A Survey of DDOS Attack Detection Techniques for IoT Systems Using BlockChain Technology

With the emergence of smart devices and the declining market value of sensing systems, the implementation of the internet of things (IoT) is gaining momentum. IoT has become an integral part of many smart systems such as smart buildings, smart cities, and smart heath, etc. Despite many advantages, from its inception, IoT system is vulnerable to many threats. Such systems are more likely to be attacked and breached, by denial of service (DoS) or distributed denial of service (DDoS) attacks. DDoS attacks are one of the Internet security's most disruptive threats. The towering volume of smart devices with a greater level of heterogeneity increases the severity of this attack. To date, there is no protocol that guarantees complete protection of IoT systems. To enable the resiliency, continuous monitoring, along with an adaptive decision-making system, is essential. These challenges can be addressed with the help of software-defined networking (SDN), which can effectively handle the IoT devices. Moreover, the centralized provisioning of SDN enables a secured and adaptive IoT environment that can effectively handle the DDoS attack. The software-defined internet of things (SDIoT) framework based on SDx paradigm consists of a controller pool, SD-IoT switches integrated with 190an IoT gateway, and IoT devices. In this chapter, a broad range of various DDoS attacks and detection methods for the IoT environment used in the SDN paradigm have been analyzed. Finally, different future scopes of this evolving field have been discussed.

The Internet of Things (IoT) is emerging as a new trend mainly employed in developing numerous vital applications. These applications endure on a federal storage framework primarily concerned with multiple issues. Blockchain technology (BC) is one of the supportive methods for developing IoT-based applications. It is employed to solve the problems encountered in IoT applications. The attack Distributed Denial of Service (DDoS) is one of the leading security attacks in IoT systems. Attackers can effortlessly develop the exposures of IoT gadgets and restrain them as fragments of botnets to commence DDoS threats. The IoT devices are said to be resource-constrained with computing resources and restricted memory. As a developing technology, BC holds the possibility of resolving security problems in IoT. This paper proposes the Metaheuristic-Optimized Blockchain Framework for Attack Detection using a Deep Learning Model (MOBCF-ADDLM) method. The main intention of the MOBCF-ADDLM method is to deliver an effective method for detecting DDoS threats in an IoT environment using advanced techniques. The BC technology is initially applied to mitigate DDoS attacks by presenting decentralized security solutions. Furthermore, data preprocessing utilizes the min-max scaling method to convert input data into a beneficial format. Additionally, feature selection (FS) is performed using the Aquila optimizer (AO) technique to recognize the most relevant features from input data. The attack classification process employs the deep belief network (DBN) technique. Finally, the red panda optimizer (RPO) model modifies the hyper-parameter values of the DBN model optimally and results in higher classification performance. A wide range of experiments with the MOBCF-ADDLM approach is performed under the BoT-IoT Binary and Multiclass datasets. The performance validation of the MOBCF-ADDLM approach portrayed a superior accuracy value of 99.22% over existing models.

Internet of Things (IoT) and Distributed Denial of Service (DDoS) is the most growing emergence catchword that has a deep relation to each other. The lack of securities in IoT devices creates a loophole to hijack those devices and use them for a cybercrime. Recently many security breaches on IoT Environment along with high volume attacks have been reported. So, securing the IoT Environment to prevent cyber-attacks like DDoS on crucial infrastructure is the first priority. Moreover, detecting DDoS attacks is also harder as sometimes DDoS attack traffic is alike normal traffic. Here, we tried to describe the long-ranging impact of DDoS attacks on IoT Environment. Some recommended security solutions and guidelines have been proposed to detect and protect IoT devices against DDoS attacks. Thus, the deployment of this security solution will keep the IoT Environment cyber threat free.

