a load balancing algorithm against ddos attacks in … · a load balancing algorithm against ddos...

19
Outline Introduction The proposed Tecnique Conclusion A Load Balancing Algorithm against DDoS Attacks in Beyond 3G Wireless Networks Stefania Zinno , Giovanni Di Stasi, Stefano Avallone, Giorgio Ventre Universit degli Studi di Napoli Federico II Dipartimento di Ingegneria Elettrica e delle Tecnologie dell’Informazione INW 2015 12th Italian Networking Workshop: Cavalese, Italy

Upload: ledien

Post on 18-Jun-2018

219 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: A Load Balancing Algorithm against DDoS Attacks in … · A Load Balancing Algorithm against DDoS Attacks ... Long Term Evolution Network LTE also known as 4G is a Wireless ... Ns-3

Outline Introduction The proposed Tecnique Conclusion

A Load Balancing Algorithmagainst DDoS Attacks

in Beyond 3G Wireless Networks

Stefania Zinno, Giovanni Di Stasi, Stefano Avallone,Giorgio Ventre

Università degli Studi di Napoli Federico IIDipartimento di Ingegneria Elettrica e delle Tecnologie dell’Informazione

INW 201512th Italian Networking Workshop: Cavalese, Italy

Page 2: A Load Balancing Algorithm against DDoS Attacks in … · A Load Balancing Algorithm against DDoS Attacks ... Long Term Evolution Network LTE also known as 4G is a Wireless ... Ns-3

Outline Introduction The proposed Tecnique Conclusion

1 IntroductionFundamentals

2 The proposed TecniqueSimulations

3 ConclusionResults

Page 3: A Load Balancing Algorithm against DDoS Attacks in … · A Load Balancing Algorithm against DDoS Attacks ... Long Term Evolution Network LTE also known as 4G is a Wireless ... Ns-3

Outline Introduction The proposed Tecnique Conclusion

Long Term Evolution Network

LTE also known as 4G is a Wireless Standard developed by3GPP, the 3rd Generation Partnership Project.

- OFDMA- MIMO Techniques- IP-based system- DL 3 Gbps,

UL 1.5 Gbps

Page 4: A Load Balancing Algorithm against DDoS Attacks in … · A Load Balancing Algorithm against DDoS Attacks ... Long Term Evolution Network LTE also known as 4G is a Wireless ... Ns-3

Outline Introduction The proposed Tecnique Conclusion

Denial of Service Attacks

DDoS stands for Distributed Denial of Service. It is a specificDenial of Service attack performed by a multitude ofcompromised systems against a specific target.

- BotMaster- Handler- Agent o Zombie- Victim Host Network

Page 5: A Load Balancing Algorithm against DDoS Attacks in … · A Load Balancing Algorithm against DDoS Attacks ... Long Term Evolution Network LTE also known as 4G is a Wireless ... Ns-3

Outline Introduction The proposed Tecnique Conclusion

Handover Procedure

Handover is supported in LTE networks to ensure servicecontinuity when moving out of the LTE coverage area.

- Network Controlled UEAssisted

- Based on X2 Interface andReceived Signal StrengthIndication

Page 6: A Load Balancing Algorithm against DDoS Attacks in … · A Load Balancing Algorithm against DDoS Attacks ... Long Term Evolution Network LTE also known as 4G is a Wireless ... Ns-3

Outline Introduction The proposed Tecnique Conclusion

Self Organizing Network

Self-organizing networks (SON) are the attempt to simplify andspeed up the planning, configuration, management,optimization and healing of LTE and LTE-Advanced-basednetworks.

Page 7: A Load Balancing Algorithm against DDoS Attacks in … · A Load Balancing Algorithm against DDoS Attacks ... Long Term Evolution Network LTE also known as 4G is a Wireless ... Ns-3

Outline Introduction The proposed Tecnique Conclusion

Load Balancing Procedure in RRC stateCONNECTED

Page 8: A Load Balancing Algorithm against DDoS Attacks in … · A Load Balancing Algorithm against DDoS Attacks ... Long Term Evolution Network LTE also known as 4G is a Wireless ... Ns-3

Outline Introduction The proposed Tecnique Conclusion

Transport Block

Ns3 offers a much more plain MAC model than the 3GPP one.Transport block is equal to a MAC PDU.

