클라우드 기반의 DDoS 공격 방어 메커니즘에 관한 연구

다국어 초록 (Multilingual Abstract)

DDoS attacks are still a major threat to network security. Several new types of attacks such as application layer attacks (e.g., HTTP flood, RUDY, Slowloris, etc.) have occurred. We propose a new cloud-based DDoS defense mechanism. Our mechanism provides distributed DDoS defense utilizing multiple replicas of the protected server throughout a cloud infrastructure. This mechanism is dynamic and can be adjusted by controlling the number of replicas on cloud based on attack strength. The problem that the requests are still forwarded to the main server in existing work was resolved by completely isolating the main server in our mechanism. Quality features of service such as response time, incoming traffic load, and load sharing are improved because of distribution of attack and replication of the main server throughout the cloud. Our experiment that shows significant improvement of the traffic load on the main server as a result of using our proposed mechanism.

참고문헌 (Reference)

1 유혜정, "안전한 클라우드 컴퓨팅을 위한 속성기반 인증" 한국정보기술학회 13 (13): 59-69, 2015

2 김동훈, "베이지안 네트워크를 이용한 클라이언트에서의 DDoS 방어 기법에 관한 연구" 한국정보기술학회 11 (11): 91-95, 2013

3 E. Nygren, "The akamai network: a platform for high-performance internet applications" 44 : 2-19, 2010

4 Y. Gao, "Internet cache pollution attacks and countermeasures" IEEE Computer Society 54-64, 2006

5 M. Xie, "Enhancing cache robustness for content-centric networking" 2426-2434, 2012

6 V. C. Harish, "Dynamic load balancing dns" 1999 : 1999

7 P. Du, "Ddos defense as a network service" 894-897, 2010

8 A. M. Sharifi, "Availability challenge of cloud system under ddos attack" 4 (4): 2933-2937, 2012

9 H. Hamad, "Article: Managing intrusion detection as a service in cloud networks" Foundation of Computer Science 41 : 35-40, 2012

10 I. CloudFlare, "An overview of cloudflare"