Denial Of Service Attacks Research Articles

Dual-Triggered Adaptive Torque Control Strategy for Variable-Speed Wind Turbine Against Denial-of-Service Attacks

The increasing utilization of wind energy necessitates dedicated attentions to identify vulnerabilities, raise awareness, and formulate strategies for cybersecurity defense, response, and future protection. As a potential cyber attack, denial-of-service (DoS) attacks that block the communication between the rotor speed sensor and the controller of the wind turbine may overload the drive-train and reduce the power generation efficiency. This paper attempts to propose a dual-triggered resilient torque control strategy for the variable-speed wind turbine (VSWT) against DoS attacks. Therein, the mathematical models including the dynamics of the WT and the DoS attack are established, and a neural network observer is designed for the WT system to compensate for the signal losses caused by DoS attack. To guarantee the optimal rotor speed tracking of the WT, an adaptive torque control method based on dual-triggered mechanism is developed, and the attack tolerance capability of the WT system is evaluated. The proposed control strategy can largely enhance the attack resilience capability of the WT, while saving the resources of computation and communication. Extensive studies on a 1.5 MW WT illustrate that the proposed adaptive resilient control scheme can effectively mitigate the impact of the DoS attacks and guarantee the optimal rotor speed tracking performance for the WT system.

Fuzzy Secure Event-Triggered Control for Networked Nonlinear Systems Under DoS and Deception Attacks

This article investigates the resilient dynamic event-triggered control issue of interval type-2 T-S fuzzy systems (IT2 T-S FSs) under denial-of-service (DoS) and deception attacks. A novel resilient dynamic event-triggering mechanism (DETM) and the corresponding fuzzy dynamic event-triggered controller are proposed to solve the stochastically exponential stability (SES) problem of concerned IT2 T-S FSs in the presence of DoS and deception attacks. Meanwhile, an aperiodic-sampling-based piecewise loop Lyapunov functional is constructed. It is shown that the resulting closed-loop IT2 T-S FSs can achieve SES, and under the piecewise loop Lyapunov functional, some relaxed conditions are derived. In addition, the derived results can apply to IT2 T-S FSs subject to DoS attacks, static event-triggered control, or dynamic periodic-sampling-based event-triggered control. Finally, the effectiveness of the achieved results is verified by a numerical simulation on one-link manipulator.

A Taxonomy of Radiofrequency Jamming and Spoofing Strategies and Criminal Motives

This article provides a taxonomy of radiofrequency (RF) jamming and spoofing tactics and strategies associated with specific criminal objectives. This is based on the fact that the motivations and strategies of cyber-attackers – predominantly financial – is well-known, but the motivations behind specific electromagnetic interferences is lacking in the current literature. Previous research has also overlooked the motivations of other actors using jamming and spoofing devices. The objective is to identify the most desirable spoofing and jamming strategies, likely targets, and likely motivations. The article finds that (a) previous literature on the subject overlooks a number of non-state actor motives, and therefore this research aims to fill this gap in knowledge; (b) out of 8 actors identified, denial of service attacks (7 out of 8), as well as so-called decoy spoofing (6), trojan spoofing (5), and jamming-enabled crime (5) are the most desirable strategies utilized; (c) out of 11 strategies identified, grey and black hat hackers (11 out of 11), terrorists (11) and activists (8), are likely to take advantage of most identified.

Security Time-Varying Formation Control for Multi-Agent Systems Under Denial-of-Service Attacks via Unknown Input Observer

The paper investigates the security time-varying formation control problem when the communication network of multi-agent systems (MASs) suffers from Denial-of-Service (DoS) attacks based on switched controller, state observers and unknown input reconstruction (UIR). To begin with, for the follower agents with unknown inputs, through an interval observer, the estimations of unknown input (UI) and system state can be obtained asymptotically and simultaneously by a Luenberger-like state observer (LLSO) combining with a UIR. After this, a distributed control protocol (DCP) on formation tracking is proposed based on the UIR and the state estimation, which can compensate the UI successfully. Moreover, the time space is divided into three parts utilizing the transmission interruption caused by DoS attacks, and the gain of the controller is designed corresponding to three different DoS attack duration, respectively. With the help of some concept in switched system, it is demonstrated that the given formation pattern can be reached under the proposed DCP. Finally, to verify the effectiveness of the proposed methods, a vehicle cruise control system used as the simulation example is given.

