Excalibur: A Scalable and Low-Cost Traffic Testing Framework for Evaluating DDoS Defense Solutions - Details

author：

Indexed by：

EI Scopus

Abstract：

To　date,　security　researchers　evaluate　their　solutions　of　mitigating　denial-of-service　(DDoS)　attacks　via　kernel-based　or　kernel-bypassing　testing　tools.　However,　kernel-based　tools　exhibit　poor　scalability　in　attack　traffic　generation　while　kernel-bypassing　tools　result　in　unacceptable　monetary　cost.　We　propose　Excalibur,　a　scalable　and　low-cost　testing　framework　for　DDoS　defense　solutions.　The　key　idea　is　to　leverage　the　programmable　switch　to　perform　testing　tasks　with　Tbps-level　scalability　and　low　cost.　Specifically,　Excalibur　coordinates　both　a　server　and　a　programmable　switch　to　jointly　perform　testing　tasks.　It　realizes　flexible　attack　traffic　generation,　which　requires　a　large　number　of　resources,　in　the　server　while　using　the　switch　to　increase　the　sending　rate　of　attack　traffic　to　Tbps-level.　Our　experiments　on　a　64×100Gbps　Tofino　switch　show　that　Excalibur　achieves　orders-of-magnitude　higher　scalability　and　lower　cost　than　existing　tools.　©　2023　IEEE.

Keyword：

Costs Denial-of-service attack Network security Scalability

Community：

[ 1 ] [Chen, Xiang]Zhejiang University, China
[ 2 ] [Liu, Hongyan]Zhejiang University, China
[ 3 ] [Sun, Tingxin]Fuzhou University, China
[ 4 ] [Huang, Qun]Peking University, China
[ 5 ] [Zhang, Dong]Peking University, China
[ 6 ] [Liu, Xuan]Yangzhou University, China
[ 7 ] [Liu, Xuan]Southeast University, China
[ 8 ] [Zhou, Boyang]Zhejiang Lab, China
[ 9 ] [Zhou, Haifeng]Zhejiang University, China
[ 10 ] [Wu, Chunming]Zhejiang University, China

Reprint 's Address：

Show more details

Version：

Excalibur: A Scalable and Low-Cost Traffic Testing Framework for Evaluating DDoS Defense Solutions
2023，Proceedings - IEEE INFOCOM

Empowering DDoS Attack Mitigation with Programmable Switches
2023，IEEE NETWORK
STOP: A Service Oriented Internet Purification Against Link Flooding Attacks
2022，IEEE TRANSACTIONS ON INFORMATION FORENSICS AND SECURITY
Too Expensive to Attack: Enlarge the Attack Expense through Joint Defense at the Edge
2021，20th IEEE International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2021
Flow Anomaly Telemetry Driven by Programmable Data Plane
2021，2021 IEEE Congress on Cybermatics: 14th IEEE International Conferences on Internet of Things, iThings 2021, 17th IEEE International Conference on Green Computing and Communications, GreenCom 2021, 2021 IEEE International Conference on Cyber Physical and Social Computing, CPSCom 2021 and 7th IEEE International Conference on Smart Data, SmartData 2021

Source ：

ISSN： 0743-166X

Year： 2023

Volume： 2023-May

Language： English

Cited Count：

WoS CC Cited Count：

30 Days PV： 2

Affiliated Colleges：

Get Fulltext

DOI Library Discovery Baidu Scholar Search Engineering Village

Type
Departments

All Years Choose Year From to