a load balancing algorithm against ddos attacks in … · a load balancing algorithm against ddos...

Outline Introduction The proposed Tecnique Conclusion

A Load Balancing Algorithmagainst DDoS Attacks

in Beyond 3G Wireless Networks

Stefania Zinno, Giovanni Di Stasi, Stefano Avallone,Giorgio Ventre

Università degli Studi di Napoli Federico IIDipartimento di Ingegneria Elettrica e delle Tecnologie dell’Informazione

INW 201512th Italian Networking Workshop: Cavalese, Italy

Outline Introduction The proposed Tecnique Conclusion

1 IntroductionFundamentals

2 The proposed TecniqueSimulations

3 ConclusionResults

Outline Introduction The proposed Tecnique Conclusion

Long Term Evolution Network

LTE also known as 4G is a Wireless Standard developed by3GPP, the 3rd Generation Partnership Project.

- OFDMA- MIMO Techniques- IP-based system- DL 3 Gbps,

UL 1.5 Gbps

Outline Introduction The proposed Tecnique Conclusion

Denial of Service Attacks

DDoS stands for Distributed Denial of Service. It is a specificDenial of Service attack performed by a multitude ofcompromised systems against a specific target.

- BotMaster- Handler- Agent o Zombie- Victim Host Network

Outline Introduction The proposed Tecnique Conclusion

Handover Procedure

Handover is supported in LTE networks to ensure servicecontinuity when moving out of the LTE coverage area.

- Network Controlled UEAssisted

- Based on X2 Interface andReceived Signal StrengthIndication

Outline Introduction The proposed Tecnique Conclusion

Self Organizing Network

Self-organizing networks (SON) are the attempt to simplify andspeed up the planning, configuration, management,optimization and healing of LTE and LTE-Advanced-basednetworks.

Outline Introduction The proposed Tecnique Conclusion

Load Balancing Procedure in RRC stateCONNECTED

Outline Introduction The proposed Tecnique Conclusion

Transport Block

Ns3 offers a much more plain MAC model than the 3GPP one.Transport block is equal to a MAC PDU.

Outline Introduction The proposed Tecnique Conclusion

Load Balancing Tecnique

The Algorithm is:- Distributed- Iterative- Local- Optimized- Perfectly Integrated

in LTE Architecture

Outline Introduction The proposed Tecnique Conclusion

eNodeB ControlMessages:

- Late Path Switching- Measurement

Report- Loseless and

Seamless DataCommunication

Outline Introduction The proposed Tecnique Conclusion

Ns3 Simulation Environment for Networking Research

Ns-3 is a network simulator for Internet systems, targetedprimarily for research and educational use. Ns-3 is freesoftware and is publicly available for research, development,and use.

- Discrete-eventnetwork simulator

- Open Source- Librerie C++

Outline Introduction The proposed Tecnique Conclusion

Ns3 Module

Two are the main modified classes:

- lte-enb-rrc.h- epc-x2-sap.h

Outline Introduction The proposed Tecnique Conclusion

Callback Ns3

At execution time all information regarding all TB scheduled arecollected by each eNodeB through a DL transmission statisticscallback

Outline Introduction The proposed Tecnique Conclusion

Implementation Details

Outline Introduction The proposed Tecnique Conclusion

Scenario Set Up

eNodeB: ConstantPosition Mobility ModelUE: Constant VelocityMobility Model constantspeed of 20 m/s.

Multimedia Users:- Non Guaranteed Bit Rate

VIDEO TCP PREMIUM- Non Guaranteed Bit Rate

VIDEO TCP DEFAULT- Guaranteed Bit Rate NON

CONVersational VIDEOVoice Users:

- Tre Guaranteed Bit RateCONVersational VOICE

Outline Introduction The proposed Tecnique Conclusion

Scenario:Network Topology and Packet Traffic

Outline Introduction The proposed Tecnique Conclusion

Scenario:Ten attacked eNodeB

Outline Introduction The proposed Tecnique Conclusion

Results

- More efficiency achieved in resource distribution- Traffic flows and network performances are increased- Perfectly integrated with LTE Modules- No backup infrastructure needed

Outline Introduction The proposed Tecnique Conclusion