Page 9: A Load Balancing Algorithm against DDoS Attacks in … · A Load Balancing Algorithm against DDoS Attacks ... Long Term Evolution Network LTE also known as 4G is a Wireless ... Ns-3

Outline Introduction The proposed Tecnique Conclusion

Load Balancing Tecnique

The Algorithm is:- Distributed- Iterative- Local- Optimized- Perfectly Integrated

in LTE Architecture

Page 10: A Load Balancing Algorithm against DDoS Attacks in … · A Load Balancing Algorithm against DDoS Attacks ... Long Term Evolution Network LTE also known as 4G is a Wireless ... Ns-3

Outline Introduction The proposed Tecnique Conclusion

eNodeB ControlMessages:

- Late Path Switching- Measurement

Report- Loseless and

Seamless DataCommunication

Page 11: A Load Balancing Algorithm against DDoS Attacks in … · A Load Balancing Algorithm against DDoS Attacks ... Long Term Evolution Network LTE also known as 4G is a Wireless ... Ns-3

Outline Introduction The proposed Tecnique Conclusion

Ns3 Simulation Environment for Networking Research

Ns-3 is a network simulator for Internet systems, targetedprimarily for research and educational use. Ns-3 is freesoftware and is publicly available for research, development,and use.

- Discrete-eventnetwork simulator

- Open Source- Librerie C++

Page 12: A Load Balancing Algorithm against DDoS Attacks in … · A Load Balancing Algorithm against DDoS Attacks ... Long Term Evolution Network LTE also known as 4G is a Wireless ... Ns-3

Outline Introduction The proposed Tecnique Conclusion

Ns3 Module

Two are the main modified classes:

- lte-enb-rrc.h- epc-x2-sap.h

Page 13: A Load Balancing Algorithm against DDoS Attacks in … · A Load Balancing Algorithm against DDoS Attacks ... Long Term Evolution Network LTE also known as 4G is a Wireless ... Ns-3

Outline Introduction The proposed Tecnique Conclusion

Callback Ns3

At execution time all information regarding all TB scheduled arecollected by each eNodeB through a DL transmission statisticscallback

Page 14: A Load Balancing Algorithm against DDoS Attacks in … · A Load Balancing Algorithm against DDoS Attacks ... Long Term Evolution Network LTE also known as 4G is a Wireless ... Ns-3

Outline Introduction The proposed Tecnique Conclusion

Implementation Details

Page 15: A Load Balancing Algorithm against DDoS Attacks in … · A Load Balancing Algorithm against DDoS Attacks ... Long Term Evolution Network LTE also known as 4G is a Wireless ... Ns-3

Outline Introduction The proposed Tecnique Conclusion

Scenario Set Up

eNodeB: ConstantPosition Mobility ModelUE: Constant VelocityMobility Model constantspeed of 20 m/s.

Multimedia Users:- Non Guaranteed Bit Rate

VIDEO TCP PREMIUM- Non Guaranteed Bit Rate

VIDEO TCP DEFAULT- Guaranteed Bit Rate NON

CONVersational VIDEOVoice Users:

- Tre Guaranteed Bit RateCONVersational VOICE

Page 16: A Load Balancing Algorithm against DDoS Attacks in … · A Load Balancing Algorithm against DDoS Attacks ... Long Term Evolution Network LTE also known as 4G is a Wireless ... Ns-3

Outline Introduction The proposed Tecnique Conclusion

Scenario:Network Topology and Packet Traffic

Page 17: A Load Balancing Algorithm against DDoS Attacks in … · A Load Balancing Algorithm against DDoS Attacks ... Long Term Evolution Network LTE also known as 4G is a Wireless ... Ns-3

Outline Introduction The proposed Tecnique Conclusion

Scenario:Ten attacked eNodeB

Page 18: A Load Balancing Algorithm against DDoS Attacks in … · A Load Balancing Algorithm against DDoS Attacks ... Long Term Evolution Network LTE also known as 4G is a Wireless ... Ns-3

Outline Introduction The proposed Tecnique Conclusion

Results

- More efficiency achieved in resource distribution- Traffic flows and network performances are increased- Perfectly integrated with LTE Modules- No backup infrastructure needed

Page 19: A Load Balancing Algorithm against DDoS Attacks in … · A Load Balancing Algorithm against DDoS Attacks ... Long Term Evolution Network LTE also known as 4G is a Wireless ... Ns-3

Outline Introduction The proposed Tecnique Conclusion