See discussions, stats, and author profiles for this publication at: https://www.researchgate.

net/publication/283205037

Network Denial of Service Threat Security on Cloud Computing A Survey

Article · October 2015

CITATIONS READS

2 277

2 authors, including:

Elmustafa sayed ali ahmed

Red Sea University
23 PUBLICATIONS   82 CITATIONS   

SEE PROFILE

Some of the authors of this publication are also working on these related projects:

Internet of Things (IoT) Applications View project

All content following this page was uploaded by Elmustafa sayed ali ahmed on 26 October 2015.

The user has requested enhancement of the downloaded file.

 © 2015 IJSRSET | Volume 1 | Issue 5 | Print ISSN : 2395-1990 | Online ISSN : 2394-4099
Themed Section: Engineering and Technology

Network Denial of Service Threat Security on Cloud Computing

A Survey
Elmustafa Sayed Ali Ahmed, Rasha E. A. Elatif
Department of Electrical and Electronics Engineering, Red Sea University, Port Sudan, Sudan, Saudi Arabia

ABSTRACT

Cloud computing is one of the most important communication model nowadays since it’s provides a sets of
resources and multiple types of services offered through the internet. The services and resources provided by cloud
computing are cheaper because of no maintenance cost required in the core of clouds, since all services were offered
to the clients based on services availability by providers only and clients are free to manage and maintains the
resources machines. People use the cloud computing only when they need it, for this reasons cloud computing may
be called a services over internet on demand. Companies also use the clouds to reduce their operation costs by
resting virtual machines for digital services from cloud providers. With the growth of data every day which require a
more services and resources in cloud computing, a security issues are creates a new demands and opportunities for
security models that because cloud computing facing many types of attack threats with increasing of clouds .
Network Denial of services is one of the most famous attack threats that make sense in a cloud computing context
and may be divided into network distributed denial of services and DNS denial of services knows as availability
threats. This paper reviews the types of network denial of services attacks also classify the methods of security
defences and then compare between all of them.
Keywords: Cloud computing, Denial of Service, DNS DoS, Network Distributed DoS, availability threats,
Security.

I. INTRODUCTION DoS attack is also one of the key security issues.

Network Distributed Denial of Service (DDoS) attacks
Cloud computing as a model enables on demand access are one of the biggest concerns for security professionals
to servers, networks, and applications provide an options in which a multitude of compromised systems attack a
for people to use the major benefits of clouds computing single target, thereby causing denial of service for users
of flexible and scalable infrastructures, reduced of the targeted system. Other type of denial of services is
implementation and maintenance costs [1]. The cloud a DNS denial of services known as Domain Name
computing data center is usually composed of thousands System (DNS) denial of service, it’s a Domain Name
of commercial computers, and these computers are System (DNS) flooding attack aims to consumption of
connected by network with computing programming critical system resources in order to paralyze the
model to help user to use cloud resources without provided services and make them unavailable to its
concerning the details of implementation [2]. Cloud legitimate users [5].
computing enables clients to access resources online
through the internet, from anywhere at any time without This study is focusing over the security methods that
worrying about technical management and maintenance used to ensure security cloud computing against the two
issues of the original resources [3]. The security issues types of network attack threats based on denial of
related to cloud computing are very important that services threats; they are distributed and DNS denial of
because of the increasing of clouds of services and services tacking all considerations related to the
resources accessed by clients [4]. Denial of service solutions of denial of services security. The rest of the
attack has become an increasingly prevalent security paper organized as follows; Section 2 presents the
threat, people realize that protecting systems against concepts of the denial of services, then reviews the

IJSRSET151524 | Received: 19 September 2015 | Accepted: 25 October 2015 | September-October 2015 [(1)5: 341-350]
341
threats that related to availability of cloud computing, the controlled machines to launch one of many flood
explains the two types of threats network denial of attacks against a specified target. The flood of packets to
services. Section 3 focuses on networks distributed the target causes a denial of service [5].
denial of service attack methods and DNS attacks on
cloud computing. Section 4 illustrates the modern
defense methods against denial of services attacks.

