A comprehensive survey on DDoS defense systems: New trends and challenges

Li, Qing1; Huang, He1,2; Li, Ruoyu1,3; Lv, Jianhui1; Yuan, Zhenhui4; Ma, Lianbo5; Han, Yi6; Jiang, Yong1,3

2023-09-01

10.1016/j.comnet.2023.109895

COMPUTER NETWORKS   影响因子和分区

1389-1286

1872-7069

In the past ten years, the source of DDoS has migrated to botnets composed of IoT devices. The scale of DDoS attacks increases dramatically with the number of IoT devices.New variants of DDoS attacks using different system vulnerabilities emerge in an endless stream. In response to this situation, researchers have made significant contributions to the field of DDoS defense by applying modern programmable network technology and network-level resource scheduling management technology. However, the existing review articles need more research on these technologies. After investigating the development trend of DDoS attacks in recent years and the new challenges caused by them, this paper classifies the new technologies that have emerged in the field of DDoS defense in the past ten years. Among them, the collaboration between domains and inter-domain resource scheduling is one of the critical challenges in designing a large-scale distributed DDoS cooperative defense system. In addition, modern programmable network technology has dramatically expanded network systems' functional diversity and deployment flexibility. We will discuss building a defense system based on programmable networks and focus on SOTA defense solutions based on programmable switches. Finally, developing DDoS defense mechanisms with broad-spectrum detection capabilities, robustness against adversarial attacks, and cost-effective and collaborative DDoS defense mechanisms for establishing the Internet are future research directions in network security.

Distributed Denial of Service (DDoS) DDoS defense system Resource scheduling SDN NFV Programmable switch

SCI ; EI

英语

其他

National Key Research and Devel- opment Program of China[2020YFB1804704] ; National Natural Science Foundation of China[61972189] ; Shenzhen Key Lab of Software Defined Networking[ZDSYS20140509172959989]

Computer Science ; Engineering ; Telecommunications

Computer Science, Hardware & Architecture ; Computer Science, Information Systems ; Engineering, Electrical & Electronic ; Telecommunications

WOS:001032245000001

ELSEVIER

20232714353793

Cost effectiveness ; Denial-of-service attack ; Internet of things ; Programmable logic controllers

Data Communication, Equipment and Techniques:722.3 ; Computer Software, Data Handling and Applications:723 ; Control Equipment:732.1 ; Legal Aspects:902.3 ; Industrial Economics:911.2

Web of Science

1.Peng Cheng Lab, Shenzhen, Guangdong, Peoples R China
2.Southern Univ Sci & Technol, Shenzhen, Guangdong, Peoples R China
3.Tsinghua Univ, Shenzhen Int Grad Sch, Shenzhen, Guangdong, Peoples R China
4.Northumbria Univ, Northumberland Rd, Newcastle Upon Tyne, England
5.Northeastern Univ, Coll Software, Shenyang, Peoples R China
6.Wuhan Univ Technol, Sch Informat Engn, 122 Luoshi Rd, Wuhan, Peoples R China

Li, Qing,Huang, He,Li, Ruoyu,et al. A comprehensive survey on DDoS defense systems: New trends and challenges[J]. COMPUTER NETWORKS,2023,233.

Li, Qing.,Huang, He.,Li, Ruoyu.,Lv, Jianhui.,Yuan, Zhenhui.,...&Jiang, Yong.(2023).A comprehensive survey on DDoS defense systems: New trends and challenges.COMPUTER NETWORKS,233.

Li, Qing,et al."A comprehensive survey on DDoS defense systems: New trends and challenges".COMPUTER NETWORKS 233(2023).