Abstract:Distributed Denial of Service (DDoS) attacks is always one of the major problems for service providers. Using blockchain to detect DDoS attacks is one of the current popular methods. However, the problems of high time overhead and cost exist in the most of the blockchain methods for detecting DDoS attacks. This paper proposes a blockchain-based collaborative detection method for DDoS attacks. First, the trained DDoS attack detection model is encrypted by the Intel Software Guard Extensions (SGX), which provides high security for uploading the DDoS attack detection model to the blockchain. Secondly, the service provider uploads the encrypted model to Inter Planetary File System (IPFS) and then a corresponding Content-ID (CID) is generated by IPFS which greatly saves the cost of uploading encrypted models to the blockchain. In addition, due to the small amount of model data, the time cost of uploading the DDoS attack detection model is greatly reduced. Finally, through the blockchain and smart contracts, the CID is distributed to other service providers, who can use the CID to download the corresponding DDoS attack detection model from IPFS. Blockchain provides a decentralized, trusted and tamper-proof environment for service providers. Besides, smart contracts and IPFS greatly improve the distribution efficiency of the model, while the distribution of CID greatly improves the efficiency of the transmission on the blockchain. In this way, the purpose of collaborative detection can be achieved, and the time cost of transmission on blockchain and IPFS can be considerably saved. We designed a blockchain-based DDoS attack collaborative detection framework to improve the data transmission efficiency on the blockchain, and use IPFS to greatly reduce the cost of the distribution model. In the experiment, compared with most blockchain-based method for DDoS attack detection, the proposed model using blockchain distribution shows the advantages of low cost and latency. The remote authentication mechanism of Intel SGX provides high security and integrity, and ensures the availability of distributed models.

Design of a Blockchain-Based Trust Model for Detecting Cache Poisoning Attakcs in NDN

Decentralized Caching Framework Toward Edge Network Based on Blockchain

Blockchain-Based Cache Poisoning Security Protection and Privacy-Aware Access Control in NDN Vehicular Edge Computing Networks

Exploiting Non-Cooperative Game Against Cache Pollution Attack in Vehicular Content Centric Network

TrustBlock: An adaptive trust evaluation of SDN network nodes based on double-layer blockchain

TI-DNS: A Trusted and Incentive DNS Resolution Architecture based on Blockchain

Proof of Reputation: A Blockchain-based Countermeasure to Defend Against Massive SSDF in Cognitive Radio Networks

A Blockchain-based Key Management Scheme for Named Data Networking

Triangle Area Based Multivariate Correlation Analysis for Detecting and Mitigating Cache Pollution Attacks in Named Data Networking

A Countermeasure Approach for Brute-Force Timing Attacks on Cache Privacy in Named Data Networking Architectures

Elements of Trust in Named-Data Networking

Detection and Defense of Cache Pollution Attacks Using Clustering in Named Data Networks

Securing ICN-Based UAV Ad Hoc Networks with Blockchain.

An anonymous and efficient certificateless signature scheme based on blockchain in NDN‐IoT environments

Defending Against Poisoning Attacks in Federated Learning with Blockchain

Blockchain-Based Trustworthy Edge Caching Scheme for Mobile Cyber-Physical System

Cooperative Detection Method for DDoS Attacks Based on Blockchain

LDBT: A Lightweight DDoS Attack Tracing Scheme Based on Blockchain

SLP: A Secure and Lightweight Scheme Against Content Poisoning Attacks in Named Data Networking Based on Probing

Toward a blockchain-based framework for challenge-based collaborative intrusion detection

Consortium Blockchain-Based Secure Software Defined Vehicular Network