Abstract:Nowadays, a large number of intelligent devices involved in the Industrial Internet of Things (IIoT) environment are posing unprecedented cybersecurity challenges. Due to the limited budget for security protection, the IIoT devices are vulnerable and easily compromised to launch Distributed Denial-of-Service (DDoS) attacks, resulting in disastrous results. Unfortunately, considering the particularity of the IIoT environment, most of the defense solutions in traditional networks cannot be directly applied to IIoT with acceptable security performance. Therefore, in this work, we propose a multi-point collaborative defense mechanism against DDoS attacks for IIoT. Specifically, for the single point DDoS defense, we design an edge-centric mechanism termed EdgeDefense for the detection, identification, classification, and mitigation of DDoS attacks and the generation of defense information. For the practical multi-point scenario, we propose a collaborative defense model against DDoS attacks to securely share the defense information across the network through the blockchain. Besides, a fast defense information sharing mechanism is designed to reduce the delay of defense information sharing and provide a responsive cybersecurity guarantee. The simulation results indicate that the identification and classification performance of the two machine learning models designed for EdgeDefense are better than those of the state-of-the-art baseline models, and therefore EdgeDefense can defend against DDoS attacks effectively. The results also verify that the proposed fast sharing mechanism can reduce the propagation delay of the defense information blocks effectively, thereby improving the responsiveness of the multi-point collaborative DDoS defense.

A DoS Attack Defense Model Adopting Data Mining

Low-rate DoS Attack Detection Method Based on Hybrid Deep Neural Networks.

Survive and Thrive: A Stochastic Game for DDoS Attacks in Bitcoin Mining Pools

Multi-resource Max-Min Fairness and Support Vector Machine Based DDoS Defense

DDoSMiner: an Automated Framework for DDoS Attack Characterization and Vulnerability Mining.

Intelligent DDoS Detection in Botnet Combined with Packet-Level Features under SDN

A Method Based on AMHI for DDoS Attacks Detection and Defense

A DoS attack detection method based on adversarial neural network

DDoS Attack Detection Method Based on Network Abnormal Behavior in Big Data Environment

A New Multistage Approach to Detect Subtle DDoS Attacks.

An Approach of Defending Against DDoS Attack

Group Testing Based Detection of Web Service DDoS Attackers.

A Defense Technique Against DoS/DDoS Attack Based on Bayes Classifier

Forensic Model for DDoS Attack

DDoS Attack Defense in Big Data-oriented Urban Rail Transit Safety Evaluation System

A Machine Learning Approach for DDoS Detection on IoT Devices

SSRDM: semi-supervised real-time DDoS detection mechanism

A METHOD FOR DDoS ATTACKS PREVENTION BASED ON INTERACTION ACTIVITY

Analyzing Miners' Dynamic Equilibrium in Blockchain Networks under DDoS Attacks

A multi-point collaborative DDoS defense mechanism for IIoT environment

Research of Anomaly Detection System Based on Data Mining