HostWatcher: Protecting hosts in cloud data centers through software-defined networking

Yuan, B; Zou, D; Jin, H; Yu, S; Yang, LT

HostWatcher: Protecting hosts in cloud data centers through software-defined networking

Yuan, B Zou, D Jin, H Yu, S

Yang, LT

Permalink

Publisher:: ELSEVIER
Publication Type:: Journal Article
Citation:: Future Generation Computer Systems, 2020, 105, pp. 964-972
Issue Date:: 2020-04-01

Closed Access

	Filename	Description	Size
	1-s2.0-S0167739X17306477-main.pdf	Published version	1.1 MB	Adobe PDF	View/Open

Copyright Clearance Process

Recently Added
In Progress
Closed Access

This item is closed access and not available.

Full metadata record

Field	Value	Language
dc.contributor.author	Yuan, B
dc.contributor.author	Zou, D
dc.contributor.author	Jin, H
dc.contributor.author	Yu, S https://orcid.org/0000-0003-4485-6743
dc.contributor.author	Yang, LT
dc.date.accessioned	2021-03-30T03:56:11Z
dc.date.available	2021-03-30T03:56:11Z
dc.date.issued	2020-04-01
dc.identifier.citation	Future Generation Computer Systems, 2020, 105, pp. 964-972
dc.identifier.issn	0167-739X
dc.identifier.issn	1872-7115
dc.identifier.uri	http://hdl.handle.net/10453/147655
dc.description.abstract	© 2017 Elsevier B.V. Cloud has become a dominant computing platform, and cloud data centers have been widely deployed all over the world. Naturally, cloud data centers become the targets of cyber attacks due to the feature of publicity. In addition, the price of renting resources from cloud constantly gets cheaper and cheaper. Therefore, attackers can rent hosts from cloud data centers to initiate attacks with rather low cost. As a result, hosts in a cloud center could be either victims or attackers. However, most existing researches only treat the hosts as the targets or the sources of attacks, either protecting the hosts from being attacked or identifying the malicious hosts, which is insufficient to protect the cloud data centers comprehensively. In this paper, we hire the novel techniques of SDN to protect the cloud data centers in both directions. Aiming at mitigating DDoS attacks, we propose HostWatcher, a system that watches and protects every host in cloud data center. HostWatcher leverages the advantages of SDN techniques and distributed processing. Caching and round-robin-resending scheme is introduced to the proposed system. Our goal is to protect the hosts comprehensively with QoS guarantee. The extensive experiments show that HostWatcher can effectively mitigate the DDoS attacks that target the hosts. Meanwhile, HostWatcher can also significantly limit the packet rate of hosts that are controlled by attackers. Also, the comprehensive evaluations show that the overheads of our system are trivial, and that our system is practical to implement and deploy in the cloud data centers.
dc.language	English
dc.publisher	ELSEVIER
dc.relation.ispartof	Future Generation Computer Systems
dc.relation.isbasedon	10.1016/j.future.2017.04.023
dc.rights	info:eu-repo/semantics/closedAccess
dc.subject	0803 Computer Software, 0805 Distributed Computing, 0806 Information Systems
dc.subject.classification	Distributed Computing
dc.title	HostWatcher: Protecting hosts in cloud data centers through software-defined networking
dc.type	Journal Article
utslib.citation.volume	105
utslib.for	0803 Computer Software
utslib.for	0805 Distributed Computing
utslib.for	0806 Information Systems
utslib.for	0803 Computer Software
utslib.for	0805 Distributed Computing
utslib.for	0806 Information Systems
pubs.organisational-group	/University of Technology Sydney
pubs.organisational-group	/University of Technology Sydney/Faculty of Engineering and Information Technology
utslib.copyright.status	closed_access	*
dc.date.updated	2021-03-30T03:56:10Z
pubs.publication-status	Published
pubs.volume	105

Abstract:

© 2017 Elsevier B.V. Cloud has become a dominant computing platform, and cloud data centers have been widely deployed all over the world. Naturally, cloud data centers become the targets of cyber attacks due to the feature of publicity. In addition, the price of renting resources from cloud constantly gets cheaper and cheaper. Therefore, attackers can rent hosts from cloud data centers to initiate attacks with rather low cost. As a result, hosts in a cloud center could be either victims or attackers. However, most existing researches only treat the hosts as the targets or the sources of attacks, either protecting the hosts from being attacked or identifying the malicious hosts, which is insufficient to protect the cloud data centers comprehensively. In this paper, we hire the novel techniques of SDN to protect the cloud data centers in both directions. Aiming at mitigating DDoS attacks, we propose HostWatcher, a system that watches and protects every host in cloud data center. HostWatcher leverages the advantages of SDN techniques and distributed processing. Caching and round-robin-resending scheme is introduced to the proposed system. Our goal is to protect the hosts comprehensively with QoS guarantee. The extensive experiments show that HostWatcher can effectively mitigate the DDoS attacks that target the hosts. Meanwhile, HostWatcher can also significantly limit the packet rate of hosts that are controlled by attackers. Also, the comprehensive evaluations show that the overheads of our system are trivial, and that our system is practical to implement and deploy in the cloud data centers.

Please use this identifier to cite or link to this item:

http://hdl.handle.net/10453/147655