【24h】

Dynamic attack mitigation using SDN

机译:使用SDN动态缓解攻击

获取原文

摘要

Security threats in the Internet have been ever increasing, in number, type and means used for attacks. In the face of large-scale attacks, such as DDoS attacks, networks take unacceptable time to respond and mitigate the attacks, resulting in disruption to connections and the losses due to it. In this work, we look into the problem of dynamically mitigating attacks from the perspective of an ISP. An ISP also needs to adapt its network while mitigating attacks. We exploit the software defined networking (SDN) paradigm, and propose to provide mitigation as a service to ISP's customers. Towards this goal, we formulate the problem of dynamically providing multiple mitigation services as an optimization problem. We carry out simulation studies to evaluate the solution, in terms of service delivered and the number of path disruptions caused to legitimate traffic due to mitigation services.
机译:Internet上的安全威胁在数量,类型和攻击手段上都在不断增加。面对诸如DDoS攻击之类的大规模攻击,网络花费了不可接受的时间来响应和缓解攻击,从而导致连接中断以及由此造成的损失。在这项工作中,我们从ISP的角度研究动态缓解攻击的问题。 ISP还需要在缓解攻击的同时调整其网络。我们利用软件定义的网络(SDN)范式,并提议将缓解措施作为服务提供给ISP的客户。为了实现这一目标,我们将动态提供多种缓解服务的问题列为优化问题。我们进行了仿真研究,从提供的服务以及缓解服务导致的合法流量导致的路径中断数量方面评估了解决方案。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号