MAINTAINING CLOUD PERFORMANCE UNDER DDOS ATTACKS

Moataz H. Khalil^{1, 2} , Mohamed Azab² , Ashraf Elsayed³ , Walaa Sheta^{1, 2} , Mahmoud Gabr³ and Adel S. Elmaghraby^{1, 2}

¹CECS Department, University of Louisville, Kentucky, USA

²The City of Scientific Research and Technology Applications, Egypt

 ³Department of Mathematics & Computer Science, Faculty of Science, Alexandria University, Alexandria, Egypt

Abstract 

The popularity of cloud computing has been growing where the cloud became an attractive alternative rather than classic information processing system. The distributed denial of service (DDoS) attack is one of the famous attacks to cloud computing. This paper proposes a Multiple Layer Defense (MLD) scheme to detect and mitigate DDoS attacks which due to resource depletion. The MLD consists of two layers. The first layer has an alarm system send alarms to cloud management when DDoS attacks start. The second layer includes an anomaly detection system detects VM is infected by DDoS attacks. Also,MLD tested with a different DDoS attack ratio to show scheme stability. MLD evaluated by The energy consumption and the overall SLA violations. The results show the great effect of the MLD to reduce the energy consumption and the overall SLA violation for all datasets. Also, the MLD shows acceptable stability and reactivity with different DDoS attack ratio. 

Keywords 

Cloud Computing, Energy consumption, Service Level Agreement, DDoS attack, anomaly detection, Availability.

                       

                                                  Full Text