arrow
返回

Securing the cloud-assisted smart grid

delete2018-12-01
delete10
PRE
AI
K
Kubilay Demır *
H
Hatem Ismail
V
Vateua-Guroua, Tsuetoslaua
N
Neeraj Suri
DOI:10.1016/j.ijcip.2018.08.004delete
delete原文链接
delete分享
delete收藏
摘要

摘要

En 中文
Rapid elasticity, ubiquitous network access, and highly-reliable services are some of the desirable features of cloud computing that are attractive for building cloud-assisted data-intensive Smart Grid (SG) applications. However, the Distributed Denial-of-Service (DDoS) attacks represent a serious threat to the cloud-assisted SG applications. To mitigate the risk related to the DDoS threat, we propose an SG-relevant Hierarchical Hybrid Cloud-Extension Concept (HHCEC) along with a DDoS attack defense mechanism, termed as Port Hopping Spread Spectrum (PHSS). HHCEC is a cloud-assisted architecture designed to meet scalability and security requirements of the SG applications in the cloud. To prevent transport or application-layer DDoS attacks on HHCEC, PHSS switches the open port of server as afunction of time and a secret shared between authorized clients and server, and thus efficiently dropping packets with closed port number. In addition, PHSS spreads the data packets over all the servers versus a single server to provide a robust protection against volume-based DDoS attacks that would affect some of the servers. This packet spreading approach enables PHSS to instantiate replica servers to take over the attacked servers without blocking the whole traffic by utilizing the rapid-elasticity characteristic of the cloud. Moreover, PHSS leverages a shuffling-based containment mechanism in order to quarantine malicious clients in a notably short time. Accordingly, the effect of a DDoS attack based on the compromised secret of the malicious clients is minimized. We evaluate our approach by building a proof-of-concept prototype using Amazon's EC2 and the PlanetLab test-bed. In a DDoS attack scenario, the proposed approach obtains a significant availability enhancement of > 38% that highlight its efficiency in comparison to existing approaches. The results also indicate negligible overhead for the proposed approach compared to the plain system i.e., no additional latency and less than 0.01% throughput degradation. (C) 2018 Published by Elsevier B.V.
Keyword:
Availability
Security
Cloud
DDoS attack
Smart Grid
AI总结

AI总结

对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。

期刊

International Journal of Critical Infrastructure Protection 封面图
International Journal of Critical Infrastructure Protection
IF:
5.3
论文数:
629
被引数:
1.3K

机构

T
Technical University of Darmstadt
学者数:
1.3W
论文数: 10.0K
被引数: 1.2W
引用论文

引用论文

Antibacterial activity of resazurin-based compounds against Neisseria gonorrhoeae in vitro and in vivo
err2016-10-01
err0
errOAAI
errDeanna M. Schmitt; Kristie L. Connolly; Ann E. Jerse; Melinda S. Detrick; Joseph Horzempa
err分享
err收藏
Hybrid n-GaN and polymer interfaces: Model systems for tunable photodiodes
err2013-11-01
err0
PREAI
errPrashant Kumar; S. Guha; F. Shahedipour-Sandvik; K.S. Narayan
err分享
err收藏
STONE: A streaming DDoS defense frameworkSTONE: 一个流式DDoS防御框架
err2015-12-01
err30
PREAI
errGulisano, Vincenzo; Callau-Zori, Mar; Fu, Zhang; Jimenez-Peris, Ricardo; Papatriantafilou, Marina; Patino-Martinez, Marta
err分享
err收藏
Population Distribution, Settlement Patterns and Accessibility across Africa in 2010
err2012-02-21
err0
errOAAI
errCatherine Linard; Marius Gilbert; Robert W. Snow; Abdisalan M. Noor; Andrew J. Tatem
err分享
err收藏
Wide-Area Frequency Monitoring Network (FNET) Architecture and Applications
err2010-09-01
err274
PREAI
errZhang, Yingchen; Markham, Penn; Xia, Tao; Chen, Lang; Ye, Yanzhu; Wu, Zhongyu; Yuan, Zhiyong; Wang, Lei; Bank, Jason; Burgett, Jon; Conners, Richard W.; Liu, Yilu
err分享
err收藏
An information-centric energy infrastructure: The Berkeley view以信息为中心的能源基础架构: 伯克利观点
err2011-03-01
err83
PREAI
errKatz, Randy H.; Culler, David E.; Sanders, Seth; Alspaugh, Sara; Chen, Yanpei; Dawson-Haggerty, Stephen; Dutta, Prabal; He, Mike; Jiang, Xiaofan; Keys, Laura; Krioukov, Andrew; Lutz, Ken; Ortiz, Jorge; Mohan, Prashanth; Reutzel, Evan; Taneja, Jay; Hsu, Jeff; Shankar, Sushant
err分享
err收藏
学者 查看更多内容