The list of possible defenses against the two types of

availability threats denial of services, and discussion in
more depth of the security models related to those
threats will be reviewed in section 5. Section 6 briefly
review the comparison between the model of security
taken as a defense technique for Network Denial of
Service Threat in cloud computing. Finally section 7
concludes the paper and provides some future ideas for Figure 1: Distributed Denial of Service Attack
security in cloud computing. Components

II. METHODS AND MATERIAL (ii). DNS Denial of Service

A. Denial of Service The domain name system (DNS) is a hierarchical

distributed system providing the necessary mapping or
Denial of service (DOS) has become an increasingly binding between human comprehensible domain names
prevalent security threat, users realize that protecting and the corresponding numerical IP addresses. This
systems against DoS attack is also one of the key mapping procedure is also known as address resolution
security issues. Although DoS attack is becoming a fast service. In the root of this hierarchy tree is located the
growing concern. A Denial of Service attack is a method mapping of top level domains, like “.gr”, “.com”, “.org”
of blocking service from its intended users. The severity etc, to the IP addresses of the corresponding
of this attack varies with the magnitude of loss and the authoritative DNS server. Each of these domains and the
duration of attack. DoS attacks could be extended to subsequent sub-domains form a specific zone.
Distributed Denial of Service (DDoS) attacks which
does damage in a massive scale. DoS attacks on DNS The leaf of each zone in this hierarchy stores the
wherein attackers flood the name servers of a cloud area mapping of a specific domain name to its IP address;
to disrupt resolution of resource records belonging to the this information is kept in the corresponding DNS
area and consequently, any of its sub areas [5]. Resource Record (RR). The main goal of any flooding
attack is the consumption of critical system resources in
(i). Distributed Denial of Service order to paralyze the provided services and make them
unavailable to its legitimate users.
A distributed denial of service (D-DoS) is one in which
a multitude of compromised systems attack a single Flooding attacks against DNS are similar to other well
target, thereby causing denial of service for users of the documented Internet services flooding attacks and could
targeted system. The flood of incoming messages to the be launched in two distinct ways. In the first one the
target system essentially forces it to shut down, thereby attacker sends a large number of bogus DNS requests
denying service to the system to legitimate users. A either from a single or multiple sources, depending on
hacker begins by exploiting vulnerability in one the flooding architecture utilized for example of multiple
computer system and making it the D-DoS master .It is sources flooding architecture attack against a DNS is
from the master system that the intruder identifies and depicted in Figure 2.
communicates with other systems by loading cracking
tools available on the Internet on multiple compromised According to this scenario, the attacker orchestrates
systems. With a single command, the intruder instructs usually innocent hosts, called zombies, to

International Journal of Scientific Research in Science, Engineering and Technology (ijsrset.com)

342
simultaneously generate fake DNS requests aiming at exploitation. Bandwidth attacks overload the target with
disrupting the normal DNS operation by consuming its massive amounts of junk data. This results in a loss of
resources; mainly memory and CPU [6]. network bandwidth and equipment resources and can
lead to a complete denial of service [7]. In application
layer attack, the application layer data messages can
deplete resources in the application layer, leaving the
target's system services unavailable. The application
layer attacks are the most deadly kind of attacks as they
can be very effective with as few as one attacking
machine generating a low traffic rate, this makes these
attacks very difficult to pro-actively detect and mitigate.
These attacks have come to prevalence over the past
three or four years and simple application layer flood
attacks using HTTP flood have been one of the most
common DDoS attacks seen in the wild [7].
Figure 2: DNS flooding attack architecture
ii Domain Name System DOS attacks
B. Network Denial of Service Attacks
In the denial of services against domain name system
Network denial of service attack might divide into (DNS), a TCP/IP stack of the DNS server machines
categories; distributed denial of services and DNS denial attacked to cause them to drop incoming DNS queries,
of services knows as availability threats. Distributed or exhaust the resources of DNS servers One may be
Denial of service has the cohesive strength of many able to force name servers to drop DNS queries by
compromised systems working towards a single cause. attacking the TCP/IP stack of name server machines, for
The first stage of this attack is to build its platform with example, by exploiting IP fragmentation reassembly
many host systems that can work under remote vulnerabilities to exhaust memory or CPU resources.
commands. The attacker group would first scan Another approach is to exhaust the CPU and memory
networks to hunt for vulnerable systems that are weak in resources of a DNS server, for example, by bombarding
security features. According to researchers there are name servers with a lot of DNS queries so that they do
millions of host machines that are vulnerable without not have enough resources to process all the DNS
secure patches and proper updates that often fall victims queries they receive [7].
to these attackers. Once the scanning procedure is
completed, attackers would bring these hosts into control C. Defense Methods against Denial of services
using software exploitations like buffer overflow, attacks
dangling pointers, code injection [7].
The challenge in preventing DDoS attacks lies in the
i Distributed DOS Attacks
nature of the traffic and the nature of the attack. Because
most often the traffic is legitimate as defined by protocol.
The distributed denial of services D.DOS attack attempt
To identify the attacks the difference between
to exhaust the victim's resources such as network
volumetric and application-level attack traffic must also
bandwidth .There are two types of DDoS attacks; a
be understood clearly. Application level attacks exploit
network centric attack which overloads a service by
specific applications or services on the targeted system.
using up bandwidth and an application layer attack
They typically bombard a protocol and port a specific
which overloads a service or database with application
service uses to render the service useless and the attack
calls. In network centric attack type the attack will take
take place by HTTP or DNS. Volumetric attacks use an
place through traffic or bandwidth. The traffic flooding
increased attack footprint that seeks to overwhelm the
attacks send a huge volume of TCP, UDP and ICPM
target. This traffic can be application specific, but it is
packets to the target. Legitimate requests get lost and
most often simply random traffic sent at a high intensity
these attacks may be accompanied by malware

