Attack Mitigation in Gateways of Pervasive Systems

TL;DR

This paper presents a traffic shaping, attack detection, and mitigation scheme for Gateway Servers in pervasive systems, validated through experiments and an analytical model to enhance cybersecurity defenses.

Contribution

It introduces a novel attack mitigation approach combining traffic shaping and detection, with an analytical model for optimal parameter selection validated experimentally.

Findings

Effective attack mitigation reduces system vulnerability

Analytical model accurately predicts optimal mitigation parameters

Experimental validation confirms approach's practicality

Abstract

In pervasive systems, mobile devices and other sensors access Gateways, which are Servers that communicate with the devices, provide low latency services, connect them with each other, and connect them to the Internet and backbone networks. Gateway Servers are often equipped with Attack Detection (AD) software that analyzes the incoming traffic to protect the system against Cyberattacks, which can overwhelm the Gateway and the system as a whole. This paper describes a traffiic shaping, attack detection and an optimum attack mitigation scheme to protect the Gateway and the system as a whole from Cyberattacks. The approach is described and evaluated in an experimental testbed. The key parameter of the optimum mitigation technique is chosen based on an analytical model whose predictions are validated through detailed experiments.