PROACTIVE DETECTION OF DDOS ATTACKS IN PUBLISH-SUBSCRIBE NETWORKS
Bander Alzahrani1, Vassilios Vassilakis2, Mohammed Alreshoodi3, Fawaz Alarfaj4 and Ahmed Alhindi5
1Faculty of Computing and Information Technology, King Abdulaziz University, Jeddah,Saudi Arabia
2School of Computing, Engineering and Mathematics, University of Brighton, Brighton,United Kingdom
3College of Computer, Qassim University, Buraydah, Saudi Arbaia
4Al Imam Mohammad Ibn Saud Islamic University (IMSIU), Saudi Arabia
5College of Computers and Information Systems, Umm Al-Qura University, Makkah,Saudi Arabia
ABSTRACT
Information centric networking (ICN) using architectures such as Publish-Subscribe Internet Routing Paradigm (PSIRP) or Publish-Subscribe Internet Technology (PURSUIT) has been proposed as an important candidate for the Internet of the future. ICN is an emerging research area that proposes a transformation of the current host centric Internet architecture into an architecture where information items are of primary importance. This change allows network functions such as routing and locating to be optimized based on the information items themselves. The Bloom filter based content delivery is a sourcerouting scheme that is used in the PSIRP/PURSUIT architectures. Although this mechanism solves many issues of today’s Internet such as the growth of the routing table and the scalability problems, it is vulnerable to distributed denial-of-service (DDoS) attacks. In this paper, we present a new content delivery scheme that has the advantages of Bloom filter based approach while at the same time being able to prevent DDoS attacks on the forwarding mechanism. Our security analysis suggests that with the proposed approach, the forwarding plane is able to resist attacks such as DDoS with very high probability.
KEYWORDS
Distributed denial-of-service attack; information centric network; Bloom filter.
ORIGINAL SOURCE URL : http://aircconline.com/ijnsa/V8N4/8416ijnsa01.pdf
No comments:
Post a Comment