SDN/NFV-based moving target DDoS defense mechanism

Chien Chang Liu; Bo Sheng Huang; Chia Wei Tseng; Yao Tsung Yang; Li Der Chou

doi:10.1007/978-3-319-99007-1_51

SDN/NFV-based moving target DDoS defense mechanism

Chien Chang Liu, Bo Sheng Huang, Chia Wei Tseng, Yao Tsung Yang, Li Der Chou

資訊工程學系

研究成果: 書貢獻/報告類型 › 會議論文篇章 › 同行評審

15 引文斯高帕斯（Scopus）

摘要

The rapid development of internet technology makes the hacker’s attack more mature and diversified. One of the most serious security problems is distributed denial of service (DDoS) attack. In order to cope with information security issues, a new form of defensive thinking, moving target defense (MTD), has been proposed. The emergence of new network architecture software defined network (SDN) and network function virtualization (NFV) - has also changed the future of network security schemes. In this paper, an SDN/NFV-based moving target DDoS defense mechanism using multiple fuzzy systems and a proxy virtual network function (VNF) is proposed to achieve DDoS detection and mitigation. The experimental results show that the proposed mechanism can redirect suspicious traffic and quarantine it, thereby shifting the attack surface.

原文	???core.languages.en_GB???
主出版物標題	Recent Trends in Data Science and Soft Computing - Proceedings of the 3rd International Conference of Reliable Information and Communication Technology IRICT 2018
編輯	Fathey Mohammed, Faisal Saeed, Nadhmi Gazem, Abdelsalam Busalim
發行者	Springer Verlag
頁面	548-556
頁數	9
ISBN（列印）	9783319990064
DOIs	https://doi.org/10.1007/978-3-319-99007-1_51
出版狀態	已出版 - 2019
事件	3rd International Conference of Reliable Information and Communication Technology, IRICT 2018 - Kuala Lumpur, Malaysia 持續時間: 23 6月 2018 → 24 6月 2018

出版系列

名字	Advances in Intelligent Systems and Computing
卷	843
ISSN（列印）	2194-5357

???event.eventtypes.event.conference???

???event.eventtypes.event.conference???	3rd International Conference of Reliable Information and Communication Technology, IRICT 2018
國家/地區	Malaysia
城市	Kuala Lumpur
期間	23/06/18 → 24/06/18

存取文件

10.1007/978-3-319-99007-1_51

基於SDN與NFV之訊務卸載分流管理機制(3/3)
Chou, L.-D. (PI)
1/08/18 → 31/08/19
研究計畫: Research
運用SDN與NFV佈建虛擬網路功能技術研究(I)
Hsu, F.-H. (PI)
1/01/18 → 31/12/18
研究計畫: Research
SDN 網路中基於 NFV 與 SFC 之服務管理機制(3/3)
Chou, L.-D. (PI)
1/08/17 → 31/07/18
研究計畫: Research

引用此

Liu, C. C., Huang, B. S., Tseng, C. W., Yang, Y. T., & Chou, L. D. (2019). SDN/NFV-based moving target DDoS defense mechanism. 於 F. Mohammed, F. Saeed, N. Gazem, & A. Busalim (編輯), Recent Trends in Data Science and Soft Computing - Proceedings of the 3rd International Conference of Reliable Information and Communication Technology IRICT 2018 (頁 548-556). (Advances in Intelligent Systems and Computing; 卷 843). Springer Verlag. https://doi.org/10.1007/978-3-319-99007-1_51

Liu, Chien Chang ; Huang, Bo Sheng ; Tseng, Chia Wei 等. / SDN/NFV-based moving target DDoS defense mechanism. Recent Trends in Data Science and Soft Computing - Proceedings of the 3rd International Conference of Reliable Information and Communication Technology IRICT 2018. 編輯 / Fathey Mohammed ; Faisal Saeed ; Nadhmi Gazem ; Abdelsalam Busalim. Springer Verlag, 2019. 頁 548-556 (Advances in Intelligent Systems and Computing).

@inproceedings{52d69393a10440e284fdfa708da92b6b,

title = "SDN/NFV-based moving target DDoS defense mechanism",

abstract = "The rapid development of internet technology makes the hacker{\textquoteright}s attack more mature and diversified. One of the most serious security problems is distributed denial of service (DDoS) attack. In order to cope with information security issues, a new form of defensive thinking, moving target defense (MTD), has been proposed. The emergence of new network architecture software defined network (SDN) and network function virtualization (NFV) - has also changed the future of network security schemes. In this paper, an SDN/NFV-based moving target DDoS defense mechanism using multiple fuzzy systems and a proxy virtual network function (VNF) is proposed to achieve DDoS detection and mitigation. The experimental results show that the proposed mechanism can redirect suspicious traffic and quarantine it, thereby shifting the attack surface.",

keywords = "Distributed denial of service, Fuzzy logic, Moving target defense, Network function virtualization, Software defined network",

author = "Liu, {Chien Chang} and Huang, {Bo Sheng} and Tseng, {Chia Wei} and Yang, {Yao Tsung} and Chou, {Li Der}",

note = "Publisher Copyright: {\textcopyright} Springer Nature Switzerland AG 2019.; 3rd International Conference of Reliable Information and Communication Technology, IRICT 2018 ; Conference date: 23-06-2018 Through 24-06-2018",

year = "2019",

doi = "10.1007/978-3-319-99007-1_51",

language = "???core.languages.en_GB???",

isbn = "9783319990064",

series = "Advances in Intelligent Systems and Computing",

publisher = "Springer Verlag",

pages = "548--556",

editor = "Fathey Mohammed and Faisal Saeed and Nadhmi Gazem and Abdelsalam Busalim",

booktitle = "Recent Trends in Data Science and Soft Computing - Proceedings of the 3rd International Conference of Reliable Information and Communication Technology IRICT 2018",

