A blockchain-based architecture for collaborative DDoS mitigation with smart contracts

Journal
IFIP International Conference on Autonomous Infrastructure, Management and Security
ISSN
1611-3349
Type
Controlled Vocabulary for Resource Type Genres::text::conference object
Date Issued
2017
Author(s)
Rodrigues, Bruno and Bocek, Thomas and Lareida, Andri and Hausheer, David and Rafati, Sina and Stiller, Burkhard
;
Bocek, Thomas and Lareida, Andri and Hausheer, David and Rafati, Sina and Stiller, Burkhard
DOI
Abstract
<jats:title>Abstract</jats:title><jats:p>The rapid growth in the number of insecure portable and stationary devices and the exponential increase of traffic volume makes Distributed Denial-of-Service (DDoS) attacks a top security threat to services provisioning. Existing defense mechanisms lack resources and flexibility to cope with attacks by themselves, and by utilizing other’s companies resources, the burden of the mitigation can be shared. Emerging technologies such as blockchain and smart contracts allows for the sharing of attack information in a fully distributed and automated fashion. In this paper, the design of a novel architecture is proposed by combining these technologies introducing new opportunities for flexible and efficient DDoS mitigation solutions across multiple domains. Main advantages are the deployment of an already existing public and distributed infrastructure to advertise white or blacklisted IP addresses, and the usage of such infrastructure as an additional security mechanism to existing DDoS defense systems, without the need to build specialized registries or other distribution mechanisms, which enables the enforcement of rules across multiple domains.</jats:p>
Publisher
Springer International Publishing
Official URL
URL