A Distributed Collaborative Entrance Defense Framework Against DDoS Attacks on Satellite Internet

【Author】 Guo, Wei; Xu, Jin; Pei, Yukui; Yin, Liuguo; Jiang, Chunxiao; Ge, Ning

【Source】IEEE INTERNET OF THINGS JOURNAL

【影响因子】10.238

【Abstract】Satellite Internet (SI) dramatically expanded the ground-based Internet, and it is also the future direction of 6G. However, due to limited computing power and bandwidth resources, Distributed Denial-of-Service (DDoS) attacks can cause more severe damage to SI, and even paralysis of the entire network. Current DDoS defense mechanisms are built on abundant computing power and bandwidth resources, making applying in the SI scenario challenging. Aiming at protecting SI from DDoS attacks, a blockchain-based distributed collaborative entrance defense (DCED) framework is proposed, in which network traffic characteristics can be recorded and aggregated at the entrances of SI. The proposed framework consists of a distributed detection digesting procedure, a digest virtual aggregation procedure, and an entrance control strategy. The former procedure detects and extracts multidimensional characteristics of DDoS attacks and pushes them onto the blockchain. The latter procedure collects block data and aggregates attack features using the MapReduce algorithm and then compares them with baseline and gives an alert. The strategy completes the filtering and interception of traffic. Experiments use the IXIA platform to generate malicious traffic, and results show that the framework can accurately identify attack traffic within 1500 ms, reaching an area of 0.99 under the receiver operating characteristic curve. The proposed framework is more effective than other similar DDoS methods, protecting the precious SI bandwidth resources.

【Keywords】Denial-of-service attack; Computer crime; Internet; Satellites; Feature extraction; Blockchains; Servers; Blockchain; distributed Denial-of-Service (DDoS) detection; MapReduce; satellite Internet (SI)

【发表时间】2022 44805

【收录时间】2022-09-15

【文献类型】理论模型

【主题类别】

区块链技术-协同技术-6G