
Research Article
CPP-Based Cooperative Defense Against DoS Attacks in Future Non-terrestrial Networks
@INPROCEEDINGS{10.1007/978-3-030-67720-6_18, author={Zhaori Cong and Zhilong Zhang and Danpu Liu}, title={CPP-Based Cooperative Defense Against DoS Attacks in Future Non-terrestrial Networks}, proceedings={Communications and Networking. 15th EAI International Conference, ChinaCom 2020, Shanghai, China, November 20-21, 2020, Proceedings}, proceedings_a={CHINACOM}, year={2021}, month={2}, keywords={Client puzzle DoS Attack Non-terrestrial networks Delay}, doi={10.1007/978-3-030-67720-6_18} }
- Zhaori Cong
Zhilong Zhang
Danpu Liu
Year: 2021
CPP-Based Cooperative Defense Against DoS Attacks in Future Non-terrestrial Networks
CHINACOM
Springer
DOI: 10.1007/978-3-030-67720-6_18
Abstract
In future non-terrestrial networks, satellites with sufficient computing resources are expected to serve as base stations or access points, which changes the structure of traditional satellite networks into a more flexible environment. For such satellite nodes, denial of service (DoS) attacks may become a potential secure threat that should be prevented. Existing researches mainly focus on the defense against DoS attacks on ground nodes and have no consideration of the attacks on future satellites. Moreover, the problem of reducing the access delay when a satellite is under DoS attack has not been addressed. In this paper, we study the DoS attack defense strategy in non-terrestrial networks. By adopting client puzzle protocol (CPP) and load balancing, we propose a cooperative defense strategy where multiple auxiliary nodes are used to help the attacked node to process the intensive attack requests. An access delay minimization problem to optimize the selection of auxiliary nodes, puzzle difficulty as well as traffic offload ratios is then formulated based on queuing theory and solved. Simulation results show that the proposed scheme not only improve the network’s anti-attack capability, but also achieves desirable performance in average access delay.