Distributed Denial of Service Attacks against Cloud Computing Environment: Survey, Issues, Challenges and Coherent Taxonomy
Source abstract
Abstract
Cloud computing (CC) plays a significant role in revolutionizing the information and communication technology (ICT) industry, allowing flexible delivery of new services and computing resources at a fraction of the costs for end-users than traditional computing. Unfortunately, many potential cyber threats impact CC-deployed services due to the exploitation of CC’s characteristics, such as resource sharing, elasticity, and multi-tenancy. This survey provides a comprehensive discussion on security issues and challenges facing CC for cloud service providers and their users. Furthermore, this survey proposes a new taxonomy for classifying CC attacks, distributed denial of service (DDoS) attacks, and DDoS attack detection approaches on CC. It also provides a qualitative comparison with the existing surveys. Finally, this survey aims to serve as a guide and reference for other researchers working on new DDoS attack detection approaches within the CC environment.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Network Security and Intrusion Detection · Internet Traffic Analysis and Secure E-voting · Advanced Malware Detection Techniques
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
National Advanced IPv6 Centre (NAv6), Universiti Sains Malaysia (USM), Penang 11800, Malaysia
School of Computer Sciences, Universiti Sains Malaysia (USM), Penang 11800, Malaysia
Amity Directorate of Distance & Online Education (ADDOE), IT, Amity University, Noida 201305, Uttar Pradesh, India
Funding
Universiti Sains Malaysia
References (100+)
Show source-provided references
1. New architecture design of cloud computing using software defined networking and network function virtualization technology10.1007/978-3-030-33582-3_66 ↗
2. Impact of coronavirus pandemic crisis on technologies and cloud computing applications10.1016/j.jnlest.2020.100059 ↗
3. Song, S.m., and Yoon, Y.i. (2022, November 30). NIST Cloud Computing Program Overview, Available online: https://www.nist.gov/programs-projects/nist-cloud-computing-program-nccp.
4. Introducing fraudulent energy consumption in cloud infrastructures: A new generation of denial-of-service attacks10.1109/JSYST.2015.2414822 ↗
5. Newmark, E., Brien, A.O., Arend, C., Morris, H.D., Nebuloni, G., Versace, M., and Futurescape, F.D.E.I.D.C. (2022, November 30). IDC FutureScape IDC FutureScape: “Worldwide Cloud 2018 Predictions”. Available online: https://www.sapvirtualagency.com/FileExplorer/Partners/SAPCloudPlatform/esCO/ManageYourBusiness/US42014717_esCO_Final_deliverable.pdf.
6. Kupreev, O., Badovskaya, E., and Gutnikov, A. (2022, November 30). DDoS Attacks in Q1 2020. Available online: https://securelist.com/ddos-attacks-in-q1-2020/96837/.
7. Khandelwal, S. (2022, November 30). 602 Gbps! This May Have Been the Largest DDoS Attack in History. Available online: http://thehackernews.com/2016/01/biggest-ddos-attack.html.
