Proactive Detection of Ddos Attacks In Publish-Subscribe Networks

Bander Alzahrani1, Vassilios Vassilakis2, Mohammed Alreshoodi3, Fawaz Alarfaj4

and Ahmed Alhindi5

1Faculty of Computing and Information Technology, King Abdulaziz University, Jeddah,

Saudi Arabia

2School of Computing, Engineering and Mathematics, University of Brighton, Brighton,

United Kingdom

3College of Computer, Qassim University, Buraydah, Saudi Arbaia

4Al Imam Mohammad Ibn Saud Islamic University (IMSIU), Saudi Arabia

5College of Computers and Information Systems, Umm Al-Qura University, Makkah,

Saudi Arabia

ABSTRACT

Abstract. Information centric networking (ICN) using architectures such as Publish-Subscribe Internet Routing Paradigm (PSIRP) or Publish-Subscribe Internet Technology (PURSUIT) has been proposed as an important candidate for the Internet of the future. ICN is an emerging research area that proposes a transformation of the current host centric Internet architecture into an architecture where information items are of primary importance. This change allows network functions such as routing and locating to be optimized based on the information items themselves. The Bloom filter based content delivery is a source routing scheme that is used in the PSIRP/PURSUIT architectures. Although this mechanism solves many issues of today’s Internet such as the growth of the routing table and the scalability problems, it is vulnerable to distributed denial-of-service (DDoS) attacks. In this paper, we present a new content delivery scheme that has the advantages of Bloom filter based approach while at the same time being able to prevent DDoS attacks on the forwarding mechanism. Our security analysis suggests that with the proposed approach, the forwarding plane is able to resist attacks such as DDoS with very high probability.

KEYWORDS

Distributed denial-of-service attack; information centric network; Bloom filter.

MORE…