International Journal of Scientific Research in Science, Engineering and Technology (ijsrset.com)

343
to over utilize the target's available resources using DNS untrustworthy URLs. Its uses to defense against malware,
or SYN floods. There are many types of defense botnet activity, and other web-based threats attack [10].
methods those used against denial of services attacks,
these methods like Route Filtering, Unicast Reverse Path vi. Control Accessing
Forwarding, Geographic Dispersion, Tightening
Access Control Lists provide a flexible option to a
Connection Limits and Timeouts, Reputation Based
variety of security threats and exploits, including DDoS,
Blocking, and control accessing method [8].
which provide a reactive mitigation for DDoS attacks by
ordered set of rules and rule specifies a set of conditions
i. Route Filtering Techniques
that a packet must satisfy to match the rule plays as
A Remotely triggered black hole (RTBH) filtering can traffic filter. Firewalls, routers, and even switches
drop undesirable traffic before it enters a protected support, and when of each these devices determine that
network by what is called black holes. When an attack an ACL applies to a packet, it tests the packet against the
has been detected, black holing can be used to drop all conditions of all rules and determine whether the packet
attack traffic at the network edge based on either is permitted or denied, and continues processing packets
destination or source IP address, and regarding RTBH that are permitted and drops packets that are denied [10].
filtering for further information [9].

D. Network Denial of Service Threat Security

ii. Unicast Reverse Path Forwarding
Methods
Network administrators can use Unicast Reverse Path
Forwarding (uRPF) to help limit malicious traffic flows Many studies have proposed to defenses against a
occurring on a network, as is often the case with DDoS network denial of service attack, in both types
attacks. This security feature works by enabling a router distributed network and domain name system denial of
to verify the reachability of the source address in packets services attacks. In the following sections we present a
being forwarded. It can limit the appearance of spoofed review of different security methods against distributed
addresses on a network, by discarding packets if the network denial of services attacks. These different
source IP address is not valid [9]. studies were collected from several researches based on
the mechanisms and the security type used in the
iii. Geographic Dispersion proposed research.

To mitigating DDoS attacks, distributing the footprint of i. Artificial Intelligent and Prediction Based
DDoS attacks is used in clouds which make the targets Models
not individually saturated by the volume of attack traffic.
This solution uses a routing concept known as Any cast Suriadi, S et al [11], describe a mechanism for
to allows traffic from a source to be routed to various integrating a hash based puzzle into web services
nodes via the nearest hop node in a group of potential frameworks available and analyze the effectiveness of
transit points and its provide geographic dispersion [10]. the countermeasure using different scenarios on a
network test bed. This study presents techniques to
iv. Tightening Connection Limits and Timeouts defense the clouds against flooding attacks using client
puzzles which they can also mitigate certain types of
Anti-spoofing used to limiting connections and semantic based attacks.
enforcing timeouts in a network environment seek to
ensure that DDoS attacks are not launched or spread Joshi, B. et al [12], propose a mechanism to test the
from inside the network. efficiency of a cloud trace back model in dealing with
DDoS attacks using back propagation neural network to
v. Reputation Based Blocking predicts safe models which finds that the model is
useful in tackling distributed denial of service attacks.
Reputation based blocking is an essential component to
web filtering provides URL analysis and establishes a
reputation for each URL to limits the impact of

