DDoS attack mitigation and resource provisioning in cloud using fog computing

摘要

Security and reliability are essential in cloud computing environment. Researchers are exploring all features of cloud from scheduling policies, cloud network architecture, virtualization, I/O efficiency, hypervisor performance scalability, data confidentiality and data integrity of data oriented applications. Therefore, the need to secure cloud has become inevitable. Nowadays, one of the biggest challenges faced by cloud users and cloud service providers is DDoS attack. Distributed denial-of-service attack [3] compromises the availability of the system services. In the cloud, DDoS attacks target the services offered by the cloud, reducing their ability to provide optimal use of the network resources. Furthermore, this resource exhaustion by illegitimate traffic results in large billing for customers for the services they never used also known as EDoS (Economic Denial of Sustainability) attack. Fog computing [6] is an intermediate layer between cloud and users. It is similar to the cloud and can provide services like computation, data, networking, and storage between end users and cloud servers and hence fog can provide defense against DDoS even before it reaches the cloud. Therefore, saving cloud resources and providing faster response time. This paper proposes a framework for DDoS attack detection and efficient resource provisioning in a cloud environment with the help of Fog computing by using an efficient algorithm to service cloud request effectively by intermediate fog servers. Hence, provide quick response time and efficient utilization of resources.