title: A Novel Topology Link-Controlling Approach for Active Defense of a Node in a Network.
abstract: With the rapid development of virtual machine technology and cloud computing, distributed denial of service (DDoS) attacks, or some peak traffic, poses a great threat to the security of the network. In this paper, a novel topology link control technique and mitigation attacks in real-time environments is proposed. Firstly, a non-invasive method of deploying virtual sensors in the nodes is built, which uses the resource manager of each monitored node as a sensor. Secondly, a general topology-controlling approach of resisting the tolerant invasion is proposed. In the proposed approach, a prediction model is constructed by using copula functions for predicting the peak of a resource through another resource. The result of prediction determines whether or not to initiate the active defense. Finally, a minority game with incomplete strategy is employed to suppress attack flows and improve the permeability of the normal flows. The simulation results show that the proposed approach is very effective in protecting nodes.
authors.affiliation: School of Automation, Huazhong University of Science and Technology, Wuhan 430070, China. lijun@mail.hbut.edu.cn.|Department of Computer Science, Hubei University of Technology, Wuhan 430070, China. lijun@mail.hbut.edu.cn.
authors.forename: Jun
authors.initials: J
authors.lastname: Li
authors.affiliation: School of Automation, Huazhong University of Science and Technology, Wuhan 430070, China. hphu@mail.hust.edu.cn.
authors.forename: HanPing
authors.initials: H
authors.lastname: Hu
authors.affiliation: Department of Electrical Engineering, University of North Texas, Denton, TX 76203, USA. Qiao.Ke@unt.edu.
authors.forename: Qiao
authors.initials: Q
authors.lastname: Ke
authors.affiliation: Department of Computer Science, Georgia State University, Atlanta, GA 30302, USA. nxiong@coloradotech.edu.
authors.forename: Naixue
authors.initials: N
authors.lastname: Xiong
keywords: copula; link-controlling; minority game; resource protection