International Journal of Scientific Research in Science, Engineering and Technology (ijsrset.com)

344
T. Siva, E.S. Phalguna Krishna [13], provide security to attacks using ingress filtering to discover and prevent the
cloud resources by denial of service (DoS) attacks and DDoS attacks from its customer, and also been
their related sub domains also to security of application extensively deploying to avoid source IP spoofing. The
denial of service (ADoS) attacks which comes under mechanism discarding packets which have a source
DDOS attacks concentrate on SaaS in cloud computing. address which is not allocated to customers. It can
The research present different types of cloud based ensure an SP’s network do not participate in flooding
DDOS attacks and their solutions, also give most DDoS attacks.
dangerous application DoS attacks scenario and their
remedy mechanisms, by introducing new port hopping Priyanka Negi et al [17], proposed a modification to the
scheme as true random number generation (TRNG) confidence based filtering method (CBF) which is
based port hopping in cloud computing environment. investigated for cloud computing environment based on
This hopping scheme by using pseudo random number correlation pattern to mitigate DDoS attacks on Cloud.
Generation (PRNG) over comes the disadvantage of The modification introduces nominal additional
prediction of the port hopping sequence and is periodic bandwidth and tries to increase the processing speed of
in nature. the victim initiated server. In the enhanced confidence
based filtering method legitimate packet is the one
Upma Goyal et al [14], propose a defense mechanism whose confidence based filtering value is above the
against the DDoS attacks which is known as cloud discarding threshold. Those packets with scores lower
specific intrusion detection system. This defense than the discarding threshold are regarded as attack ones.
mechanism will be able to detect the attack before the
DDoS attack succeeds. The mechanism includes two iii. Monitoring and Identifying Based Models
methods of intrusion detection they are; behavior based
method which compares the recent user actions to the Chu-Hsing Lin et al [18], analyze native modules of the
usual behavior and the knowledge based method which PHP dynamic pages and find the amount of system
detects known attacks. The behavior deviation is resources consumed by parts of the native modules. The
analyzed using artificial intelligence. With all the study propose a method based on semantic concept to
responses, the IDS detect the attack and alert the other formulate rules to identify and monitoring malicious
nodes. The cloud Intrusion detection model will be browsing behaviors in order to improve performance of
detecting the attack traffic with the help of Entropy and web services and to slice the cost.
The Anomaly based detection system.
Ashley chonka et al [19], study some of the current
N. Ch. S. N. Iyengar et al [15] propose a fuzzy logic attacks that attackers may initiate as HTTP and XML.
based defense mechanism that can be set with the proposed research offer a solution to trace back
predefined rules by which it can detect the malicious through cloud trace back (CTB) to find the source of
packets and takes proper counter measures to mitigate these attacks, and introduce the mechanism, called cloud
the DDoS attack. The predefined traffic parameters protector, to detect and such attack traffic. The results
used are vary significantly between a normal traffic show that proposed idea able to detect most of the attack
pattern and attack traffic pattern .However for any messages and were able to identify the source of the
particular data center, from DDoS traffic pattern, the attack within a short period of time.
parameters can be changed based upon specific
requirements. A.M. Lonea et al [20], provide a combination between
the evidences obtained from intrusion detection systems
ii. Filtering Based Models (IDSs) deployed in the virtual machines (VMs) of the
cloud systems and a data fusion methodology in the
J. RAMESHBABU et al [16] study focus on the impact front end. Specifically. The VM based IDS will yield
of DDoS attacks in cloud and the NEIF technique alerts when the attacks appear, which will be stored into
available to overcome the attacks of distributed denial of the MySQL database placed within the cloud fusion unit
service DDoS on the clouds. NEIF installed at the ISPs’ (CFU) of the front end server. the study propose a
edge routers plays as a dual role in shielding DDoS quantitative solution for analyzing alerts generated by