The paper aims to provide a summary with a reference to the Internet of Things (IoT) of the distributed denial of service (DDoS). The network research community has known about the denial of service (DoS), which is intended to stop legitimate users from accessing a particular network tool since the early 1980s. The aim of the paper is to define DDoS scope, classifications and opportunities for assailants who use IoT to conduct such operations and to use IoT in healthcare. The research approach is to analyze DDoS, IoT and the use of IoT literature in the health sector. The study found that DDOS attacks on IoT-specific devices have become a very easy phenomenon because network attacks are much simpler due to limited security protocols. IOT distribution companies have made limited efforts to enable security of these devices and protecting the data, thus making them susceptible to vulnerabilities. Due to weak security layers, the confidentiality, authenticity and integrity of private data collected by IoT devices are threatened by attackers. The current research identified the gap and importance for further research to provide a mechanism for detection and prevention of DDOS attack in the application layer of IoT healthcare devices in India. Considering the major challenges in IOTs in defending against external attacks and hacking, it is important that they have inherent frameworks warding off such attacks.

Internet of Things (IoT) security is becoming important with the growing popularity of IoT devices and their wide applications. Recent network security reports revealed a sharp increase in the type, frequency, sophistication, and impact of distributed denial of service (DDoS) attacks on IoT systems, making DDoS one of the most challenging threats. DDoS is used to commit actual, effective, and profitable cybercrimes. The current machine learning-based IoT DDoS attack detection systems use batch learning techniques, and hence are unable to maintain their performance over time in a dynamic environment. The dynamicity of heterogeneous IoT data causes concept drift issues that result in performance degradation and automation difficulties in detecting DDoS. In this study, we propose an adaptive online DDoS attack detection framework that detects and adapts to concept drifts in streaming data using a number of features often used in DDoS attack detection. This paper also proposes a novel accuracy update weighted probability averaging ensemble (AUWPAE) approach to detect concept drift and optimize zero-day DDoS detection. We evaluated the proposed framework using IoTID20 and CICIoT2023 dataset containing benign and DDoS traffic data. The results show that the proposed adaptive online DDoS attack detection framework is able to detect DDoS attacks with an accuracy of 99.54% and 99.33% for the respective datasets.

Fiber optic networks (FONs) are considered the backbone of telecom companies worldwide. However, the network elements of FONs are scattered over a wide area and managed through a centralized controller based on intelligent devices and the internet of things (IoT), with actuators used to perform specific tasks at remote locations. During the COVID-19 pandemic, many telecom companies advised their employees to manage the network using the public internet (e.g., working from home while connected to an IoT network). Theses IoT devices mostly have weak security algorithms that are easily taken-over by hackers, and therefore can generate Distributed Denial of Service (DDoS) attacks in FONs. A DDoS attack is one of the most severe cyberattack types, and can negatively affect the stability and quality of managing networks. Nowadays, software-defined networks (SDN) constitute a new approach that simplifies how the network can be managed through a centralized controller. Moreover, machine learning algorithms allow the detection of incoming malicious traffic with high accuracy. Therefore, combining SDN and ML approaches can lead to detecting and stopping DDoS attacks quickly and efficiently, especially compared to traditional methods. In this paper, we evaluated six ML models: Logistic Regression, K-Nearest Neighbor, Support Vector Machine, Naive Bayes, Decision Tree, and Random Forest. The accuracy reached 100% while detecting DDoS attacks in FON with two approaches: (1) using SVM with three features (SOS, SSIP, and RPF) and (2) using Random Forest with five features (SOS, SSIP, RPF, SDFP, and SDFB). The training time for the first approach was 14.3 s, whereas the second approach only requires 0.18 s; hence, the second approach was utilized for deployment.

With the emergence of smart home, smart city and smart transportation, attackers using Internet of Things (IoTs) devices to launch Distributed Denial of Service (DDoS) attacks on blockchain are also on the rise, making blockchain network become a major disaster area for DDoS attacks. To solve this problem, the paper proposes a DDoS attack defense method based on blockchain for IoTs devices. This method firstly extracts the feature of network traffic of edge nodes, further analyzes the extracted data feature, detects the abnormal behavior of terminal devices, and finally realizes DDoS attack defense by deploying smart contracts in the blockchain network for attack node information and access control strategy. The method can detect abnormal behavior on IoTs device, which is helpful to identify the attack as soon as possible. The synchronization of DDoS attack node information and defense strategy is realized by smart contract, which avoids network congestion of central node and gains time advantage for attack defense.

