Flexible and Lightweight Mitigation Framework for Distributed Denial-of-Service Attacks in Container-Based Edge Networks Using Kubernetes

Basit Öğe Kaydı
dc.authoridDalveren, Yaser/0000-0002-9459-0042
dc.authoridCatak, Ferhat Ozgur/0000-0002-2434-9966
dc.contributor.authorKoksal, Sarp
dc.contributor.authorCatak, Ferhat Ozgur
dc.contributor.authorDalveren, Yaser
dc.date.accessioned2025-03-20T09:50:48Z
dc.date.available2025-03-20T09:50:48Z
dc.date.issued2024
dc.departmentİzmir Bakırçay Üniversitesi
dc.description.abstractMobile Edge Computing (MEC) has a significant potential to become more prevalent in Fifth Generation (5G) networks, requiring resource management that is lightweight, agile, and dynamic. Container-based virtualization platforms, such as Kubernetes, have emerged as key enablers for MEC environments. However, network security and data privacy remain significant concerns, particularly due to Distributed Denial-of-Service (DDoS) attacks that threaten the massive connectivity of end-devices. This study proposes a defense mechanism to mitigate DDoS attacks in container-based MEC networks using Kubernetes. The mechanism dynamically scales Containerized Network Functions (CNFs) with auto-scaling through an Intrusion Detection and Prevention System (IDPS). The architecture of the proposed mechanism leverages distributed edge clusters and Kubernetes to manage resources and balance the load of IDPS CNFs. Experiments conducted in a real MEC environment using OpenShift and Telco-grade MEC profiles demonstrate the effectiveness of the proposed mechanism against Domain Name System (DNS) flood and Yo-Yo attacks. Results also verify that Kubernetes efficiently meets the lightweight, agile, and dynamic resource management requirements of MEC networks.
dc.identifier.doi10.1109/ACCESS.2024.3501192
dc.identifier.endpage172991
dc.identifier.issn2169-3536
dc.identifier.scopus2-s2.0-85210290226
dc.identifier.scopusqualityQ1
dc.identifier.startpage172980
dc.identifier.urihttps://doi.org/10.1109/ACCESS.2024.3501192
dc.identifier.urihttps://hdl.handle.net/20.500.14034/2323
dc.identifier.volume12
dc.identifier.wosWOS:001362079800012
dc.identifier.wosqualityQ2
dc.indekslendigikaynakWeb of Science
dc.indekslendigikaynakScopus
dc.language.isoen
dc.publisherIeee-Inst Electrical Electronics Engineers Inc
dc.relation.ispartofIeee Access
dc.relation.publicationcategoryMakale - Uluslararası Hakemli Dergi - Kurum Öğretim Elemanı
dc.rightsinfo:eu-repo/semantics/openAccess
dc.snmzKA_WOS_20250319
dc.subjectServers
dc.subjectDenial-of-service attack
dc.subjectCloud computing
dc.subjectComputer crime
dc.subjectResource management
dc.subjectPrevention and mitigation
dc.subjectDynamic scheduling
dc.subjectQuality of service
dc.subjectImage edge detection
dc.subjectComputer architecture
dc.subjectContainerized network functions (CNF)
dc.subjectdistributed denial-of-service (DDoS)
dc.subjectflood
dc.subjectintrusion detection prevention system (IDPS)
dc.subjectKubernetes
dc.subjectmobile edge computing (MEC)
dc.subjectYo-Yo
dc.titleFlexible and Lightweight Mitigation Framework for Distributed Denial-of-Service Attacks in Container-Based Edge Networks Using Kubernetes
dc.typeArticle

Dosyalar

Orijinal paket
Listeleniyor 1 - 1 / 1
Küçük Resim
İsim:
Tam Metin / Full Text
Boyut:
5.15 MB
Biçim:
Adobe Portable Document Format
İndir

Koleksiyon

WoS İndeksli Yayınlar Koleksiyonu
Scopus İndeksli Yayınlar Koleksiyonu