International Journal of Scientific Research in Science, Engineering and Technology (ijsrset.com)

345
the IDSs, using the dempster Shafer theory (DST) architecture integrates a highly programmable network
operations in 3 valued logic and the fault tree analysis monitoring to enable attack detection and a flexible
(FTA) for the flooding attacks. The solution to identify control structure to allow fast and specific attack
these attacks is to use the dempsters combination rule to reaction. The proposed architecture can effectively and
fuse evidence from multiple independent sources. The efficiently address the security challenges brought by the
proposed solution represents the imprecision and new network paradigm.
efficiently utilizes it in IDS to reduce the false alarm
rates by the representation of the ignorance. iv. Networking and Data Based Models

A. S. Syed Navaz et al [21], Propose a combination N. Jeyanthi et al [24], proposed spoofing detection
scheme between hereto merge entropy based system algorithm to detect DDoS attacks is used to detect
with anomaly detection System for providing multilevel address spoofing for each request to a service. The
distributed denial of service (DDoS). The proposed idea proposed algorithm consists of a cloud authentication
taking two steps; first, users are allowed to pass through system (CAS) that will authenticate the connections
router in network site in that it incorporates detection between the DC requester and the cloud service
algorithm and detects for legitimate user. then secondly, provider, and which will ensure that the incoming
again it pass through router placed in cloud site in that it request packet is legitimate. CAS will be embedded in
incorporates confirmation algorithm and checks for the cloud service provider, and receive all the incoming
threshold value, if it’s beyond the threshold value it packets from the requester, who may be legitimate,
considered as legitimate user, else it’s an intruder found attacker or a combination of bot before it is allowed to
in environment. This system is represented and reach the service.
maintained by as third party. When attack happens in
environment, it sends notification message for client and Sanchika Gupta et al [25], identifies vulnerabilities
advisory report to cloud service provider (CSP) to responsible for well-known network based attacks on
identify the attacks. cloud and does a critical analysis on the security
measures available in cloud environment. The proposed
Mettildha Mary et al [22], propose a novel solution, study focuses on a nonconventional technique for
named DDoS and EDoS Shield, to avoid the denial of securing cloud network from malicious insiders and
service and economic denial of sustainability (EDoS) outsiders with the use of network profiling. The profile
attack in the cloud computing systems. The main idea of is created for each virtual machine (VM) in cloud that
the proposed scheme is to verify whether the requests describes network behavior of each cloud user .The
coming from the users are from a legitimate person or behavior gathered is then used for determination and
generated by bots. This work will test the efficiency of a detection of network attacks on cloud. The novelty of
cloud trace back model using a new data set based upon the approach lies in the early detection of network
deterministic packet marking (DPM) algorithm. This attacks with robustness and minimum complexity. The
scheme will check the cloud trace back model using proposed technique can be deployed with minimal
flexible deterministic packet marking, which provides a changes to existing cloud environment.
defense system with the ability to find out and identify
the real sources of attacking packets that traverse Namrata and Prof. D. S. Datar [26], design a cloud
through the network. computing based collaborative network security
management system using botnet which balances the
Bing Wang et al [23], propose a graphic model based load in the network and check for each and every file
attack detection system that can deal with the dataset transferring in the cloud for the bot. If the file contains
shift problem. The core of the attack detection system is the bot then the folder in which that file is saved, will be
a graph model. It stores known traffic patterns as a deleted from that client. The proposed system is to
relational graph between patterns and their labels protect the cloud from botnet and prevent the cloud from
(malicious or normal). When new network traffic arrives, botnet attack. During the systems operation, the
the system uses this graph to determine whether it is collaborative mechanism runs as expected to balance the
malicious. The mechanism of DDoS attack mitigation load in the network, and to check the file transferring in

International Journal of Scientific Research in Science, Engineering and Technology (ijsrset.com)

