A multi-point collaborative DDoS defense mechanism for IIoT environment

作     者：Hongcheng Huang Peixin Ye Min Hu Jun Wu Hongcheng Huang;Peixin Ye;Min Hu;Jun Wu

作者机构：School of Communication and Information EngineeringChongqing University of Posts and TelecommunicationsChongqing400065China Chongqing Engineering Research Center of Communication SoftwareChongqing400065China 

出 版 物：《Digital Communications and Networks》 (数字通信与网络（英文版）)

年 卷 期：2023年第9卷第2期

页      面：590-601页

核心收录：

学科分类：0810[工学-信息与通信工程] 08[工学] 0839[工学-网络空间安全] 

基　　金：supported by the National Key Research and Development Program of China under Grant 2019YFB2102001. 

主　　题：Industrial internet of things(IIoT) DDoS Deep learning Blockchain Edge computing 

摘      要：Nowadays,a large number of intelligent devices involved in the Industrial Internet of Things(IIoT)environment are posing unprecedented cybersecurity challenges.Due to the limited budget for security protection,the IIoT devices are vulnerable and easily compromised to launch Distributed Denial-of-Service(DDoS)attacks,resulting in disastrous results.Unfortunately,considering the particularity of the IIoT environment,most of the defense solutions in traditional networks cannot be directly applied to IIoT with acceptable security performance.Therefore,in this work,we propose a multi-point collaborative defense mechanism against DDoS attacks for IIoT.Specifically,for the single point DDoS defense,we design an edge-centric mechanism termed EdgeDefense for the detection,identification,classification,and mitigation of DDoS attacks and the generation of defense information.For the practical multi-point scenario,we propose a collaborative defense model against DDoS attacks to securely share the defense information across the network through the blockchain.Besides,a fast defense information sharing mechanism is designed to reduce the delay of defense information sharing and provide a responsive cybersecurity guarantee.The simulation results indicate that the identification and classification performance of the two machine learning models designed for EdgeDefense are better than those of the state-of-the-art baseline models,and therefore EdgeDefense can defend against DDoS attacks effectively.The results also verify that the proposed fast sharing mechanism can reduce the propagation delay of the defense information blocks effectively,thereby improving the responsiveness of the multi-point collaborative DDoS defense.