Abstract:Distributed Denial of Service (DDoS) attacks is always one of the major problems for service providers. Using blockchain to detect DDoS attacks is one of the current popular methods. However, the problems of high time overhead and cost exist in the most of the blockchain methods for detecting DDoS attacks. This paper proposes a blockchain-based collaborative detection method for DDoS attacks. First, the trained DDoS attack detection model is encrypted by the Intel Software Guard Extensions (SGX), which provides high security for uploading the DDoS attack detection model to the blockchain. Secondly, the service provider uploads the encrypted model to Inter Planetary File System (IPFS) and then a corresponding Content-ID (CID) is generated by IPFS which greatly saves the cost of uploading encrypted models to the blockchain. In addition, due to the small amount of model data, the time cost of uploading the DDoS attack detection model is greatly reduced. Finally, through the blockchain and smart contracts, the CID is distributed to other service providers, who can use the CID to download the corresponding DDoS attack detection model from IPFS. Blockchain provides a decentralized, trusted and tamper-proof environment for service providers. Besides, smart contracts and IPFS greatly improve the distribution efficiency of the model, while the distribution of CID greatly improves the efficiency of the transmission on the blockchain. In this way, the purpose of collaborative detection can be achieved, and the time cost of transmission on blockchain and IPFS can be considerably saved. We designed a blockchain-based DDoS attack collaborative detection framework to improve the data transmission efficiency on the blockchain, and use IPFS to greatly reduce the cost of the distribution model. In the experiment, compared with most blockchain-based method for DDoS attack detection, the proposed model using blockchain distribution shows the advantages of low cost and latency. The remote authentication mechanism of Intel SGX provides high security and integrity, and ensures the availability of distributed models.

Cedric: A Collaborative DDoS Defense System Using Credit

Risk Assessment and Defense Resource Allocation of Cyber-Physical Distribution Systems under Denial-of-Service Attacks

Effective DDoS Mitigation Via ML-Driven In-network Traffic Shaping

Method Research for Defending Against Distributed Denial-of-Service Attacks Based on Dynamic Game Theory

Data-Based Collaborative Learning for Multiagent Systems under Distributed Denial-of-Service Attacks

A Game-Theoretic Model On Coalitional Attacks In Smart Grid

A method of network attack-defense game and collaborative defense decision-making based on hierarchical multi-agent reinforcement learning

Optimal DDoS Attack Strategy for Cyber–Physical Systems: A Multiattacker–Defender Game

A reputation score policy and Bayesian game theory based incentivized mechanism for DDoS attacks mitigation and cyber defense

Deterrence of Intelligent DDoS Via Multi-Hop Traffic Divergence.

Multi-SDN Based Cooperation Scheme for DDoS Attack Defense

Distinguishing the Master to Defend DDoS Attack in Peer-to-Peer Networks

A multi-point collaborative DDoS defense mechanism for IIoT environment

Cooperative Detection Method for DDoS Attacks Based on Blockchain

DDoS Defense for IoT: A Stackelberg Game Model-Enabled Collaborative Framework

Data-driven Defense Strategies for an Infrastructure Network against Multiple Interdictions

A Distributed Collaborative Entrance Defense Framework Against DDoS Attacks on Satellite Internet

DDoS Defense Method in Software-Defined Space-Air-Ground Network from Dynamic Bayesian Game Perspective

Synchronizing DDoS detection and mitigation based graph learning with programmable data plane, SDN

Defending against distributed denial-of-service attacks with an auction-based method.

Wireless Resource Allocation with Collaborative Distributed and Centralized DRL under Control Channel Attacks