346
the network as instructed by the security center or the Krishna (DoS) attacks (TRNG)
server machine. [13] application based port
DOS attacks hopping
Danveer Singh et al [27], describe how to detect DDoS scheme
Upma Behavior of detect the Artifici
violence, in view of that cloud providers will alert to
Goyal et user actions attack and alert al
assign resources to users even in denial of service
al [14] the other nodes intelligent,
violent behavior in in the distance ahead. The paper Entropy
proposes types of detections like network traffic analysis and
based DDoS detection, and data analysis based DDoS Anomaly
detection. based
detection
Osanaiye [28], discusses different methods for detecting system.
spoofed IP packet in cloud computing and proposes host N.Ch.S.N. malicious predefined fuzzy logic
based operating system fingerprinting that uses both Iyengar et packets attack traffic based
passive and active method to match the operating system al [15] parameters to defense
detect the
and applications of incoming packet from its database.
malicious
packets
III. RESULTS AND DISCUSSION J.RAMES IP spoofing Defense NEIF
HBABU and against technique
Security Models Comparison et al [16] unauthorized unauthorized and
customer packets ingress
The proposed models which they are mentioned in the address filtering
above sections were gathered from many researches
based on four issues they are, artificial intelligent and Priyanka correlation Discards an confidence
prediction, filtering, monitoring and identifying, Negi et al pattern to trusted packets based
networking and data. The following table shows the [17] mitigate DDoS filtering
attacks method
comparison between all the discussed security models
(CBF)
based on investigation area, proposes, and mechanism.
Chu- PHP dynamic monitoring semantic
Hsing Lin pages malicious concept
Table 1: Security Models Comparison et al [18] browsing
behaviors
Proposed Investigation Investigation Mechanism Ashley HTTP and find the source cloud
Models by Area Propose Used chonka et XML of attacks protector
Authors al [19]
Suriadi, S Web Services Defense client A.M. intrusion reduce the data fusion
et al [11] clouds against puzzles to Lonea et detection false alarm methodolog
flooding mitigate al [20] systems (IDS) rates of attacks y
attacks certain with VM
types of based IDS
semantic A.S.Syed Attack Notify the hereto
based Navaz et notification client and merge
attacks al [21] cloud service entropy
Joshi, B. cloud trace test the back provider (CSP) based
et al [12] back dealing efficiency of a propagation to identify the system and
with DDoS cloud trace neural attacks. anomaly
attacks back model network detection
production System
T.Siva, SaaS in cloud security to true random Mettildha economic verify the deterministi
E.S. computing cloud number Mary et al denial of requests c packet
Phalguna resources by generation [22] sustainability coming from marking

International Journal of Scientific Research in Science, Engineering and Technology (ijsrset.com)

347
 the users (DPM) some of defense against mentioned attacks. The revision
(legitimate algorithm of security models depends on the investigated area that
person or represents the type of attack and on the methodology
generated by taken to make defense such as artificial intelligent
bots)
methods, monitoring and identifying method, filtering
Bing graphic model graph model to relational
and network based methods. In this paper we propose
Wang et based attack determine graph
al [23] malicious between
many models for security issues in denial of services
patterns attacks, and most of these models investigate on
(normal or flooding attack, spoofing and on unauthorized access.
malicious) The proposed security based on three schemes detecting
N. address ensure that the cloud attacks, monitoring / identifying attack, and filtering to
Jeyanthi et spoofing incoming authenticati discard attack.
al [24] request packet on system
is legitimate (CAS) V. REFERENCES
Sanchika malicious early detection Profile
Gupta et insiders and of network Based
[1] P. Vijaya Vardhan Reddy* and Dr. Lakshmi
al [25] outsiders attacks Network
Intrusion
Rajamani ," Performance Evaluation of
Detection Hypervisors in the Private Cloud based on System
and Information using SIGAR Framework and for
Prevention System Workloads using Pass mark", International
System Journal of Advanced Science and Technology
Namrata Botnet attack balances the based Vol.70 (2014), pp.17-32.
and Prof. load in the collaborativ [2] Chao Shen and Weiqin Tong," Review on the
D. S. network e network Cloud Computing Programming Model",
Datar [26] International Journal of Advanced Science and
Danveer denial of detect DDoS network
Technology, Vol.70 (2014), pp.11-16.
Singh et al service violent violence traffic and
[3] Farhan Bashir Shaikh and Sajjad Haider," Security
[27] behavior data
analysis
Threats in Cloud Computing", 6th International
based Conference on Internet Technology and Secured
DDoS Transactions, 11-14 December 2011, Abu Dhabi,
detection United Arab Emirates.
Osanaiye operating detecting IP host based [4] Elmustafa Sayed Ali Ahmed1 and Rashid A.
[28] system and spoofing operating Saeed2; "A Survey of Big Data Cloud Computing
applications system Security"; International Journal of Computer
attacks fingerprinti Science and Software Engineering , Volume 3,
ng Issue 1, December 2014.
[5] K. Santhi," A Defense Mechanism to Protect
Cloud Computing Against Distributed Denial of
IV. CONCLUSION Service Attacks", International Journal of
Advanced Research in Computer Science and
With large amount of clouds in networks today, attacks Software Engineering ", Volume 3, Issue 5, May
increase more and more by using several attack 2013.
techniques, methods and tools. The most important type [6] Stephen M. Specht and Ruby B. Lee," Distributed
of attacks are related to the network denial of services Denial of Service: Taxonomies of Attacks, Tools,
concepts such as distributed network denial of services and Countermeasures"; Proceedings of the 17th
and domain name system denial of services. In this International Conference on Parallel and
paper we present a main point of attacks methods in Distributed Computing Systems, pp. 543-550,
clouds related to denial of services and review of September 2004.
possible security threads models those will used to make