A Multi-Path Approach to Protect DNS Against DDoS Attacks

Domain Name System (DNS) is considered a vital service for the internet and networks operations, and practically this service is configured and accessible across networks’ firewall. Therefore, attackers take advantage of this open configuration to attack a network’s DNS server in order to use it as a reflector to achieve Denial of Service (DoS) attacks. Most of protection methods such as intrusion prevention and detection systems use blended tactics such as blocked-lists for suspicious sources, and thresholds for traffic volumes to detect and defend against DoS flooding attacks. However, these protection methods are not often successful. In this paper, we propose a new method to sense and protect DNS systems from DoS and Distributed DoS (DDoS) attacks. The main idea in our approach is to distribute the DNS request mapping into more than one DNS resolver such that an attack on one server should not affect the entire DNS services. Our approach uses the Multi-Protocol Label Switching (MPLS) along with multi-path routing to achieve this goal. Also, we use threshold secret sharing to code the distributed DNS requests. Our findings and results show that this approach performs better when compared with the traditional DNS structure.

A switching approach to event-triggered control systems under denial-of-service attacks

This paper addresses the resilient event-triggered control (ETC) of networked control systems under denial-of-service (DoS) attacks. The scenario in which the presence of DoS attacks limits the data rate is studied considering a deterministic DoS attack model that constrains the frequency and duration of the DoS attack sequence in an average sense. Based on a switching approach, constructive sufficient conditions are proposed to design the resilient ETC scheme in both emulation and co-design approaches. The conditions establish a limitation to the average DoS frequency and duration such that the exponential stability of the closed-loop equilibrium and the Zeno-freeness is guaranteed even in the presence of DoS attacks. Moreover, optimization problems subject to LMI constraints are formulated to solve the emulation and co-design problems by enlarging the resilience to the considered class of DoS attacks while the number of transmissions is reduced. This establishes a clear trade-off between resilience and resource awareness in networked control systems under DoS attacks. The effectiveness of the proposed conditions is illustrated in two numerical examples.

Achieving model explainability for intrusion detection in VANETs with LIME.

Vehicular ad hoc networks (VANETs) are intelligent transport subsystems; vehicles can communicate through a wireless medium in this system. There are many applications of VANETs such as traffic safety and preventing the accident of vehicles. Many attacks affect VANETs communication such as denial of service (DoS) and distributed denial of service (DDoS). In the past few years the number of DoS (denial of service) attacks are increasing, so network security and protection of the communication systems are challenging topics; intrusion detection systems need to be improved to identify these attacks effectively and efficiently. Many researchers are currently interested in enhancing the security of VANETs. Based on intrusion detection systems (IDS), machine learning (ML) techniques were employed to develop high-security capabilities. A massive dataset containing application layer network traffic is deployed for this purpose. Interpretability technique Local interpretable model-agnostic explanations (LIME) technique for better interpretation model functionality and accuracy. Experimental results demonstrate that utilizing a random forest (RF) classifier achieves 100% accuracy, demonstrating its capability to identify intrusion-based threats in a VANET setting. In addition, LIME is applied to the RF machine learning model to explain and interpret the classification, and the performance of machine learning models is evaluated in terms of accuracy, recall, and F1 score.

Robust Stabilization of Linear Time-Delay Systems under Denial-of-Service Attacks.

