ROSE⁺ : A Robustness-Optimized Security Scheme Against Cascading Failures in Multipath TCP under LDDoS Attack Streams

Multipath TCP leverages parallel data transmission across multiple paths to improve transmission rates, reliability, and resource utilization. However, Multipath TCP faces severe network security and communication reliability challenges when exposed to low-rate distributed denial-of-service (LDDoS) attacks. In this paper, we propose a robustness optimization security scheme against cascading failures in Multipath TCP (ROSE<sup xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">+</sup>) to tackle the challenges posed by Low-rate Distributed Denial of Service (LDDoS) attacks on network security and communication reliability. The scheme integrates the intricate network load-capacity cascading failures model and leverages the unique characteristics of multipath TCP to facilitate the redistribution of load traffic at ineffectiveness nodes, thereby alleviating the cascading failures induced by LDDoS attack streams. Additionally, we optimize the robustness of communication transmission systems by devising a load-capacity cascading failures model. The experimental results demonstrate that the scheme reduces the probability of cascading failures by 20.07%. This research provides new ideas and methods to improve the robustness and destruction resistance of multipath TCP transmission.