}

Liu, CC, Huang, BS, Tseng, CW, Yang, YT & Chou, LD 2019, SDN/NFV-based moving target DDoS defense mechanism. 於 F Mohammed, F Saeed, N Gazem & A Busalim (編輯), Recent Trends in Data Science and Soft Computing - Proceedings of the 3rd International Conference of Reliable Information and Communication Technology IRICT 2018. Advances in Intelligent Systems and Computing, 卷 843, Springer Verlag, 頁 548-556, 3rd International Conference of Reliable Information and Communication Technology, IRICT 2018, Kuala Lumpur, Malaysia, 23/06/18. https://doi.org/10.1007/978-3-319-99007-1_51

SDN/NFV-based moving target DDoS defense mechanism. / Liu, Chien Chang; Huang, Bo Sheng; Tseng, Chia Wei 等.
Recent Trends in Data Science and Soft Computing - Proceedings of the 3rd International Conference of Reliable Information and Communication Technology IRICT 2018. 編輯 / Fathey Mohammed; Faisal Saeed; Nadhmi Gazem; Abdelsalam Busalim. Springer Verlag, 2019. p. 548-556 (Advances in Intelligent Systems and Computing; 卷 843).

研究成果: 書貢獻/報告類型 › 會議論文篇章 › 同行評審

TY - GEN

T1 - SDN/NFV-based moving target DDoS defense mechanism

AU - Liu, Chien Chang

AU - Huang, Bo Sheng

AU - Tseng, Chia Wei

AU - Yang, Yao Tsung

AU - Chou, Li Der

N1 - Publisher Copyright: © Springer Nature Switzerland AG 2019.

PY - 2019

Y1 - 2019

N2 - The rapid development of internet technology makes the hacker’s attack more mature and diversified. One of the most serious security problems is distributed denial of service (DDoS) attack. In order to cope with information security issues, a new form of defensive thinking, moving target defense (MTD), has been proposed. The emergence of new network architecture software defined network (SDN) and network function virtualization (NFV) - has also changed the future of network security schemes. In this paper, an SDN/NFV-based moving target DDoS defense mechanism using multiple fuzzy systems and a proxy virtual network function (VNF) is proposed to achieve DDoS detection and mitigation. The experimental results show that the proposed mechanism can redirect suspicious traffic and quarantine it, thereby shifting the attack surface.

AB - The rapid development of internet technology makes the hacker’s attack more mature and diversified. One of the most serious security problems is distributed denial of service (DDoS) attack. In order to cope with information security issues, a new form of defensive thinking, moving target defense (MTD), has been proposed. The emergence of new network architecture software defined network (SDN) and network function virtualization (NFV) - has also changed the future of network security schemes. In this paper, an SDN/NFV-based moving target DDoS defense mechanism using multiple fuzzy systems and a proxy virtual network function (VNF) is proposed to achieve DDoS detection and mitigation. The experimental results show that the proposed mechanism can redirect suspicious traffic and quarantine it, thereby shifting the attack surface.

KW - Distributed denial of service

KW - Fuzzy logic

KW - Moving target defense

KW - Network function virtualization

KW - Software defined network

UR - http://www.scopus.com/inward/record.url?scp=85053896333&partnerID=8YFLogxK

U2 - 10.1007/978-3-319-99007-1_51

DO - 10.1007/978-3-319-99007-1_51

M3 - 會議論文篇章

AN - SCOPUS:85053896333

SN - 9783319990064

T3 - Advances in Intelligent Systems and Computing

SP - 548

EP - 556

BT - Recent Trends in Data Science and Soft Computing - Proceedings of the 3rd International Conference of Reliable Information and Communication Technology IRICT 2018

A2 - Mohammed, Fathey

A2 - Saeed, Faisal

A2 - Gazem, Nadhmi

A2 - Busalim, Abdelsalam

PB - Springer Verlag

T2 - 3rd International Conference of Reliable Information and Communication Technology, IRICT 2018

Y2 - 23 June 2018 through 24 June 2018

ER -

Liu CC, Huang BS, Tseng CW, Yang YT, Chou LD. SDN/NFV-based moving target DDoS defense mechanism. 於 Mohammed F, Saeed F, Gazem N, Busalim A, 編輯, Recent Trends in Data Science and Soft Computing - Proceedings of the 3rd International Conference of Reliable Information and Communication Technology IRICT 2018. Springer Verlag. 2019. p. 548-556. (Advances in Intelligent Systems and Computing). doi: 10.1007/978-3-319-99007-1_51

SDN/NFV-based moving target DDoS defense mechanism

摘要

出版系列

???event.eventtypes.event.conference???

存取文件

指紋

專案

基於SDN與NFV之訊務卸載分流管理機制(3/3)

運用SDN與NFV佈建虛擬網路功能技術研究(I)

SDN 網路中基於 NFV 與 SFC 之服務管理機制(3/3)

引用此