DDSHP: Um Sistema para a Detecção de DDoS em IoT baseado no Parâmetro de Hurst e SDN

Detalhes bibliográficos
Ano de defesa: 2023
Autor(a) principal: Moraes, Jorge Magno Lopes
Orientador(a): Callado, Arthur de Castro
Banca de defesa: Não Informado pela instituição
Tipo de documento: Dissertação
Tipo de acesso: Acesso aberto
Idioma: por
Instituição de defesa: Não Informado pela instituição
Programa de Pós-Graduação: Não Informado pela instituição
Departamento: Não Informado pela instituição
País: Não Informado pela instituição
Área do conhecimento CNPq:
Link de acesso: http://repositorio.ufc.br/handle/riufc/75221
Resumo: Currently, the Internet of Things (IoT), a paradigm that connects objects to the Internet without human intervention, is constantly growing and increasingly becoming a part of our lives. However, a growing concern with IoT is its security. After all, due to its limited resources (memory, energy, and storage), an IoT network becomes a potential target for various attacks, with Distributed Denial of Service (DDoS) being one of the most common. This attack disrupts IoT services, prevents access by legitimate users, and renders the service unavailable. This unavailability can lead to disastrous consequences. In this scenario, it is necessary to develop solutions that protect IoT from this type of attack. Software-Defined Networking (SDN) is a paradigm that separates data and control planes, ensuring centralized control and a global view of a network. As such, it becomes an attractive concept for securing IoT. Furthermore, with the Hurst Parameter, commonly linked to self-similarity, it is possible to detect DDoS attacks, making it an ideal method for an IoT environment due to its lightweight nature. Therefore, in this work, we propose and present a system called DDoS Detection System based on Hurst Parameter (DDSHP), which is an effort aimed at protecting the IoT network from DDoS attacks by applying SDN to IoT and using the Hurst parameter calculation to detect denial-of-service attacks. Through experiments, we show that this system is capable of detecting denial-of-service attacks with high efficiency in small IoT networks, such as smart homes, and exhibits a quick response time to attacks.
id UFC-7_11bb3e6bc702208d5c748775d1b2c2a3
oai_identifier_str oai:repositorio.ufc.br:riufc/75221
network_acronym_str UFC-7
network_name_str Repositório Institucional da Universidade Federal do Ceará (UFC)
repository_id_str
spelling Moraes, Jorge Magno LopesCallado, Arthur de Castro2023-12-11T13:09:46Z2023-12-11T13:09:46Z2023MORAES, Jorge Magno Lopes. DDSHP: um Sistema para a Detecção de DDoS em IoT baseado no Parâmetro de Hurst e SDN. 2023. 79 f. Dissertação (Mestrado em Ciência da Computação) - Universidade Federal do Ceará, Fortaleza, 2023.http://repositorio.ufc.br/handle/riufc/75221Currently, the Internet of Things (IoT), a paradigm that connects objects to the Internet without human intervention, is constantly growing and increasingly becoming a part of our lives. However, a growing concern with IoT is its security. After all, due to its limited resources (memory, energy, and storage), an IoT network becomes a potential target for various attacks, with Distributed Denial of Service (DDoS) being one of the most common. This attack disrupts IoT services, prevents access by legitimate users, and renders the service unavailable. This unavailability can lead to disastrous consequences. In this scenario, it is necessary to develop solutions that protect IoT from this type of attack. Software-Defined Networking (SDN) is a paradigm that separates data and control planes, ensuring centralized control and a global view of a network. As such, it becomes an attractive concept for securing IoT. Furthermore, with the Hurst Parameter, commonly linked to self-similarity, it is possible to detect DDoS attacks, making it an ideal method for an IoT environment due to its lightweight nature. Therefore, in this work, we propose and present a system called DDoS Detection System based on Hurst Parameter (DDSHP), which is an effort aimed at protecting the IoT network from