Back To Schedule
Monday, July 8 • 10:00am - 10:15am
DynaShield: Reducing the Cost of DDoS Defense using Cloud Services

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Fueled by IoT botnets and DDoS-as-a-Service tools, distributed denial of service (DDoS) attacks have reached record high volumes. Although there exist DDoS protection services, they can be costly for small organizations as well as individual users. In this paper, we present a low-cost DDoS solution, DynaShield, which a user can deploy at common cloud service providers. DynaShield employs three techniques to reduce cost. First, it uses an on-demand model. A server dynamically updates its DNS record to redirect clients’ traffic to DynaShield when it is under attack, avoiding paying for cloud services during peacetime. Second, DynaShield combines serverless functions and elastic servers provided by cloud providers to auto-scale to large attacks without overprovisioning. Third, DynaShield uses cryptocurrency puzzles as proof of work. The coin mining profit can further offset a protected server’s cloud service charges. Our preliminary evaluation suggests that DynaShield can cost as little as a few dollars per month to prevent an organization from common DDoS attacks.


Shengbao Zheng

Duke University

Xiaowei Yang

Duke University

Monday July 8, 2019 10:00am - 10:15am PDT
HotCloud: Grand Ballroom VII–IX