Abstract:Moving Target Defense (MTD) has emerged as a game changer to reverse the asymmetric situation between attackers and defenders, and as one of the most effective countermeasures to mitigate DDoS attacks, shuffling-based MTD has gained ever-growing attention in cyber security. Despite the increased security, frequent shuffles would significantly bring heavy burden to the system. Moreover, most existing work has not adequately considered the impact of MTD techniques on the defender, and especially ignored that on legitimate users. Due to the lack of cost-effective shuffling methods, it is difficult to reach the optimal balance between the performance and overhead associated with the MTD deployment. Building on our preliminary work in this field, we propose a novel cost-effective shuffling method, which involves common users as a trilateral game for strategy generation and resists DDoS attacks with several MTh mechanisms. The novel game model extends our previous work to further describe the interaction among the attacker, the defender and users in detail, and we exploit Multi-Objective Markov Decision Processes to find the optimal MTh strategy by solving the trade-off problem between the effectiveness and cost of shuffling. By designing a trilateral game cost-effective shuffling algorithm, we capture the best MTD strategy and reach a balance between them in a given shuffling scenario. Simulation and experiments on an experimental software-defined network (SDN) indicate that our approach can effectively mitigate DDoS attacks with an acceptable overload, and exhibit better performance than other related and state of the art approaches. (C) 2020 Elsevier Ltd. All rights reserved.

A Game-Theoretical Approach for Mitigating Edge DDoS Attack

Survive and Thrive: A Stochastic Game for DDoS Attacks in Bitcoin Mining Pools

A Game-Theoretical Approach for User Allocation in Edge Computing Environment

Load Balancing for Distributed Intelligent Edge Computing: A State-Based Game Approach.

A task Offloading Approach Based on Risk Assessment to Mitigate Edge DDoS Attacks

Multi-Level Collaborative Defense Strategies Against Malicious Traffic in Wireless Edge Networks

Delay-Optimal Computation Offloading in Large-Scale Multi-Access Edge Computing Using Mean Field Game

Optimal Defense Strategy Model Based on Differential Game in Edge Computing

A Bayesian Q -Learning Game for Dependable Task Offloading Against DDoS Attacks in Sensor Edge Cloud

SecEG: A Secure and Efficient Strategy against DDoS Attacks in Mobile Edge Computing

Cost-effective Moving Target Defense Against DDoS Attacks Using Trilateral Game and Multi-Objective Markov Decision Processes

Optimal DDoS Attack Strategy for Cyber–Physical Systems: A Multiattacker–Defender Game

Joint Resource Allocation and Intrusion Prevention System Deployment for Edge Computing

Optimal DoS Attack Strategy for Cyber-Physical Systems: A Stackelberg Game-Theoretical Approach

D2D-Enabled Mobile-Edge Computation Offloading for Multiuser IoT Network

A Game Theory Based Rate Limiting Scheme Against Distributed Denial-of-Service Attacks

A Deep Reinforcement Learning Based Offloading Game in Edge Computing

Analysis of Multiple Clients' Behaviors in Edge Computing Environment.

Distributed Game-Theoretical D2D-Enabled Task Offloading in Mobile Edge Computing

Energy-Efficient Channel Access and Data Offloading Against Dynamic Jamming Attacks.

AI-Based Mean Field Game Against Resource-Consuming Attacks in Edge Computing.