Performance Analysis of SDP For Secure Internal Enterprises
- 1 April 2019
- conference paper
- Published by Institute of Electrical and Electronics Engineers (IEEE)
- p. 1-6
Abstract
Security has become of paramount importance in recent times, especially due to the advent of cloud computing and Internet of Things. With so many devices in the mix, users have the choice of working from anywhere they want. But it also raises the possibility of being able to multiply the impact of any attack by using all devices at hand. Another important aspect to consider is the prevention of access to sensitive data by unauthorized users using authorized machines. Software Defined Perimeter (SDP) provides one such solution. It aims to only allow traffic from authorized users and machines to a hidden resource. This paper discusses the SDP concept and analyzes its performance in the event of a Distributed Denial of Service (DDoS) attack under two different environments - one virtual and one real-world. The results indicate that SDP provides a resilient method for protection again DDoS attacks. While it requires slightly more time for connection setup, it is offset by its exceptional performance even under duress.Keywords
This publication has 11 references indexed in Scilit:
- Secure Data Access Control With Ciphertext Update and Computation Outsourcing in Fog Computing for Internet of ThingsIEEE Access, 2017
- A Replay-Attack Resistant Authentication Scheme for the Internet of Things2017
- Internet Protocol Identification Number Based Ideal Stealth Port Scan Detection Using Snort2016
- A map of the clouds: Virtual network mapping in cloud computing data centers2014
- Resource allocation in a network-based cloud computing environment: design challengesIEEE Communications Magazine, 2013
- A resource scheduling model for cloud computing data centers2013
- DDoS defense by offenseACM Transactions on Computer Systems, 2010
- Combining Speak-Up with DefCOM for Improved DDoS Defense2008
- A Framework for a Collaborative DDoS DefenseTwenty-Third Annual Computer Security Applications Conference (ACSAC 2007), 2006
- Detecting Masquerading Attack in Software and in Hardware2006