DDoS attacks by applying SDN to IoT and using the Hurst parameter calculation to detect denial-of-service attacks. Through experiments, we show that this system is capable of detecting denial-of-service attacks with high efficiency in small IoT networks, such as smart homes, and exhibits a quick response time to attacks.Atualmente, a Internet das Coisas (IoT), um paradigma que conecta objetos à Internet sem intervenção humana, cresce e se integra cada vez mais às nossas vidas. No entanto, a segurança da IoT torna-se uma preocupação crescente devido aos seus recursos limitados (memória, energia e armazenamento), tornando-a um alvo potencial para diversos ataques, sendo o Distributed Denial of Service (DDoS) um dos mais comuns. Este tipo de ataque interrompe os serviços da IoT, prejudica o acesso de usuários legítimos e torna o serviço indisponível, podendo resultar em consequências desastrosas. Diante desse cenário, é crucial desenvolver soluções de proteção para a IoT. A Rede Definida por Software (SDN), que separa os planos de dados e de controle, proporcionando controle centralizado e visão global da rede, emerge como uma abordagem atrativa para fortalecer a segurança da IoT. Além disso, o uso do Parâmetro de Hurst, associado à autossimilaridade, possibilita a detecção eficiente de ataques DDoS, sendo um método leve ideal para ambientes de IoT. Neste trabalho, apresentamos o DDoS Detection System based on Hurst Parameter (DDSHP), um sistema que utiliza a SDN na IoT e o cálculo de Hurst do tráfego para detectar ataques de negação de serviço. Experimentos demonstram a eficiência desse sistema em redes IoT pequenas, como casas inteligentes, evidenciando também um tempo de resposta rápido aos ataques.DDSHP: Um Sistema para a Detecção de DDoS em IoT baseado no Parâmetro de Hurst e SDNDDSHP: A System for DDoS Detection in IoT based on Hurst Parameter and SDNinfo:eu-repo/semantics/publishedVersioninfo:eu-repo/semantics/masterThesisIoTSegurançaSDNHurstDDoSIoTSecuritySDNHurstDDoSCNPQ::CIENCIAS EXATAS E DA TERRA::CIENCIA DA COMPUTACAOinfo:eu-repo/semantics/openAccessporreponame:Repositório Institucional da Universidade Federal do Ceará (UFC)instname:Universidade Federal do Ceará (UFC)instacron:UFChttp://lattes.cnpq.br/1411415436939883https://orcid.org/0000-0001-8354-4609http://lattes.cnpq.br/28071070198513222023-12-11ORIGINAL2023_dis_jmlmoraes.pdf2023_dis_jmlmoraes.pdfapplication/pdf1796046http://repositorio.ufc.br/bitstream/riufc/75221/3/2023_dis_jmlmoraes.pdf1e043b1567eb458162cd454ffef47f30MD53LICENSElicense.txtlicense.txttext/plain; charset=utf-81748http://repositorio.ufc.br/bitstream/riufc/75221/4/license.txt8a4605be74aa9ea9d79846c1fba20a33MD54riufc/752212023-12-11 10:11:56.477oai:repositorio.ufc.br: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Repositório InstitucionalPUBhttp://www.repositorio.ufc.br/ri-oai/requestbu@ufc.br || repositorio@ufc.bropendoar:2023-12-11T13:11:56Repositório Institucional da Universidade Federal do Ceará (UFC) - Universidade Federal do Ceará (UFC)false
dc.title.pt_BR.fl_str_mv DDSHP: Um Sistema para a Detecção de DDoS em IoT baseado no Parâmetro de Hurst e SDN
dc.title.en.pt_BR.fl_str_mv DDSHP: A System for DDoS Detection in IoT based on Hurst Parameter and SDN
title DDSHP: Um Sistema para a Detecção de DDoS em IoT baseado no Parâmetro de Hurst e SDN
spellingShingle DDSHP: Um Sistema para a Detecção de DDoS em IoT baseado no Parâmetro de Hurst e SDN
Moraes, Jorge Magno Lopes
CNPQ::CIENCIAS EXATAS E DA TERRA::CIENCIA DA COMPUTACAO
IoT
Segurança
SDN
Hurst
DDoS
IoT
Security
SDN
Hurst
DDoS
title_short DDSHP: Um Sistema para a Detecção de DDoS em IoT baseado no Parâmetro de Hurst e SDN
title_full DDSHP: Um Sistema para a Detecção de DDoS em IoT baseado no Parâmetro de Hurst e SDN
title_fullStr DDSHP: Um Sistema para a Detecção de DDoS em IoT baseado no Parâmetro de Hurst e SDN
title_full_unstemmed DDSHP: Um Sistema para a Detecção de DDoS em IoT baseado no Parâmetro de Hurst e SDN
title_sort DDSHP: Um Sistema para a Detecção de DDoS em IoT baseado no Parâmetro de Hurst e SDN
author Moraes, Jorge Magno Lopes
author_facet Moraes, Jorge Magno Lopes
