Distributed denial‐of‐service attack mitigation in network functions virtualization‐based 5G networks using management and orchestration,International Journal of Communication Systems

当前位置： X-MOL 学术 › Int. J. Commun. Syst. › 论文详情

Our official English website, www.x-mol.net, welcomes your feedback! (Note: you will need to create a separate account there.)

Distributed denial‐of‐service attack mitigation in network functions virtualization‐based 5G networks using management and orchestration
International Journal of Communication Systems ( IF 1.7 ) Pub Date : 2021-04-14 , DOI: 10.1002/dac.4825
Sarp Köksal _{1,

2} , Yaser Dalveren ₃ , Bamoye Maiga ₁ , Ali Kara _{1,

4}

Affiliation

The fifth generation (5G) technology is expected to allow connectivity to billions of devices, known as Internet of Things (IoT). However, IoT devices will inevitably be the main target of various cyberattack types. The most common one is known as distributed denial‐of‐service (DDoS) attack. In order to mitigate such attacks, network functions virtualization (NFV) has a great potential to provide the benefit of elasticity and low‐cost solutions for protecting 5G networks. In this context, this study proposes a new mechanism developed to mitigate DDoS attacks in 5G NFV networks. The proposed mechanism utilizes intrusion prevention system's (IPS) virtual machines (VMs) to intercept the queries. Based on the volume of DDoS traffic, IPS's VMs are dynamically deployed by means of management and orchestration (MANO) in order to balance the load. To evaluate the effectiveness of the mechanism, experiments are conducted in a real 5G NFV environment built by using 5G NFV environment tools. To our best knowledge, this is the first time that NFV‐based mechanism is experimentally tested in a real 5G NFV environment for mitigating DDoS attacks in 5G networks. The experimental results verify that the proposed mechanism can mitigate DDoS attacks effectively.

中文翻译：

使用管理和编排减轻基于网络功能的基于虚拟化的5G网络中的分布式拒绝服务攻击

预计第五代（5G）技术将允许连接到数十亿个称为物联网（IoT）的设备。但是，物联网设备将不可避免地成为各种网络攻击类型的主要目标。最常见的一种称为分布式拒绝服务（DDoS）攻击。为了缓解此类攻击，网络功能虚拟化（NFV）具有巨大的潜力，可提供弹性和低成本解决方案的优势来保护5G网络。在此背景下，本研究提出了一种新的机制，旨在缓解5G NFV网络中的DDoS攻击。所提出的机制利用入侵防御系统（IPS）虚拟机（VM）来拦截查询。根据DDoS流量的大小，可以通过管理和编排（MANO）来动态部署IPS的VM，以平衡负载。为了评估该机制的有效性，在使用5G NFV环境工具构建的真实5G NFV环境中进行了实验。据我们所知，这是首次在真实的5G NFV环境中对基于NFV的机制进行实验性测试，以缓解5G网络中的DDoS攻击。实验结果证明，该机制能够有效缓解DDoS攻击。

更新日期：2021-05-04

点击分享查看原文

点击收藏

阅读更多本刊最新论文本刊介绍/投稿指南11