8. Yevsieieva, O., and Helalat, S.M. (2017, January 10–13). Analysis of the impact of the slow HTTP DOS and DDOS attacks on the cloud environment. Proceedings of the 2017 4th International Scientific-Practical Conference Problems of Infocommunications Science and Technology, (PIC S&T), Kharkov, Ukraine.10.1109/INFOCOMMST.2017.8246453 ↗
9. Detection of http flooding ddos attack using hadoop with mapreduce: A survey10.30534/ijatcse/2019/12812019 ↗
10. Singh, P., Manickam, S., and Ul Rehman, S. (2014, January 8–10). A survey of mitigation techniques against Economic Denial of Sustainability (EDoS) attack on cloud computing architecture. Proceedings of the 3rd International Conference on Reliability, Infocom Technologies and Optimization: Trends and Future Directions, Noida, India.10.1109/ICRITO.2014.7014767 ↗
11. Software-defined Networking-based DDoS Defense Mechanisms10.1145/3301614 ↗
12. DDoS attack protection in the era of cloud computing and Software-Defined Networking10.1016/j.comnet.2015.02.026 ↗
13. Bhardwaj, A., Subrahmanyam, G.V., Avasthi, V., Sastry, H., and Goundar, S. (2016, January 3–5). DDoS attacks, new DDoS taxonomy and mitigation solutions—A survey. Proceedings of the International Conference on Signal Processing, Communication, Power and Embedded System, SCOPES, Paralakhemundi, India.10.1109/SCOPES.2016.7955549 ↗
14. Major Vulnerabilities and Their Prevention Methods in Cloud Computing10.1007/978-981-13-1882-5_2 ↗
15. A Technical Feasibility for Adoption of Cloud Computing in King Abdulaziz University, Saudi Arabia
16. Policy based management for security in cloud computing10.1007/978-3-642-22365-5_16 ↗
17. Mathematical Approach as Qualitative Metrics of Distributed Denial of Service Attack Detection Mechanisms10.1109/ACCESS.2021.3110586 ↗
18. The Importance of IDS and IPS in Cloud Computing Environment: Intensive Review and Future Directions10.1007/978-981-33-6835-4_32 ↗
19. Alieyan, K., Kadhum, M.M., Anbar, M., Rehman, S.U., and Alajmi, N.K. (2016, January 19–21). An overview of DDoS attacks based on DNS. Proceedings of the 2016 International Conference on Information and Communication Technology Convergence (ICTC), Jeju, Republic of Korea.10.1109/ICTC.2016.7763485 ↗
20. A Detailed Analysis on Intrusion Identification Mechanism in Cloud Computing and Datasets10.1007/978-981-33-6835-4_37 ↗
21. Distributed Denial of Service Attacks in Cloud Computing
22. Distributed Denial of Service (DDoS) Attacks Detection System for OpenStack-based Private Cloud10.1016/j.procs.2020.03.282 ↗
23. Mousavi, S.M.S., and St-Hilaire, M. (2014). Early Detection of DDoS Attacks in Software Defined Networks Controller. [Ph.D. Thesis, Carleton University].
24. Chaudhari, R.S., and Talmale, G.R. (2019, January 21–22). A review on detection approaches for distributed denial of service attacks. Proceedings of the International Conference on Intelligent Sustainable Systems, (ICISS), Palladam, India.10.1109/ISS1.2019.8908125 ↗
25. Wolf, N. (2022, November 30). DDoS Attack that Disrupted Internet was Largest of Its Kind in History, Experts Say. Available online: https://www.theguardian.com/technology/2016/oct/26/ddos-attack-dyn-mirai-botnet.
26. SoftActivity Team (2022, November 30). 32 Remarkable DDoS Statistics for 2022|SoftActivity. Available online: https://www.softactivity.com/ideas/ddos-statistics/.
27. Detection techniques for DDoS attacks in cloud environment: Review paper10.1007/978-981-13-6031-2_34 ↗
28. Application Layer DDoS Attack Detection Using Cuckoo Search Algorithm-Trained Radial Basis Function10.1109/ACCESS.2022.3182818 ↗
29. Gupta, M., Sommers, J., and Barford, P. (2013, January 16). Fast, accurate simulation for SDN prototyping. Proceedings of the Second ACM SIGCOMM Workshop on Hot Topics in Software Defined Networking—HotSDN ’13, Hong Kong, China.10.1145/2491185.2491202 ↗
30. Alzahrani, S., and Hong, L. (2018, January 2–7). Detection of distributed denial of service (ddos) attacks using artificial intelligence on cloud. Proceedings of the 2018 IEEE World Congress on Services (SERVICES), San Francisco, CA, USA.10.1109/SERVICES.2018.00031 ↗
31. Maghrabi, L.A. (2014, January 18–20). The threats of data security over the Cloud as perceived by experts and university students. Proceedings of the 2014 World Symposium on Computer Applications and Research (WSCAR), Sousse, Tunisia.10.1109/WSCAR.2014.6916842 ↗
32. Uleepp: An ultra-lightweight energy-efficient and privacy-protected scheme for pervasive and mobile WBSN-cloud communications
33. An Efficient Framework for a Third Party Auditor in Cloud Computing Environments10.1093/itnow/bwaa125 ↗
34. Kumar, M.N., Sujatha, P., Kalva, V., Nagori, R., Katukojwala, A.K., and Kumar, M. (2012, January 3–5). Mitigating economic denial of sustainability (EDoS) in cloud computing using in-cloud scrubber service. Proceedings of the 4th International Conference on Computational Intelligence and Communication Networks, CICN 2012, Mathura, India.
