Abstract:As IoT technology advances, the smart grid (SG) has become crucial to industrial infrastructure. However, SG faces security challenges, particularly from distributed denial of service (DDoS) attacks, due to inadequate security mechanisms for IoT devices. Moreover, the extensive deployment of SG exposes communication links to attacks, potentially disrupting communications and power supply. Link flooding attacks (LFAs) targeting congested backbone links have increasingly become a focal point of DDoS attacks. To address LFAs, we propose integrating unmanned aerial vehicles (UAVs) into the Smart Grid (SG) to offer a three-dimensional defense perspective. This strategy includes enhancing the speed and accuracy of attack path tracking as well as alleviating communication congestion. Therefore, our new DDoS tracking scheme leverages UAV mobility and employs beam search with adaptive beam width to reconstruct attack paths and pinpoint attack sources. This scheme features a threshold iterative update mechanism that refines the threshold each round based on prior results, improving attack path reconstruction accuracy. An adaptive beam width method evaluates the number of abnormal nodes based on the current threshold, enabling precise tracking of multiple attack paths and enhancing scheme automation. Additionally, our path-checking and merging method optimizes path reconstruction by merging overlapping paths and excluding previously searched nodes, thus avoiding redundant searches and infinite loops. Simulation results on the Keysight Ixia platform demonstrate a 98.89% attack path coverage with a minimal error tracking rate of 2.05%. Furthermore, simulations on the NS-3 platform show that drone integration not only bolsters security but also significantly enhances network performance, with communication effectiveness improving by 88.05% and recovering to 82.70% of normal levels under attack conditions.

Research for DDoS Attacks Defense Based on Autonomous System

Intelligent DDoS Detection in Botnet Combined with Packet-Level Features under SDN

TPDD: A Two-Phase DDoS Detection System in Software-Defined Networking

Multi-resource Max-Min Fairness and Support Vector Machine Based DDoS Defense

A Method Based on AMHI for DDoS Attacks Detection and Defense

A Comprehensive Survey on Ddos Defense Systems: New Trends and Challenges

DDoS Attack Defense in Big Data-oriented Urban Rail Transit Safety Evaluation System

Research on an Effective Approach Against DDoS Attacks

DDoSMiner: an Automated Framework for DDoS Attack Characterization and Vulnerability Mining.

Effective DDoS Mitigation Via ML-Driven In-network Traffic Shaping

DDoS Attack and Defense Scheme in Wireless Ad hoc Networks

Research on Distributed Denial-of-service Attacks:a Survey

STDC: A SDN-Oriented Two-Stage DDoS Detection and Defence System Based on Clustering

SDN-Defend: A Lightweight Online Attack Detection and Mitigation System for DDoS Attacks in SDN

DDoS Attack and Defense: Review of Some Traditional and Current Techniques

A Comprehensive Survey of Distributed Denial of Service Detection and Mitigation Technologies in Software-Defined Network

Overview of DDoS Attack Detection in Software-Defined Networks

Draw Bridge-Software-Defined Ddos-Resistant Traffic Engineering

A Method of DDoS Attack Detection and Mitigation for the Comprehensive Coordinated Protection of SDN Controllers

A systematic review on distributed denial of service attack defense mechanisms in programmable networks

A DDoS Tracking Scheme Utilizing Adaptive Beam Search with Unmanned Aerial Vehicles in Smart Grid