This research examines new methods for stabilizing linear time-delay systems that are subject to denial-of-service (DoS) attacks. The study takes into account the different effects that a DoS attack can have on the system, specifically delay-independent and -dependent behaviour. The traditional proportional-integral-derivative (PID) acts on the error signal, which is the difference between the reference input and the measured output. The approach in this paper uses what we call the PID state feedback strategy, where the controller acts on the state signal. Our proposed strategy uses the Lyapunov-Krasovskii functional (LKF) to develop new linear matrix inequalities (LMIs). The study considers two scenarios where the time delay is either a continuous bounded function or a differentiable and time-varying function that falls within certain bounds. In both cases, new LMIs are derived to find the PID-like state feedback gains that will ensure robust stabilization. The findings are illustrated with numerical examples.

Distributed secure formation control for autonomous surface vessels by performance adjustable event‐triggered mechanism

AbstractThis article studies the secure formation control problem for autonomous surface vessels (ASVs) with directed event‐triggered communication subject to denial‐of‐service (DoS) attacks. DoS attack is a type of cyber‐attacks meant to cut down a network, thus causing legitimate neighbors to lose their expected communication in the control mechanism. A distributed secure formation control algorithm (DSFCA) is proposed to mitigate the negative impact of DoS attacks. Specifically, a model‐based dynamic event‐triggered mechanism (DETM) with positive minimum inter‐event times (MIET) is developed to save communication resources. Wherein, a clock‐like dynamic is chosen to guarantee the non‐Zeno behavior and provide a positive MIET guarantee. Simultaneously, a model‐based state estimator (MBSE) is designed in DETM to reduce the effect of the error caused by DETM during the triggering interval. Furthermore, the effects of DoS attacks on the formation control systems are analyzed. Some sufficient conditions are derived, in which the upper bounds of attack duration rate and attack frequency are given. Finally, numerical simulations are provided to verify the effectiveness of the proposed control scheme.

Conditional Tabular Generative Adversarial Based Intrusion Detection System for Detecting Ddos and Dos Attacks on the Internet of Things Networks

The increasing use of Internet of Things (IoT) devices has led to a rise in Distributed Denial of Service (DDoS) and Denial of Service (DoS) attacks on these networks. These attacks can have severe consequences, resulting in the unavailability of critical services and financial losses. In this paper, we propose an Intrusion Detection System (IDS) based on a Conditional Tabular Generative Adversarial Network (CTGAN) for detecting DDoS and DoS attacks on IoT networks. Our CGAN-based IDS utilizes a generator network to produce synthetic traffic that mimics legitimate traffic patterns, while the discriminator network learns to differentiate between legitimate and malicious traffic. The syntactic tabular data generated by CTGAN is employed to train multiple shallow machine-learning and deep-learning classifiers, enhancing their detection model performance. The proposed approach is evaluated using the Bot-IoT dataset, measuring detection accuracy, precision, recall, and F1 measure. Our experimental results demonstrate the accurate detection of DDoS and DoS attacks on IoT networks using the proposed approach. Furthermore, the results highlight the significant contribution of CTGAN in improving the performance of detection models in machine learning and deep learning classifiers.

Resilient distributed model‐free adaptive predictive control for multiarea power systems under denial of service attack

AbstractThis paper proposes a novel load frequency control (LFC) strategy for power systems based on distributed model‐free adaptive predictive control. First, a power system dynamic model is established by the input and output signals of the power system. Then, a distributed model‐free adaptive predictive control algorithm is established for the power system under denial‐of‐service attack by the established power system dynamic model, and a predictive compensation algorithm is designed to compensate the impact of DoS attack. Based on the designed distributed model‐free adaptive predictive control algorithm, the frequency tracking error of the multiarea power system is bounded. The scheme is independent of the structure of the power system and does not need to measure any state signals of the power system, relying only on the input and output data of the power system. The results of simulations demonstrate the effectiveness and superiority of the design.

