Abstract
Distributed Denial of Service (DDoS) attacks remain one of the most effective cybercriminals methods to cause significant financial and operational damage. In Cloud Computing, these attacks’ goal is to shut down cloud servers, flooding them with traffic from compromised devices or networks. To address these issues, we offer SMC, a new approach to protect cloud servers against distributed denial of service attacks and mitigate their impact on network performance. SMC uses an SDN-based attack detection system to detect possible DDoS attacks and effectively mitigate their impact by rerouting malicious traffic, adjusting switch rule timeouts and aggregating these rules into SDN switch tables. Our experiments show that SMC maintains network performance during DDoS attacks. In addition, SMC significantly reduces packets’ loss and their average transmission time in the network during DDoS attacks.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
References
Chaudhary, D., Bhushan, K., Gupta, B.: Survey on DDoS attacks and defense mechanisms in cloud and fog computing. In: Cloud Security, pp. 1927–1951. IGI Global (2019)
Guesmi, H., Kalghoum, A., Ghazel, C., Saidane, L.A.: FFED: a novel strategy based on fast entropy to detect attacks against trust computing in cloud. Clust. Comput. 24(3), 1945–1954 (2021). https://doi.org/10.1007/s10586-021-03233-3
Guesmi, T., Kalghoum, A., Alshammari, B.M., Alsaif, H., Alzamil, A.: Leveraging software-defined networking approach for future information-centric networking enhancement. Symmetry 13(3), 441 (2021)
Jeon, H., Cho, C., Shin, S., Yoon, S.: A CloudSim-extension for simulating distributed functions-as-a-service. In: 2019 20th International Conference on Parallel and Distributed Computing, Applications and Technologies (PDCAT). IEEE, December 2019
Mohammadi, R., Javidan, R., Conti, M.: SLICOTS: an SDN-based lightweight countermeasure for TCP SYN flooding attacks. IEEE Trans. Netw. Serv. Manage. 14(2), 487–497 (2017)
Sahay, R., Blanc, G., Zhang, Z., Debar, H.: Towards autonomic DDoS mitigation using software defined networking. In: Proceedings 2015 Workshop on Security of Emerging Networking Technologies. Internet Society (2015)
Schaller, S., Hood, D.: Software defined networking architecture standardization. Comput. Stand. Interf. 54, 197–202 (2017)
Singh, M.P., Bhandari, A.: New-flow based DDoS attacks in SDN: taxonomy, rationales, and research challenges. Comput. Commun. 154, 509–527 (2020)
Srilatha, N., Sravani, M., Divya, Y.: Optimal round robin CPU scheduling algorithm using Manhattan distance. Int. J. Electr. Comput. Eng. (IJECE) 7(6), 3664 (2017)
Tandon, R.: A survey of distributed denial of service attacks and defenses. https://arxiv.org/abs/2008.01345 (2020)
Velliangiri, S., Karthikeyan, P., Kumar, V.V.: Detection of distributed denial of service attack in cloud computing using the optimization-based deep networks. J. Exp. Theoret. Artif. Intell., 1–20 (2020)
Wang, H., Xu, L., Gu, G.: FloodGuard: a DoS attack prevention extension in software-defined networks. In: 2015 45th Annual IEEE/IFIP International Conference on Dependable Systems and Networks, pp. 239–250 (2015)
Wei, L., Fung, C.: FlowRanger: a request prioritizing algorithm for controller DoS attacks in software defined networks. In: 2015 IEEE International Conference on Communications (ICC). IEEE, June 2015
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2021 Springer Nature Switzerland AG
About this paper
Cite this paper
Guesmi, H., Kalghoum, A., Guesmi, R., Saïdane, L.A. (2021). SMC: A New Strategy Based on Software-Defined Networking to Mitigate the Impact of Anomalies on Cooperative Cloud. In: Luo, Y. (eds) Cooperative Design, Visualization, and Engineering. CDVE 2021. Lecture Notes in Computer Science(), vol 12983. Springer, Cham. https://doi.org/10.1007/978-3-030-88207-5_14
Download citation
DOI: https://doi.org/10.1007/978-3-030-88207-5_14
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-030-88206-8
Online ISBN: 978-3-030-88207-5
eBook Packages: Computer ScienceComputer Science (R0)