A distributed denial of service (DDoS) attack represents a major threat to service providers. More specifically, a DDoS attack aims to disrupt and deny services to legitimate users by overwhelming the target with a massive number of malicious requests. A cyberattack of this kind is likely to result in tremendous economic losses for businesses and service providers due to increasing both operating and financial costs. In recent years, machine learning (ML) techniques have been widely used to prevent DDoS attacks. Indeed, many defense systems have been transformed into smart and intelligent systems through the use of ML techniques, which allow them to defeat DDoS attacks. This paper analyzes recent studies concerning DDoS detection methods that have adapted single and hybrid ML approaches in modern networking environments. Additionally, the paper discusses different DDoS defense systems based on ML techniques that make use of a virtualized environment, including cloud computing, software-defined network, and network functions virtualization environments. As the development of the Internet of Things (IoT) has been the subject of significant research attention in recent years, the paper also discusses ML approaches as security solutions against DDoS attacks in IoT environments. Furthermore, the paper recommends a number of directions for future research. This paper is intended to assist the research community with the design and development of effective defense systems capable of overcoming different types of DDoS attacks.

Throughout the past few years, the Internet of Things (IoT) has grown in popularity because of its ease of use and flexibility. Cyber criminals are interested in IoT because it offers a variety of benefits for users, but it still poses many types of threats. The most common form of attack against IoT is Distributed Denial of Service (DDoS). The growth of preventive processes against DDoS attacks has prompted IoT professionals and security experts to focus on this topic. Due to the increasing prevalence of DDoS attacks, some methods for distinguishing different types of DDoS attacks based on individual network features have become hard to implement. Additionally, monitoring traffic pattern changes and detecting DDoS attacks with accuracy are urgent and necessary. In this paper, using Modified Whale Optimization Algorithm (MWOA) feature extraction and Hybrid Long Short Term Memory (LSTM), shown that DDoS attack detection methods can be developed and tested on various datasets. The MWOA technique, which is used to optimize the weights of the LSTM neural network to reduce prediction errors in the hybrid LSTM algorithm, is used. Additionally, MWOA can optimally extract IP packet features and identify DDoS attacks with the support of MWOA-LSTM model. The proposed MWOA-LSTM framework outperforms standard support vector machines (SVM) and Genetic Algorithm (GA) as well as standard methods for detecting attacks based on precision, recall and accuracy measurements.

A smart city refers to an intelligent environment obtained by deploying all available resources and recent technologies in a coordinated and smart manner. Intelligent sensors (Internet of Things (IoT) devices) along with 5G technology working mutually are steadily becoming more pervasive and accomplish users' desires more effectively. Among a variety of IoT use cases, e-voting is a considerable application of IoT that relegates it to the next phase in the growth of technologies related to smart cities. In conventional applications, all the devices are often assumed to be cooperative and trusted. However, in practice, devices may be disrupted by the intruders to behave maliciously with the aim of degradation of the network services. Therefore, the privacy and security flaws in the e-voting systems in particular lead to a huge problem where intruders may perform a number of frauds for rigging the polls. Thus, the potential challenge is to distinguish the legitimate IoT devices from the malicious ones by computing their trust values through social optimizer in order to establish a legitimate communication environment. Further, in order to prevent from future modifications of data captured by smart devices, a Blockchain is maintained where blocks of all legitimate IoT devices are recorded. This article has introduced a secure and transparent e-voting mechanism through IoT devices using Blockchain technology with the aim of detecting and resolving the various threats caused by an intruder at various levels. Further, in order to validate the proposed mechanism, it is analyzed against various security parameters such as message alteration, Denial of Service (DoS) and Distributed Denial of Service (DDoS) attack and authentication delay.