Event-triggered [formula omitted] stabilization of networked cascade control systems under periodic DoS attack: A switching approach

This paper deals with the H∞ control design for the networked cascade control systems (NCCSs) subject to periodic denial-of-service (DoS) attack. The controller structure is based on the state-feedback controller for the both control loops. The communication network of the primary loop is equipped with an event-triggered mechanism while the network is under periodic DoS attack. For stability analysis and controller design, the mathematical model of the closed-loop system is formulated based on the switching systems approach. By using the piecewise Lyapunov-functional-based approach and average dwell time techniques, some stability and stabilization criteria are derived and presented in the form of linear matrix inequalities (LMIs). Finally, an steam temperature cascade control system is utilized as a practical example to demonstrate the effectiveness of the proposed method.

Robust data‐driven iterative learning control for nonlinear cyber‐physical systems

AbstractThis article mainly studies the problem of the robust security iterative learning control for nonlinear cyber‐physical systems, which suffer from external disturbances and denial‐of‐service (DoS) attacks. First, the nonlinear system can be transformed into an iterative linear data model, which is only used for the controller parameter design and the stability analysis without the physical meaning. Then, an extended state observer is introduced to estimate external disturbances along the iteration axis. At the same time, considering the influence of DoS attacks, an attack compensation mechanism is designed for DoS attacks along the iteration axis. In addition, an iterative‐varying penalty is designed to accelerate the convergence of the tracking error. Further, the mathematical induction is used to decouple the control input from the tracking error and the compression mapping principle is utilized to prove that the tracking error is ultimately bounded under the influence of disturbances and DoS attacks. Finally, the main results are verified by the motor simulation.

Security control based on variable‐step predictive approach for networked control system with denial‐of‐service attacks

AbstractThis paper investigates the variable‐step predictive control problem for networked control system (NCS) with denial‐of‐service (DoS) attacks and model uncertainty. An event‐based variable‐step predictive scheme determined by accumulated error is firstly formulated to compensate the impact of DoS attacks. Based on the presence of DoS attacks and predictive control signals, NCS with DoS attacks is divided into three different operation modes and is described by switching system. With the above prediction scheme and system model, sufficient conditions are derived for ensuring the stability of the underlying system. Finally, an example is given to verify the validity of the theoretical results.

Interval observer based event-triggered consensus control of networked multi-agent systems under DoS attacks

This paper presents an interval observer (IO) based event-triggered control strategy for networked multi-agent systems (MASs) under denial of service (DoS) attacks. The most significant contribution is the proposal of a new event-triggered controller based on distributed IO. Toward this, first, a new distributed IO based on output information is first constructed to estimate the state interval of each agent in the networked MASs. Then a novel distributed IO based event-triggered control (ETC) protocol is constructed using only the information observed by IO. Moreover, it turns out that based on the designed IO based ETC protocol, all agents can reach secure consensus exponentially and Zeno behavior is excluded. Finally, simulation example is used to verify the feasibility of the constructed IO based ETC protocol.

DoSDefender: A Kernel-Mode TCP DoS Prevention in Software-Defined Networking.

The limited computation resource of the centralized controller and communication bandwidth between the control and data planes become the bottleneck in forwarding the packets in Software-Defined Networking (SDN). Denial of Service (DoS) attacks based on Transmission Control Protocol (TCP) can exhaust the resources of the control plane and overload the infrastructure of SDN networks. To mitigate TCP DoS attacks, DoSDefender is proposed as an efficient kernel-mode TCP DoS prevention framework in the data plane for SDN. It can prevent TCP DoS attacks from entering SDN by verifying the validity of the attempts to establish a TCP connection from the source, migrating the connection, and relaying the packets between the source and the destination in kernel space. DoSDefender conforms to the de facto standard SDN protocol, the OpenFlow policy, which requires no additional devices and no modifications in the control plane. Experimental results show that DoSDefender can effectively prevent TCP DoS attacks in low computing consumption while maintaining low connection delay and high packet forwarding throughput.