International Journal of Scientific Research in Science, Engineering and Technology (ijsrset.com)

348
[7] K.Santhi ; "A Defense Mechanism to Protect DD OS A TTACKS IN CLOUD USING NEIF
Cloud Computing Against Distributed Denial of TECHNIQUES"; International Journal of
Service Attacks"; International Journal of Scientific and Research Publications, Volume 4,
Advanced Research in Computer Science and Issue 4, April 2014.
Software Engineering Volume 3, Issue 5, May [17] Priyanka Negi1, Anupama Mishra2and B. B.
2013 , pages 1-5. Gupta; "Enhanced CBF Packet Filtering Method
[8] Georgios Kambourakis, Tassos Moschos, Dimitris to Detect DDoS Attack in Cloud Computing
Geneiatakis and Stefanos Gritzalis , "A Fair Environment";http://arxiv.org/ftp/arxiv/papers
Solution to DNS Amplification Attacks", /1304/1304. 7073. pdf. Accessed in 18 Aug.
Laboratory of Information and Communication 2015].
Systems Security , University of the Aegean, [18] Chu-Hsing Lin et al ; "A detection scheme for
Karlovassi, GR-83200 Samos, Greece 2008 ,pages flooding attack on application layer based on
1-10. semantic concept"; Computer Symposium (ICS),
[9] Jun Xu; Wooyong Lee; "Sustaining availability of International 16-18 Dec. 2010.
Web services under distributed denial of service [19] Ashley chonka et al ; "Cloud security defense to
attacks"; Computers, IEEE Transactions on , protect cloud computing against HTTP-DoS and
vol.52, no.2, pp. 195- 208, Feb. 2003. XML-DoS attacks"; Journal of Network and
[10] Shui Yu; "Distributed Denial of Service Attack Computer Application Volume 34 Issue 4, July,
and Defense"; springer October 23, 2013. 2011.
[11] Suriadi, S et al ; "Defending Web Services against [20] A.M. Lonea, D.E. Popescu, H. Tianfield;
Denial of Service Attacks Using Client Puzzles , "Detecting DDoS Attacks in Cloud Computing
Web Services (ICWS)"; IEEE International Environment"; INT J COMPUT COMMUN,
Conference 4-9 July 2011. 8(1):70-78, February, 2013.
[12] Joshi, B. ; Vijayan, A.S. ; Joshi, B.K.; "Securing [21] A.S.Syed Navaz, V.Sangeetha, C.Prabhadevi;
cloud computing environment against DDoS "Entropy based Anomaly Detection System to
attacks "; Computer Communication and Prevent DDoS Attacks in Cloud"; International
Informatics (ICCCI), International Conference 10- Journal of Computer Applications (0975 –8887)
12 Jan. 2012. Volume 62–No.15, January 2013.
[13] T. Siva, E.S. Phalguna Krishna; "Controlling [22] Mettildha Mary1, P.V.Kavitha2, Priyadharshini;
various network based A DoS Attacks in cloud "Vigneshwer S Ramana, Secure Cloud Computing
computing environment: By Using Port Hopping Environment against DDOS and EDOS Attacks"
Technique"; International Journal of Engineering ;International Journal of Computer Science and
Trends and Technology (IJETT)-Volume 4 Issue Information Technologies, Vol. 5 (2) , 2014,
5-May 2013. 1803-1808.
[14] Upma Goyal1, Gayatri Bhatti2and Sandeep [23] Bing Wang ; Yao Zheng ; Wenjing Lou ; Hou,
Mehmi; "A Dual Mechanism for defeating DDoS Y.T.; "DDoS Attack Protection in the Era of
Attacks in Cloud Computing Model"; Cloud Computing and Software-Defined
International Journal of Application or Innovation Networking"; Network Protocols (ICNP), IEEE
in Engineering & Management , Volume 2, Issue 22nd International Conference, 21-24 Oct. 2014.
3, March 2013. [24] N. Jeyanthi*, Uttara Barde, M. Sravani and Venu
[15] N.Ch.S.N. Iyengar1, Arindam Banerjee2 and Tiwari; "Detection of distributed denial of service
Gopinath Ganapathy3; "A Fuzzy Logic based attacks in cloud computing by identifying spoofed
Defense Mechanism against Distributed Denial of IP"; Int. J. Communication Networks and
Service Attack in Cloud Computing Distributed Systems, Vol. 11, No. 3, 2013.
Environment"; International Journal of [25] Sanchika Gupta,1Padam Kumar,1and Ajith
Communication Networks and Information Abraham; "A Profile Based Network Intrusion
Security, Vol. 6, No. 3, December 2014. Detection and Prevention System for Securing
[16] J.RAMESHBABU,*B.SAMBALAJI,*R.WESLE Cloud Environment" ;Hindawi Publishing
Y DANIEL,**K.MALATH;" PREVENTION OF Corporation International Journal of Distributed

