Robust Self-Protection Against Application-Layer (D)DoS Attacks in SDN Environment

Chafika Benzaid, Mohammed Boukhalfa, Tarik Taleb

Research output: Chapter in Book/Report/Conference proceedingConference article in proceedingsScientificpeer-review

26 Citations (Scopus)
296 Downloads (Pure)

Abstract

The expected high bandwidth of 5G and the envisioned massive number of connected devices will open the door to increased and sophisticated attacks, such as application-layer DDoS attacks. Application-layer DDoS attacks are complex to detect and mitigate due to their stealthy nature and their ability to mimic genuine behavior. In this work, we propose a robust application-layer DDoS self-protection framework that empowers a fully autonomous detection and mitigation of the application-layer DDoS attacks leveraging on Deep Learning (DL) and SDN enablers. The DL models have been proven vulnerable to adversarial attacks, which aim to fool the DL model into taking wrong decisions. To overcome this issue, we build a DL-based application-layer DDoS detection model that is robust to adversarial examples. The performance results show the effectiveness of the proposed framework in protecting against application-layer DDoS attacks even in the presence of adversarial attacks.

Original languageEnglish
Title of host publication2020 IEEE Wireless Communications and Networking Conference, WCNC 2020 - Proceedings
PublisherIEEE
Number of pages6
ISBN (Electronic)9781728131061
DOIs
Publication statusPublished - May 2020
MoE publication typeA4 Conference publication
EventIEEE Wireless Communications and Networking Conference - Seoul, Korea, Republic of
Duration: 25 May 202028 May 2020

Publication series

NameIEEE Wireless Communications and Networking Conference
ISSN (Print)1525-3511
ISSN (Electronic)1558-2612

Conference

ConferenceIEEE Wireless Communications and Networking Conference
Abbreviated titleWCNC
Country/TerritoryKorea, Republic of
CitySeoul
Period25/05/202028/05/2020

Fingerprint

Dive into the research topics of 'Robust Self-Protection Against Application-Layer (D)DoS Attacks in SDN Environment'. Together they form a unique fingerprint.

Cite this