35. Darac: DDoS mitigation using DDoS aware resource allocation in cloud
36. Access control for cyber-physical systems interconnected to the cloud10.1016/j.comnet.2018.01.037 ↗
37. Taxonomy of DoS and DDoS attacks and desirable defense mechanism in a Cloud computing environment10.1007/s00521-016-2317-5 ↗
38. Using cloud computing to implement a security overlay network
39. Darwish, M., Ouda, A., and Capretz, L.F. (2013, January 24–26). Cloud-based DDoS attacks and defenses. Proceedings of the International Conference on Information Society, i-Society 2013, Toronto, ON, Canada.
40. Sri, K.S., and Lakshmi, P. (2017, January 11–12). DDoS Attacks, Detection Parameters and Mitigation in Cloud Environment. Proceedings of the National Conference on Recent Advances in Computer Science & Engineering (NCRACSE-2017), Guntur, India.
41. Radware (2022, November 30). DoS Attack: What Is a Denial-of-Service Attack?|DDoSPedia. Available online: https://security.radware.com/ddos-knowledge-center/ddospedia/dos-attack/.
42. Distributed denial of service (DDoS) resilience in cloud: Review and conceptual cloud DDoS mitigation framework10.1016/j.jnca.2016.01.001 ↗
43. Cloud Data Center Selection Using a Modified Differential Evolution
44. Wang, H., Xi, Z., Li, F., and Chen, S. (2016, January 8–9). Abusing public third-party services for EDoS attacks. Proceedings of the 10th USENIX Workshop on Offensive Technologies, WOOT 2016, Austin, TX, USA.
45. Controlled access to cloud resources for mitigating Economic Denial of Sustainability (EDoS) attacks10.1016/j.comnet.2016.01.002 ↗
46. Radware (2022, November 30). BrickerBot: Back with a Vengeance. Available online: https://www.radware.com/security/ddos-threats-attacks/brickerbot-pdos-back-with-vengeance/.
47. Rao Varre, D.N.M., and Bayana, J. (2022, January 27–29). A Secured Botnet Prevention Mechanism for HTTP Flooding Based DDoS Attack. Proceedings of the 2022 3rd International Conference for Emerging Technology, INCET 2022, Belgaum, India.10.1109/INCET54531.2022.9824510 ↗
48. A survey on secure cloud: Security and privacy in cloud computing
49. Wired, and Zetterl, K. (2022, November 30). FBI Defends Disruptive Raids on Texas Data Centers|WIRED. Available online: https://www.wired.com/2009/04/data-centers-ra/.
50. Helpnetsecurity (2022, November 30). USB Killer 2.0: A Harmless-Looking USB Stick that Destroys Computers—Help Net Security. Available online: https://www.helpnetsecurity.com/2015/10/15/usb-killer-20-a-harmless-looking-usb-stick-that-destroys-computers/.
51. Sue, P. (2022, January 22). Types of DDoS Attacks. Available online: https://www.globaldots.com/blog/types-ddos-attacks.
52. Meng, B., Andi, W., Jian, X., and Fucai, Z. (2017, January 21–24). DDOS Attack Detection System Based on Analysis of Users’ Behaviors for Application Layer. Proceedings of the 2017 IEEE International Conference on Computational Science and Engineering and IEEE/IFIP International Conference on Embedded and Ubiquitous Computing, CSE and EUC 2017, Guangzhou, China.10.1109/CSE-EUC.2017.109 ↗
53. Intelligent defense using pretense against targeted attacks in cloud platforms10.1016/j.future.2018.10.004 ↗
54. Paraszczuk, M. (2022, November 30). “Software Reviews, Opinions, and Tips—DNSstuff.” Software Reviews, Opinions, and Tips—DNSstuff. Available online: https://www.dnsstuff.com/network-throughput-bandwidth.
