Device-Cloud Collaborative DDoS Resistance for QoS-Sensitive Mobile Applications: A Seamlessly Shuffle-based Moving Target Defense Approach
Lin Yan, Zan Zhou, Shujie Yang, Changqiao Xu · 2024
DDoS attacks pose a fundamental security consideration for any application. With the rapid development of technology, highly QoS-sensitive and rich interaction mobile applications have occupied a great portion of current network traffic. However, owing to their inherent compatibility defects, current shuffle-based solutions fail to accommodate the urgent needs of QoS-sensitive applications, as the defenders require either nonnegligible service interruption or obligatory system modification. Therefore, we propose a feasible DDoS defense solution called RINP, which can be seamlessly integrated with existing applications through its innovative overlay-based wrap mechanism and isolated sidecar implementation. What’s more, we mathematically analyse the communication efficiency and false positive rate of RINP, which provides theoretical foundation for further adaptive defense strategy generation. Last but not least, to demonstrate the superiority of the RINP demo, we conduct a series of experiments in real-world WAN scenarios. The experimental results with Iperf3 (both TCP/UDP modes) show that our compatible defense solution can jointly provide great service continuity and maintain high-quality QoS. To the best of our knowledge, this is the first user-imperceptible and nonintrusive device-cloud collaborative defense solution for QoS-sensitive mobile applications. The source code can be found at https://github.com/bupt-narc/rinp.