Measuring the Adoption of DDoS Protection Services
Measuring the Adoption of DDoS Protection Services
复制标题
DOI：
10.1145/2987443.2987487
复制
发表时间：
2016-11
期刊：
影响因子：
--
通讯作者：
M. Jonker;A. Sperotto;R. V. Rijswijk-Deij;R. Sadre;A. Pras
中科院分区：
文献类型：
--
作者：
M. Jonker;A. Sperotto;R. V. Rijswijk-Deij;R. Sadre;A. Pras
分布式拒绝服务（DDoS）攻击在过去十年中越来越受欢迎，其强度从仅仅是滋扰到严重。攻击数量的增加，加上目标的收入损失，为DDoS保护服务（DPS）提供商带来了一个市场，受害者可以通过使用流量转移来外包流量清洗。在本文中，我们调查了全球基于云的DPS的采用情况。我们专注于9家领先的供应商。我们对采用的展望是在主动DNS测量的基础上做出的。我们介绍了一种方法，使我们能够为一个给定的域名，以确定是否流量分流到DPS的效果。它还使我们能够区分各种交通分流和保护方法。对于我们的分析，我们使用了一个长期的，大规模的数据集，涵盖了超过50%的全球域名命名空间中的所有名称，在日常快照，在一个为期1.5年。我们的结果显示，DPS的采用率在我们的测量期间增长了1.24倍，与命名空间的整体扩张相比，这是一个突出的趋势。我们的研究还表明，采用通常是由大型网络托管商等大型企业主导的，这些企业可以同时激活或停用数百万个域名的DDoS保护。
Distributed Denial-of-Service (DDoS) attacks have steadily gained in popularity over the last decade, their intensity ranging from mere nuisance to severe. The increased number of attacks, combined with the loss of revenue for the targets, has given rise to a market for DDoS Protection Service (DPS) providers, to whom victims can outsource the cleansing of their traffic by using traffic diversion. In this paper, we investigate the adoption of cloud-based DPSs worldwide. We focus on nine leading providers. Our outlook on adoption is made on the basis of active DNS measurements. We introduce a methodology that allows us, for a given domain name, to determine if traffic diversion to a DPS is in effect. It also allows us to distinguish various methods of traffic diversion and protection. For our analysis we use a long-term, large-scale data set that covers well over 50\% of all names in the global domain namespace, in daily snapshots, over a period of 1.5 years. Our results show that DPS adoption has grown by 1.24x in our measurement period, a prominent trend compared to the overall expansion of the namespace. Our study also reveals that adoption is often lead by big players such as large Web hosters, which activate or deactivate DDoS protection for millions of domain names at once.