DDoS victim service containment to minimize the internal collateral damages in cloud computing. (April 2017)

• Record Type: Journal Article
• Authors: Somani, Gaurav; Gaur, Manoj Singh; Sanghi, Dheeraj; Conti, Mauro; Rajarajan, Muttukrishnan
• Is Part Of: Computers & electrical engineering. Volume 59(2017)
• Page Start: 165
• Page End: 179
• Publication Date: 2017-04
• Subjects: Cloud computing -- Cloud security -- Distributed Denial of Service (DDoS) attack and Economic Denial of Sustainability (EDoS) attack; Computer engineering -- Periodicals; Electrical engineering -- Periodicals; Electrical engineering -- Data processing -- Periodicals; Ordinateurs -- Conception et construction -- Périodiques; Électrotechnique -- Périodiques; Électrotechnique -- Informatique -- Périodiques; Computer engineering; Electrical engineering; Electrical engineering -- Data processing; Periodicals; Electronic journals; 621.302854
• DOI: 10.1016/j.compeleceng.2016.12.004
• Languages: English
• ISSNs: 0045-7906

Abstract

Abstract: Recent Distributed Denial of Service (DDoS) attacks on cloud services demonstrate new attack effects, including collateral and economic losses. In this work, we show that DDoS mitigation methods may not provide the expected timely mitigation due to the heavy resource outage created by the attacks. We observe an important Operating System (OS) level "internal collateral damage", in which the other critical services are also affected. We formulate the DDoS mitigation problem as an OS level resource management problem. We argue that providing extra resources to the victim's server is only helpful if we can ensure the availability of other services. To achieve these goals, we propose a novel resource containment approach to enforce the victim's resource limits. Our real-time experimental evaluations show that the proposed approach results in reduction in the attack reporting time and victim service downtime by providing isolated and timely resources to ensure availability of other critical services.