• DocumentCode
    568498
  • Title

    Enhanced EDoS-Shield for Mitigating EDoS Attacks Originating from Spoofed IP Addresses

  • Author

    Al-Haidari, Fahd ; Sqalli, Mohammed H. ; Salah, Khaled

  • Author_Institution
    Coll. of Comput. Sci. & Eng., King Fahd Univ. of Pet. & Miner. (KFUPM), Dhahran, Saudi Arabia
  • fYear
    2012
  • fDate
    25-27 June 2012
  • Firstpage
    1167
  • Lastpage
    1174
  • Abstract
    Cloud computing has become one of the fastest growing segments in IT industry. A cloud introduces resource-rich computing platforms, where adopters are charged based on the usage of the cloud\´s resources, known as "pay-as-you-use" or utility computing. With this model, a conventional DDoS attack targeting servers and network resources is transformed in a cloud environment to a new attack that targets the cloud adopter\´s economic resource, namely Economic Denial of Sustainability (EDoS) attack. In this paper, we advocate a novel solution as an enhancement to prior work, namely EDoS-Shield, to mitigate the EDoS attacks originating from spoofed IP addresses. We design a discrete event simulation experiment to evaluate its performance and the results show that it is a promising solution to mitigate the EDoS attacks originating from spoofed IP addresses. The enhanced EDoS-Shield technique also outperforms the original EDoS-Shield in terms of performance and cost metrics.
  • Keywords
    IP networks; cloud computing; computer network performance evaluation; computer network security; discrete event simulation; resource allocation; DDoS attack targeting servers; EDoS-Shield; IT industry; cloud adopter economic resource; cloud computing; cloud resource-rich computing platforms; cost metrics; discrete event simulation; economic denial of sustainability attack; network resources; pay-as-you-use model; performance evaluation; performance metrics; spoofed IP addresses; utility computing; Cloud computing; Filtering; IP networks; Radiation detectors; Security; Servers; Cloud Computing; EDoS; IP spoofing; Mitigation; Security;
  • fLanguage
    English
  • Publisher
    ieee
  • Conference_Titel
    Trust, Security and Privacy in Computing and Communications (TrustCom), 2012 IEEE 11th International Conference on
  • Conference_Location
    Liverpool
  • Print_ISBN
    978-1-4673-2172-3
  • Type

    conf

  • DOI
    10.1109/TrustCom.2012.146
  • Filename
    6296109