Internet of Things (IoT) is a broad network of actual, physical objects that can exchange data and communicate with other devices and systems over the Internet. Due to the scalability of the internet, the number of IoT users is increasing, and therefore it is vital to ensure the security of user info. Attacks such as DDoS (Distributed Denial of Service) and MitM (Man-in-the-Middle) can seriously interrupt operations and threaten the confidentiality and integrity of sensitive data. In this paper, a novel Iot based Security Assessment for intrusion using Deep Learning (ISAI-DL) technique has been proposed to identify IoT device vulnerabilities such as DDoS and MitM attacks. Initially, the features are extracted from the API documents using Bag of Words (BoW) and Term Frequency-Inverse Document Frequency (TF-IDF) techniques. In proposed ISAI-DL technique, it triggers or activates the vulnerabilities deep within target devices by sending API documents. The vulnerability is detected via the GloVe-CNN-BiLSTM Model; if the attack occurs in an IoT device, the output is classified as either DDoS, MitM, or normal. Evaluation metrics such as accuracy, recall, precision, time efficiency, F1 score, false alarm rate, and detection rate have been used to measure how effective the proposed ISAI-DL technique is. Based on a comparative investigation, the detection rate of the proposed ISAI-DL technique is 17.23%, 18.53%, and 3.24% greater than that of the existing P2ADF, HDA-IDS, and BT-TPF techniques respectively.

Deep learning techniques for DDoS attack detection: Concepts, analyses, challenges, and future directions

While the Internet of Things (IoT) becomes increasingly popular and pervasive in everyday objects, IoT devices often remain unprotected and can be exploited to launch large-scale distributed denial-of-service (DDoS) attacks. One could attempt to employ traditional DDoS defense solutions, but these solutions are hardly suitable in IoT environments since they seldom consider the resource constraints of IoT devices.This paper presents FR-WARD which defends against DDoS attacks launched from an IoT network. FR-WARD is an adaptation of the classic DDoS defense system D-WARD. While both solutions are situated near the attack sources and drop packets to throttle DDoS traffic, FR-WARD utilizes the fast retransmit mechanism in TCP congestion control to minimize resource penalties on benign IoT devices. Based on our analysis and simulation results, FR-WARD not only effectively throttles DDoS traffic but also minimizes retransmission overhead for benign IoT devices.

Distributed Denial of Service (DDoS) attack is a serious threat to commercial service network. DDoS attack has been studied for years. However, detecting and relieving DDoS attacks are still a problem. Especially, nowadays more and more DDoS attacks produce heavy network traffic, it is hard to response rapidly because that needs high processing performance to process massive traffic data. With big data technology, volumes of network traffic data can be processed much faster. Apache Spark can process a great amount of data in a reasonable time so that DDoS attack can be detected in time. Besides, it is difficult to modify the network configuration in traditional network. With Software-Defined Networking (SDN), a new paradigm in networking, networking can be controlled by programs, which makes modifying the network configuration easier. In this paper, a DDoS detection and mitigation system framework in SDN is introduced, a framework that can control network based on analyzing the network traffic data. Comparing to the traditional defense methods of DDoS attack, the framework can response to DDoS attack by rules automatically.

As the current detection solutions of distributed denial of service attacks (DDoS) need additional infrastructures to handle high aggregate data rates, they are not suitable for sensor networks or the internet of things. Besides, the security architecture of software-defined sensor networks needs to pay attention to the vulnerabilities of both software-defined networks and sensor networks. In this paper, we propose a network-aware automated machine learning (AutoML) framework, which detects DDoS attacks in software-defined sensor networks. Our framework selects an ideal machine learning algorithm to detect DDoS attacks in network-constrained environments, using the metrics such as variable traffic load, heterogeneous traffic rate, and detection time while preventing over-fitting. Our contributions are two-fold: (i) we first investigate the trade-off between the efficiency of ML algorithms and network/traffic state in the scope of DDoS detection. (ii) we design and implement a software architecture containing open-source network tools, with the deployment of multiple ML algorithms. Lastly, we show that under the denial of service attacks, our framework ensures the traffic packets are still delivered within the network with additional delays.