A Dynamic Deployment Method of Security Services Based on Malicious Behavior Knowledge Base.

Area of Science:

• Computer Science
• Network Security
• Cybersecurity

Background:

• Distributed Denial of Service (DDoS) attacks pose significant threats to network availability.
• Existing methods struggle with flexibly combining diverse security services and leveraging their information effectively.
• Dynamic deployment and configuration of security services are crucial for addressing evolving threats.

Purpose of the Study:

• To develop a system for dynamic deployment and configuration of security service function chains.
• To enhance the coordinated utilization of various security services for improved network defense.
• To leverage a malicious behavior knowledge base for intelligent security policy generation.

Main Methods:

• Integration of a malicious behavior knowledge base with reasoning capabilities.
• Dynamic deployment of service function chains based on knowledge base analysis.
• Feedback loop mechanism where security service information updates the knowledge base.
• Dynamic configuration and distribution of security service policies.

Main Results:

• Achieved dynamic arrangement of security services for different network traffic patterns.
• Demonstrated coordinated use of multiple security services, improving overall detection.
• Experimental results show network detection rates of 99% for UDP and 88% for TCP traffic against DDoS attacks.
• Validated effective performance against multiple DDoS attack types.

Conclusions:

• The proposed method enables flexible and dynamic security service orchestration.
• The knowledge base-driven approach significantly enhances the detection performance against DDoS attacks.
• This system offers a robust solution for adaptive network security in the face of complex threats.