Online orchestration of cooperative defense against DDoS attacks for 5G MEC
Hongjia Li, Liming Wang · 2018
5G mobile edge computing (MEC), which pushes mobile services to the edge, has been recognized as an effective solution to enhance mobile users' quality of service, as well as to tackle the backhaul bottleneck. Although its architecture and service related techniques have drawn sufficient attentions, solutions to the security defense are still open. Therefore, we are motivated to propose a cooperative defense (CODE) framework against DDoS attacks for MEC by leveraging network function virtualization and software-defined networking architectures; in the framework, MEC nodes owning spare defense resource are orchestrated to help MEC nodes whose incoming traffic overwhelms their self-defense capability. To explore the elasticity space of CODE among multiple MEC nodes and develop an online resource management method of such CODE, we formulate the multi-requester multi-provider resource management problem for CODE, jointly considering the defense resource usage efficiency and the fairness of CODE participants. To balance complexity and performance for the formulated problem, we are motivated by online combinatorial auctions, and propose an online algorithm that has a provable performance guarantee. Finally, extending the MEC simulation platform that is used in our previous work, we validate the effectiveness in terms of resilient defense capability, fairness and computation efficiency.