Cloud computing technology provides flexibility to Cloud Service Provider (CSP) for providing the cloud resources based on the users' requirements. In on‐demand pricing model, the attackers exploit this feature and cause unwanted scaling‐up of the cloud resources without any intent to pay for them. The associated cost for the unpaid malicious usage burdens the CSP, and over a long period, economic losses occur at the CSP end. Thus, the resources and services offered by the CSP become unsustainable, and the attack is termed as Economic Denial‐of‐Sustainability (EDoS) attack. The existing defense approaches for EDoS attacks are reactive. Thus, the associated attack detection/mitigation cost is high; consequently, the approaches are not suitable for the Small and Medium Enterprises (SMEs). The aim of this paper is to detect and mitigate, internal and external, stealthy EDoS attacks proactively. The attack is detected using average CPU utilization threshold and utility function (in terms of cost for the utilized cloud computing resources) and mitigated using virtual firewalls. Amazon Elastic Compute Cloud (Amazon EC2) is used to evaluate the performance of the proposed approach. The proposed approach accurately detects the EDoS attack and mitigates its effect as well with reduced cost. It is observed that the approach provides competitive response time, victim service downtime, and attack reporting time. Thus, the overall performance is improved.

中文翻译：

---

云环境下隐身ESS攻击的主动防御方法

云计算技术为云服务提供商（CSP）提供了灵活性，可根据用户需求提供云资源。在按需定价模型中，攻击者利用此功能并导致不必要地扩大云资源的规模，而无意为此付费。未付费恶意使用的相关成本使CSP负担重，并且长期以来，在CSP端会发生经济损失。因此，CSP提供的资源和服务变得不可持续，这种攻击被称为“经济拒绝可持续性”（ESS）攻击。现有的ESS攻击防御方法是被动的。因此，相关的攻击检测/缓解成本很高。因此，这些方法不适用于中小型企业（SME）。本文的目的是发现并缓解，内部和外部隐身的ESS攻击。使用平均CPU使用率阈值和实用程序功能（根据所利用的云计算资源的成本）检测攻击，并使用虚拟防火墙缓解攻击。Amazon Elastic Compute Cloud（Amazon EC2）用于评估建议方法的性能。所提出的方法可以准确地检测esS攻击并减轻其影响，同时降低成本。可以看出，该方法可提供竞争响应时间，受害者服务停机时间和攻击报告时间。因此，改善了整体性能。Amazon Elastic Compute Cloud（Amazon EC2）用于评估建议方法的性能。所提出的方法可以准确地检测esS攻击并减轻其影响，同时降低成本。可以看出，该方法可提供竞争响应时间，受害者服务停机时间和攻击报告时间。因此，改善了整体性能。Amazon Elastic Compute Cloud（Amazon EC2）用于评估建议方法的性能。所提出的方法可以准确地检测esS攻击并减轻其影响，同时降低成本。可以看出，该方法可提供竞争响应时间，受害者服务停机时间和攻击报告时间。因此，改善了整体性能。