ML Inferencing for DDoS Attack Detection in Heterogeneous & Constrained Environments

GitHub Repo

Description:
In light of the recent explosion in Internet of Things (IoT) device adoption, security vulnerabilities, particularly those associated with Distributed Denial of Service (DDoS) attacks, have become more acute. Our earlier work focused on an LSTM-driven model capable of identifying advanced DDoS threats, but was largely validated on synthetic datasets. To overcome this limitation, we engineered a test environment using Raspberry Pi units that replicate the intricacies of a comprehensive IoT network. This infrastructure enables us to generate authentic DDoS attack scenarios involving IoT devices and assess the efficacy of various DDoS mitigation strategies.

You can access a short video about our project here

In this project, I was responsible for:
1. Designed a Raspberry Pi (Rpi) based IoT simulation framework for slow-rate DDoS attacks, modeling complex network topologies and behaviors for rigorous security analysis.
2. Developed a time-step-driven node activity simulation, leveraging real-world IoT dataset to emulate nuanced network traffic patterns on 50 Rpis.
3. Conducted a large-scale Mininet-based DDoS attack simulation on the server, emulating realistic network traffic patterns.
4. Implemented an efficient model inference framework on Rpis, utilizing a FIFO queue for data acquisition and TensorFlow for real-time DDoS attack identification.
5. Employed the Spatio-Temporal Graph Convolutional Network (ST-GCN) architecture for sophisticated DDoS attack detection, extracting spatio-temporal features and predicting attack occurrences.

Paper related to this project:
[1] Jiahe Zhang, Tamoghna Sarkar, Arvin Hekmati, Bhaskar Krishnamachari, “Demo Abstract- CUDDoS: Correlation-aware Ubiquitous Detection of DDoS in IoT Systems”, to appear in Proceedings of the 21st ACM Conference on Embedded Networked Sensor Systems (SenSys 2023)
[2] Arvin Hekmati, Jiahe Zhang, Tamoghna Sarkar, Nishant Jethwa, Eugenio Grippo, Bhaskar Krishnamachari, “Correlation-Aware Neural Networks for DDoS Attack Detection In IoT Systems”, submitted to IEEE/ACM Transactions on Networking (IF: 3.7, SCI Q1)

Note: This is an ongoing project.