55. The slow http ddos attacks: Detection, mitigation and prevention in the cloud environment
56. (2022, September 16). Low Orbit Ion Cannon (LOIC).SourceForge. Available online: https://sourceforge.net/projects/loic/.
57. (2022, October 22). blackMORE Ops. Free DoS Attack Tools—blackMORE Ops, Available online: https://www.blackmoreops.com/2015/10/21/free-dos-attack-tools/.
58. Packetstormsecurity (2022, November 30). stachel.tgz ≈ Packet Storm. Available online: https://packetstormsecurity.com/distributed/stachel.tgz.
59. (2022, November 30). Packetstormsecurity. Stacheldraht ≈ Packet Storm. Available online: https://packetstormsecurity.com/distributed/page3/.
60. Packetstormsecurity (2022, November 30). mstream.txt ≈ Packet Storm. Available online: https://packetstormsecurity.com/files/17748/mstream.txt.html.
61. Hypr (2022, January 23). Blackenergy. Available online: https://www.hypr.com/security-encyclopedia/blackenergy.
62. Softwaretestinghelp (2022, November 30). 8 Best DDoS Attack Tools (Free DDoS Tool of the Year 2020). Available online: https://www.softwaretestinghelp.com/ddos-attack-tools/.
63. Sourceforge (2022, November 30). DDOSIM—Layer 7 DDoS Simulator Download|SourceForge.net. Available online: https://sourceforge.net/projects/ddosim/.
64. Sourceforge (2022, November 30). PyLoris Download|SourceForge.net. Available online: https://sourceforge.net/projects/pyloris/.
65. Netscout (2022, November 30). ASERT|NETSCOUT. Available online: https://www.netscout.com/asert.
66. Mcafee (2022, November 30). kaiten. Available online: https://www.mcafee.com/enterprise/en-us/threat-center.html.
67. Packetstormsecurity (2022, November 30). knight.c ≈ Packet Storm. Available online: https://packetstormsecurity.com/files/23939/knight.c.html.
68. Packetstormsecurity (2022, October 04). Trinoo.Tgz ≈ Packet Storm. Available online: https://packetstormsecurity.com/files/11215/trinoo.tgz.html.
69. Thebuddyforum (2022, November 30). Trinity—Download Here—V1.6.3.4|The Buddy Forum. Available online: https://www.thebuddyforum.com/threads/trinity-download-here-v1-6-3-4.70841/.
70. Packetstormsecurity (2022, November 30). R-U-Dead-Yet Denial Of Service Tool ≈ Packet Storm. Available online: https://packetstormsecurity.com/files/95882/R-U-Dead-Yet-Denial-Of-Service-Tool.html.
71. Packetstormsecurity (2022, November 30). HOIC, HULK ≈ Packet Storm. Available online: https://packetstormsecurity.com/distributed.
72. MR.Thg (2022, September 30). GitHub—XCHADXFAQ77X/XERXES: XerXes—Most powerful dos tool bY mR.Thg. Available online: https://github.com/XCHADXFAQ77X/XERXES.
73. Entropy (2022, September 30). Tor’s Hammer—Slow POST Denial of Service Testing Tool (2011). Available online: https://packetstormsecurity.com/files/98831/Tors-Hammer-Slow-POST-Denial-Of-Service-Testing-Tool.html.
74. Packetstormsecurity (2022, November 30). DAVOSET 1.2.5 ≈ Packet Storm. Available online: https://packetstormsecurity.com/files/132515/DAVOSET-1.2.5.html.
75. Arbornetworks (2022, November 30). Attack of the Shuriken: Many Hands, Many Weapons|NETSCOUT. Available online: https://asert.arbornetworks.com/ddos-tools/.
76. UFONET (2022, November 30). UFONet—Denial of Service Toolkit. Available online: https://ufonet.03c8.net/.
77. Sourceforge (2022, November 30). NEMESIS—Not Stresfull DDoS Tool Download|SourceForge.net. Available online: https://sourceforge.net/projects/nemesisddos/.
