Bohatei: Flexible and Elastic DDoS Defense
By Seyed Kaveh Fayaz, Yoshiaki Tobioka, Vyas Sekar, Michael Bailey. USENIX Security Symposium, 2015
318 citations recorded by the source corpus.
DDoS defense today relies on expensive and proprietary hardware appliances deployed at fixed locations. This introduces key limitations with respect to flexibility (e.g., complex routing to get traffic to these "chokepoints") and elasticity in handling changing attack patterns. We observe an opportunity to address these limitations using new networking paradigms such as software-defined networking (SDN) and network functions virtualization (NFV). Based on this observation, we design and implement Bohatei, a flexible and elastic DDoS defense system. In designing Bohatei, we address key challenges with respect to scalability, responsiveness, and adversary-resilience. We have implemented defenses for several DDoS attacks using Bohatei. Our evaluations show that Bohatei is scalable (handling 500 Gbps attacks), responsive (mitigating attacks within one minute), and resilient to dynamic adversaries.
Subfields: Artificial Intelligence, Computer Networks and Communications
View Paper: https://www.semanticscholar.org/paper/5ade210263cc57e4e8925b45036a60518ecf7ba5
How researchers see this paper
The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.
In Artificial Intelligence
In Computer Networks and Communications
Citations in the corpus
- A Survey on Emerging SDN and NFV Security Mechanisms for IoT Systems (2019, background): “In this vein, various SDN-based schemes have been defined to face DDoS attacks [126], [127], which can drastically impact IoT system behavior.”