WebTrap: A dynamic defense scheme against economic denial of sustainability attacks
WebTrap: A dynamic defense scheme against economic denial of sustainability attacks
复制标题
WebTrap：针对经济否认可持续性攻击的动态防御方案
DOI：
--
复制
发表时间：
2017
期刊：
影响因子：
--
通讯作者：
Songqing Chen
中科院分区：
文献类型：
--
作者：
Huangxin Wang;Zhonghua Xi;Fei Li;Songqing Chen
由于“按需付费”的云资源收费方案，经济可持续性拒绝（EDoS）攻击一直威胁着云消费者的财务可行性。ddos攻击者可以利用这种定价方案，欺诈性地消耗来自云消费者的可计费云资源，从而推高云消费者的财务成本，并最终破坏其经济可持续性。在本文中，我们提出了一种针对基于web系统的dos攻击的防御方案WebTrap。WebTrap由两个主要组件组成。一方面，它动态地改变/更新web资源地址，使web系统具备移动目标防御能力，使攻击者无法利用web资源。另一方面，WebTrap以实时的方式注入精心设计的陷阱来检测攻击者。陷阱注入过程由基于在线控制的算法指导，以平衡攻击者引入的损害和对良性客户端的潜在副作用，并最大限度地降低总成本。我们通过实验验证了WEBTRAP在不同类型网站下的有效性。评估结果表明，WebTrap在降低云用户所承受的成本方面是有效的，超过80%。
Economic Denial of Sustainability (EDoS) attacks have been threatening cloud consumers' financial viability due to the “pay-as-you-go” cloud resource charging scheme. EDoS attackers can take advantage of this pricing scheme to fraudulently consume the billable cloud resources from the cloud consumers and thus, drive up the cloud consumers' financial cost and eventually disrupt their economic sustainability. In this paper, we propose WebTrap, a defense scheme against EDoS attacks for web-based systems. WebTrap consists of two major components. On one side, it dynamically changes/updates web resource addresses so that the web-based system is equipped with a moving target defense capability to make attackers unable to exploit web resources. On the other side, WebTrap injects carefully-designed traps in a real-time manner to detect attackers. The trap injection process is guided by an online control-based algorithm to balance the damage introduced by the attackers and the potential side-impacts on benign clients and minimize the overall cost. We conduct experiments to validate WEBTRAP's effectiveness under various types of websites. The evaluation results demonstrate that WebTrap is effective, by more than 80%, in reducing the cost suffered by the cloud consumers.
影响因子：
3.7
作者：
Wang, An;Chang, Wentao;Mohaisen, Aziz
通讯作者：
Mohaisen, Aziz