author_role author
dc.contributor.author.fl_str_mv Moraes, Jorge Magno Lopes
dc.contributor.advisor1.fl_str_mv Callado, Arthur de Castro
contributor_str_mv Callado, Arthur de Castro
dc.subject.cnpq.fl_str_mv CNPQ::CIENCIAS EXATAS E DA TERRA::CIENCIA DA COMPUTACAO
topic CNPQ::CIENCIAS EXATAS E DA TERRA::CIENCIA DA COMPUTACAO
IoT
Segurança
SDN
Hurst
DDoS
IoT
Security
SDN
Hurst
DDoS
dc.subject.ptbr.pt_BR.fl_str_mv IoT
Segurança
SDN
Hurst
DDoS
dc.subject.en.pt_BR.fl_str_mv IoT
Security
SDN
Hurst
DDoS
description Currently, the Internet of Things (IoT), a paradigm that connects objects to the Internet without human intervention, is constantly growing and increasingly becoming a part of our lives. However, a growing concern with IoT is its security. After all, due to its limited resources (memory, energy, and storage), an IoT network becomes a potential target for various attacks, with Distributed Denial of Service (DDoS) being one of the most common. This attack disrupts IoT services, prevents access by legitimate users, and renders the service unavailable. This unavailability can lead to disastrous consequences. In this scenario, it is necessary to develop solutions that protect IoT from this type of attack. Software-Defined Networking (SDN) is a paradigm that separates data and control planes, ensuring centralized control and a global view of a network. As such, it becomes an attractive concept for securing IoT. Furthermore, with the Hurst Parameter, commonly linked to self-similarity, it is possible to detect DDoS attacks, making it an ideal method for an IoT environment due to its lightweight nature. Therefore, in this work, we propose and present a system called DDoS Detection System based on Hurst Parameter (DDSHP), which is an effort aimed at protecting the IoT network from DDoS attacks by applying SDN to IoT and using the Hurst parameter calculation to detect denial-of-service attacks. Through experiments, we show that this system is capable of detecting denial-of-service attacks with high efficiency in small IoT networks, such as smart homes, and exhibits a quick response time to attacks.
publishDate 2023
dc.date.accessioned.fl_str_mv 2023-12-11T13:09:46Z
dc.date.available.fl_str_mv 2023-12-11T13:09:46Z
dc.date.issued.fl_str_mv 2023
dc.type.status.fl_str_mv info:eu-repo/semantics/publishedVersion
dc.type.driver.fl_str_mv info:eu-repo/semantics/masterThesis
format masterThesis
status_str publishedVersion
dc.identifier.citation.fl_str_mv MORAES, Jorge Magno Lopes. DDSHP: um Sistema para a Detecção de DDoS em IoT baseado no Parâmetro de Hurst e SDN. 2023. 79 f. Dissertação (Mestrado em Ciência da Computação) - Universidade Federal do Ceará, Fortaleza, 2023.
dc.identifier.uri.fl_str_mv http://repositorio.ufc.br/handle/riufc/75221
identifier_str_mv MORAES, Jorge Magno Lopes. DDSHP: um Sistema para a Detecção de DDoS em IoT baseado no Parâmetro de Hurst e SDN. 2023. 79 f. Dissertação (Mestrado em Ciência da Computação) - Universidade Federal do Ceará, Fortaleza, 2023.
url http://repositorio.ufc.br/handle/riufc/75221
dc.language.iso.fl_str_mv por
language por
dc.rights.driver.fl_str_mv info:eu-repo/semantics/openAccess
eu_rights_str_mv openAccess
dc.source.none.fl_str_mv reponame:Repositório Institucional da Universidade Federal do Ceará (UFC)
instname:Universidade Federal do Ceará (UFC)
instacron:UFC
instname_str Universidade Federal do Ceará (UFC)
instacron_str UFC
institution UFC
reponame_str Repositório Institucional da Universidade Federal do Ceará (UFC)
collection Repositório Institucional da Universidade Federal do Ceará (UFC)
bitstream.url.fl_str_mv http://repositorio.ufc.br/bitstream/riufc/75221/3/2023_dis_jmlmoraes.pdf
http://repositorio.ufc.br/bitstream/riufc/75221/4/license.txt
bitstream.checksum.fl_str_mv 1e043b1567eb458162cd454ffef47f30
8a4605be74aa9ea9d79846c1fba20a33
bitstream.checksumAlgorithm.fl_str_mv MD5
MD5
repository.name.fl_str_mv Repositório Institucional da Universidade Federal do Ceará (UFC) - Universidade Federal do Ceará (UFC)
repository.mail.fl_str_mv bu@ufc.br || repositorio@ufc.br
_version_ 1847793044965818368