Title
Detection of economic denial of sustainability (EDoS) threats in self-organizing networks
Date Issued
01 September 2019
Access level
metadata only access
Resource Type
journal article
Author(s)
Maestre Vidal J.
Martínez Pérez G.
Universidad Complutense de Madrid
Publisher(s)
Elsevier B.V.
Abstract
This paper reviews the threat of economic denial of sustainability on recent communication networks and discusses their adaptation to emergent scenarios suited for self-organization and network function virtualization. Thorough the performed research two novel threats were defined: workload-based EDoS (W-EDoS) and Instantiation-based EDoS (I-EDoS). W-EDoS is characterized by executing expensive requests in terms of computational resources at the victim system, hence exhausting its workload and forcing operators to contract additional resources. On the other hand, I-EDoS occurs when the cloud management software deploys more instances of virtual network functions than needed as a response to requests that resemble legitimate, but are malicious, thus increasing the cost of the hired resources. In order to contribute to their mitigation, a security architecture that incorporates network-based intrusion detection capabilities for their recognition is proposed. It implements strategies that lie on predicting the behavior of the protected system, constructing adaptive thresholds, and clustering of instances based on productivity. An extensive experimentation has been conducted to demonstrate the proposal effectiveness, which includes case studies and the accuracy assessment when considering different adjustment parameters. Under the most intense conditions, the highest AUC performed above 98% when assessing the I-EDoS detection accuracy, being the same reading higher than 99% in the case of W-EDoS.
Start page
284
End page
308
Volume
145
Language
English
OCDE Knowledge area
Sistemas de automatización, Sistemas de control Ciencias de la computación Ingeniería de sistemas y comunicaciones
Publication version
Version of Record
Scopus EID
2-s2.0-85069733116
Source
Computer Communications
ISSN of the container
0140-3664
Sponsor(s)
This research was been framed into the SELFNET (Framework for Self-Organized Network Management in Virtualized and Software Defined Networks) project, funded by the European Commission Horizon 2020 Programme under Grant Agreement number H2020-ICT-2014-2/671672 . The authors particularly acknowledge L.J.G. Villalba for his guidance and support on coordinating tasks and logistics.
Sources of information: Directorio de Producción Científica Scopus