International Journal of Scientific Research in Science, Engineering and Technology (ijsrset.com)

349
 Sensor Networks Volume 2013, Article ID 2012. Her research interest on DSP, Mobile Networks
364575,12pages. and Routing Protocols.
[26] Namrata A. Sable and Prof. Mr. D. S.
Datar;"Cloud Computing Based -Collaborative
Network Security Management System Using
Botnet"; international Journal on Recent and
Innovation Trends in Computing and
Communication Volume: 2 Issue: 10 October
2014.
[27] Danveer Singh, 2.Basant Kumar Gupta 3.Harshit
Gupta, DDOS Attack and Detection for Secured
Cloud Computing Resources, International Journal
Of Engineering And Computer Science Volume 3
Issue 4 April, 2014 Page No. 5392-5395.
[28] Osanaiye, O.A.; "Short Paper: IP spoofing
detection for preventing DDoS attack in Cloud
Computing"; Intelligence in Next Generation
Networks (ICIN), 17-19 Feb. 2015.

VI. Authors Biography

Elmustafa Sayed Ali Ahmed received his M.Sc. degree

in electronic engineering, Telecommunication from
Sudan University of science and technology in 2012,
and B.Sc. (Honor) degree in electrical engineering,
Telecommunication from Red Sea University in 2008.
He was a wireless networks (Tetra system, Wi-Fi and
Wi-Max) engineer in Sudan Sea Port Corporation for
four years and a head department of electrical and
electronics engineering, faculty of engineering in Red
Sea University for one year. He published papers on
wireless communications and networking in peer-
reviewed academic international journals and book
chapters in big data clouds. His areas of research interest
include MANETs, wireless networks, VANETs, image
processing, computer networks, and Cloud computing.

Rasha Eltayeb Abd Elatif received her B.Sc. degree in

aeronautical engineering, avionics from Sudan
university of science and technology in 2006.She was a
teacher assistant for one year in Sudan university of
science and technology 2007-2008 then she worked as
technical engineer in Sudan university of science and
technology engineering college aeronautical department
from 2008 to present. She mandated to Red Sea
university department of electrical engineering since

International Journal of Scientific Research in Science, Engineering and Technology (ijsrset.com)

350

View publication stats