DeMONS++: Utilizando Técnicas de Modelagem de Tráfego no Combate de DDoS via Serviço DeMONS

With the increasing use and popularity of computer networks, datasecurity and online service availability have become priority concernsfor academia and industry. One of the significant threats to beprevented, detected, and mitigated is the Distributed Denial of Service(DDoS) attack. With the advancement of new technologies andnetwork paradigms, these attacks have been tackled by innovativesolutions such as mitigation services based on Network FunctionVirtualization (NFV), which was utilized to develop the DeMONSservice, a solution for DDoS mitigation. Despite its effectiveness,DeMONS’ results can be enhanced by introducing new traffic engineeringmodules. In this way, this paper presents DeMONS++, anextension of DeMONS that incorporates a strategically positionedtraffic shaping module within its service topology. Experiments conductedin simulated environments demonstrated that DeMONS++improves DDoS mitigation, achieving better performance in metricssuch as benign traffic acceptance and user satisfaction in the testedscenarios.