internet technology makes the hacker’s attack more mature and diversified. One of the most serious security problems is distributed denial of service (DDoS) attack. In order to cope with information security issues, a new form of defensive thinking, moving target defense (MTD), has been proposed. The emergence of new network architecture software defined network (SDN) and network function virtualization (NFV) - has also changed the future of network security schemes. In this paper, an SDN/NFV-based moving target DDoS defense mechanism using multiple fuzzy systems and a proxy virtual network function (VNF) is proposed to achieve DDoS detection and mitigation. The experimental results show that the proposed mechanism can redirect suspicious traffic and quarantine it, thereby shifting the attack surface.

KW - Distributed denial of service

KW - Fuzzy logic

KW - Moving target defense

KW - Network function virtualization

KW - Software defined network

UR - http://www.scopus.com/inward/record.url?scp=85053896333&partnerID=8YFLogxK

U2 - 10.1007/978-3-319-99007-1_51

DO - 10.1007/978-3-319-99007-1_51

M3 - 會議論文篇章

AN - SCOPUS:85053896333

SN - 9783319990064

T3 - Advances in Intelligent Systems and Computing

SP - 548

EP - 556

BT - Recent Trends in Data Science and Soft Computing - Proceedings of the 3rd International Conference of Reliable Information and Communication Technology IRICT 2018

A2 - Mohammed, Fathey

A2 - Saeed, Faisal

A2 - Gazem, Nadhmi

A2 - Busalim, Abdelsalam

PB - Springer Verlag

T2 - 3rd International Conference of Reliable Information and Communication Technology, IRICT 2018

Y2 - 23 June 2018 through 24 June 2018

ER -

Liu CC, Huang BS, Tseng CW, Yang YT, Chou LD. SDN/NFV-based moving target DDoS defense mechanism. In Mohammed F, Saeed F, Gazem N, Busalim A, editors, Recent Trends in Data Science and Soft Computing - Proceedings of the 3rd International Conference of Reliable Information and Communication Technology IRICT 2018. Springer Verlag. 2019. p. 548-556. (Advances in Intelligent Systems and Computing). doi: 10.1007/978-3-319-99007-1_51

SDN/NFV-based moving target DDoS defense mechanism

Abstract

Publication series

Conference

Keywords

Access to Document

Fingerprint

Projects

基於SDN與NFV之訊務卸載分流管理機制(3/3)

Study of VI rtual Network Function Development Based on Software Defined Networking and Network Function VI rtualization (I)

Service Management Mechanisms Based on Network Function Vi Rtualization and Service Function Chaining in Sdn Networks(3/3)

Cite this