Security concerns overIoTrouting using emerging technologies: A review

AbstractThe Internet of Things (IoT) provides a way to reach every hidden corner of the universe and provides valuable information for exploring the universe. With the advancement of hardware and computing technologies, IoT systems are developed based on systematically designed architectures. This paper discussed the routing protocol for low power lossy network (RPL) protocol's security vulnerabilities and proposed solutions. This review provides the main aspects of an IoT stack model with application, perception, and network layers. Then, the details and security concerns of the RPL protocol are given with the comparison of different frameworks. Different kinds of attacks, such as Wormhole, Sinkhole, and Denial of service attacks, are provided with the solution of defense‐based, threshold‐based, and trust‐supported based cryptography. Also, reviewed IoT security literature and focused on IoT security challenges and their solutions using emerging technologies like Machine Learning (ML), Blockchain, and Cloud Storage. A comparison and analysis of emerging technologies in the context of IoT security are also discussed. Due to the vulnerability of IoT devices, the scale of deployment, the attacks and suggested solutions are increased with scope and scale. In addition, related RPL‐based protocols are compared regarding energy efficiency, flexibility, scalability, robustness, and security. In the end, research challenges are identified, and future research direction for IoT security is suggested.

Secure synchronization control for a class of complex time-Delay dynamic networks against denial-of-service attacks

In this paper, the secure synchronization control problem of a class of complex time-delay dynamic networks (CTDDNs) under denial of service (DoS) attacks is studied. Based on the pinning control strategy, a non-fragile sampling controller is designed for a small number of nodes in the complex network. It can effectively solve the problem of limited communication resources and has good anti-interference performance. In order to resist the influence of DoS attacks, an improved comparator algorithm is designed to obtain the specific information of DoS attacks, including the upper and lower bounds of the DoS attacks duration, the DoS attacks frequency and the specific active/sleeping interval of DoS attacks. Based on Lyapunov stability theory and by designing the pinning non-fragile sampling controller, new security synchronization criteria are established for CTDDNs. Finally, two numerical examples are given to verify the validity of the theories.

Quantization-Based Event-Triggered Consensus of Multiagent Systems Against Aperiodic DoS Attacks

This article focuses on the secure consensus problem of linear multiagent systems (MASs) with quantized event-triggered control (ETC) against denial-of-service (DoS) attacks. DoS attacks with constrains on frequency and duration are discussed, which intend to block the communication links between agents to destroy the consensus. Due to the limited transmission capacity and communication resources, a uniform quantizer and an event-triggered mechanism (ETM) are considered to economize energy consumption. An ETC protocol based on the quantized relative state is designed to resist malicious DoS attacks. Then, sufficient conditions to guarantee the practical consensus of MASs are derived with finite data transmission rates, and the tolerance of DoS attack frequency and duration are given. The Zeno behavior does not exhibit by proving that lower positive bounds exist for all agents, indicating the feasibility of the proposed ETM. Finally, two simulation examples are given to verify the validity and superiority of the theoretical results.

Distributed Hybrid-Triggering-Based Secure Dispatch Approach for Smart Grid Against DoS Attacks

This economic dispatch problem has been tended to be solved by using distributed optimization algorithms which are easier to suffer from diversified cyberattacks, e.g., the denial-of-service (DoS) attacks. It leads to enormous secure risks for the economic operation of smart grid. To address this issue, this article aims to propose a distributed secure dispatch method to effectively defend the DoS attacks. First, considering the coexistence of the attack sequence and triggering sequence, the actual affected period and actual safe period are analyzed and defined. It provides an analysis model for the subsequent algorithm design. Then, by designing switched system dynamics along with hybrid-triggering concept, a novel distributed secure dispatch strategy is presented. The proposed method can enable each distributed generator (DG) to reasonably use estimation values and switched rate of system evolution to mitigate the effect of the DoS attacks. Meanwhile, contributed by the designed hybrid-triggering communication strategy, the proposed method takes advantages of reduced communication costs, flexible execution, and fast and reliable communication recuperation among DGs. With those efforts, the proposed method is capable of high robustness to resist the DoS attacks well. Moreover, theoretically analytic results are proposed to verify the correctness of the proposed method. Finally, simulation results are provided to show the feasibility and effectiveness of the proposed method.