Skip to Main content Skip to Navigation
Conference papers

Dynamic Parameter Reconnaissance for Stealthy DoS Attack within Cloud Systems

Abstract : Public IaaS cloud environments are vulnerable to misbehaving applications and virtual machines. Moreover, cloud service availability, reliability, and ultimately reputation is specifically at risk from Denial of Service forms as it is based on resource over-commitment.In this paper, we describe a stealthy randomised probing strategy to learn thresholds used in the process of taking migration decisions in the cloud (i.e. reverse engineering of migration algorithms). These discovered thresholds are used to design a more efficient, harder to detect, and robust cloud DoS attack family. A sequence of tests is designed to extract and reveal these thresholds; these are performed by coordinating stealthily increased resource consumption among attackers whilst observing cloud management reactions to the increased demand. We can learn the required parameters by repeating the tests, observing the cloud reactions, and analysing the observations statistically. Revealing these hidden parameters is a security breach by itself; furthermore, they can be used to design a hard-to-detect DoS attack by stressing the host resources using a precise amount of workload to trigger migration. We design a formal model for migration decision processes, create a dynamic algorithm to extract the required hidden parameters, and demonstrate the utility with a specimen DoS attack.
Complete list of metadata

Cited literature [11 references]  Display  Hide  Download
Contributor : Hal Ifip Connect in order to contact the contributor
Submitted on : Monday, November 28, 2016 - 2:46:35 PM
Last modification on : Friday, November 17, 2017 - 1:10:01 PM
Long-term archiving on: : Tuesday, March 21, 2017 - 2:52:13 AM


Files produced by the author(s)


Distributed under a Creative Commons Attribution 4.0 International License



Suaad Alarifi, Stephen Wolthusen. Dynamic Parameter Reconnaissance for Stealthy DoS Attack within Cloud Systems. 15th IFIP International Conference on Communications and Multimedia Security (CMS), Sep 2014, Aveiro, Portugal. pp.73-85, ⟨10.1007/978-3-662-44885-4_6⟩. ⟨hal-01404188⟩



Record views


Files downloads