Collaborative Blockchain Based Distributed Denial of Service Attack Mitigation Approach with IP Reputation System

Abstract

AbstractDue to the high accessibility of the internet and unsecured internet-connected devices, Distributed Denial of Service attacks (DDoS) become devastating among all cyber-attacks. Attack complexity and sophistication have been increasing day by day. Many mitigation techniques and methods are available through which the risk of DDoS attacks will be reduced at a significant level. It is ideal to implement distributed solutions to mitigate DDoS attacks because of distributed nature of DDoS attacks. Many collaborators who share the same interest, participate in DDoS attack mitigation in a collaborative DDoS mitigation approach. But, creating a collaboration in a transparent, secured, and distributed way is still a challenge. Blockchain technology presents the ideology of decentralized, distributed, secured, and immutable ledger. Blockchain is an emerging technology to mitigate many cyber threats because of its fundamental characteristics like decentralization, immutability, authenticity, trust management, and integrity. In DDoS attacks mitigation, Blockchain technology is utilized in many different ways but, still in the initial phase. Due to all these characteristics of Blockchain, Blockchain become the ideal choice to create collaboration among peers. As well as it would be also useful to signalize the attack among various collaborators. Accuracy of shared IP addresses is equally important in the mitigation of DDoS Attacks and Botnet identification. IP Reputation systems are generally designed to get accurate information about IP addresses. In this paper, we present how blockchain is used collaboratively to mitigate DDoS attacks in various domains. This paper aim at providing a brief overview of DDoS mitigation strategies, the architecture of the proposed DDoS mitigation solution. This paper also discusses the integration of IP reputation scheme for Blacklisted IP addresses with Blockchain to build transparency and accuracy of data. Accurate IP addresses data would be helpful in not only DDoS Attack Mitigation but, in many attacks related to IP Addresses, identification of the Bots, Intrusion prevention system (IPS), and Intrusion detection system (IDS). KeywordsBlockchain technologyDDoS attacksMitigationIP reputationCollaborative approach