78. Bottomley, L. (2022, August 22). Sask-HTTP, Available online: http://ita.ee.lbl.gov/html/contrib/Sask-HTTP.html.
79. Bottomley, L. (2022, August 20). NASA-HTTP, Available online: http://ita.ee.lbl.gov/html/contrib/NASA-HTTP.html.
80. Bottomley, L. (2022, August 22). ClarkNet-HTTP, Available online: http://ita.ee.lbl.gov/html/contrib/ClarkNet-HTTP.html.
81. Bottomley, L. (2022, August 22). Calgary-HTTP, Available online: http://ita.ee.lbl.gov/html/contrib/Calgary-HTTP.html.
82. Bottomley, L. (2022, July 22). SDSC-HTTP, Available online: http://ita.ee.lbl.gov/html/contrib/SDSC-HTTP.html.
83. Singh, K.J., Thongam, K., and De, T. (2016). Entropy-based application layer DDoS attack detection using artificial neural networks. Entropy, 18.10.3390/e18100350 ↗
84. A workload characterization study of the 1998 world cup web site10.1109/65.844498 ↗
85. MIT (2022, November 30). MIT Lincoln Laboratory: DARPA Intrusion Detection Evaluation. Available online: https://archive.ll.mit.edu/ideval/data/2000/LLS_DDOS_1.0.html.
86. KDD, and UCI (2022, July 30). KDD Cup 1999 Data. Available online: https://archive.ics.uci.edu/ml/datasets/kdd+cup+1999+data.
87. UCLA (2022, October 30). California. Available online: https://lasr.cs.ucla.edu/ddos/traces/.
88. Padmanabhan, V.N., Wang, H.J., Chou, P.A., and Sripanidkulchai, K. (2002, January 12–14). Distributing streaming media content using Cooperative Networking. Proceedings of the International Workshop on Network and Operating System Support for Digital Audio and Video, Miami, FL, USA.10.1145/507670.507695 ↗
89. Jung, J., Krishnamurthy, B., and Rabinovich, M. (2002, January 7–11). Flash crowds and denial of service attacks: Characterization and implications for CDNs and web sites. Proceedings of the 11th International Conference on World Wide Web, WWW ’02, Honolulu, HI, USA.10.1145/511483.511485 ↗
90. Caida (2022, November 30). CAIDA: Passive Dataset. Available online: https://www.caida.org/catalog/datasets/passive_dataset_download/.
91. Net (2022, January 22). WAND Group|WAND. Available online: https://wand.net.nz/wits/.
92. MIT (2022, August 20). DARPA. Available online: https://www.ll.mit.edu/r-d/datasets/1999-darpa-intrusion-detection-evaluation-dataset.
93. Analysis of approaches to internet traffic generation for cyber security research and exercise
94. Fing (2022, November 30). Projects ·GSI/Web-Application-Attacks-Datasets ·GitLab. Available online: https://gitlab.fing.edu.uy/gsi/web-application-attacks-datasets.
95. UCI (2022, November 30). UCI Machine Learning Repository. Available online: http://archive.ics.uci.edu/ml/index.php.
96. ANT (2022, November 30). The ANT Lab: Analysis of Network Traffic. Available online: https://ant.isi.edu/.
97. De Vries, W.B., Heidemann, J., De Schmidt, O.R., De Boer, P.T., Hardaker, W., and Pras, A. (2017, January 1–3). Broad and load-aware anycast mapping with Verfploeter. Proceedings of the ACM SIGCOMM Internet Measurement Conference, IMC, London, UK.10.1145/3131365.3131371 ↗
98. Github (2022, November 30). Booter-black-List/Crawler at Master ·jjsantanna/Booter-black-List ·GitHub. Available online: https://github.com/jjsantanna/Booter-black-List/tree/master/Crawler.
99. The evaluation of Network Anomaly Detection Systems: Statistical analysis of the UNSW-NB15 data set and the comparison with the KDD99 data set
100. Flow-based benchmark data sets for intrusion detection