@conference {334,
	title = {Automatic Feedback Control for Graceful Degradation of Real-Time Services in the Face of an Attack},
	booktitle = {2018 IEEE 4th International Conference on Collaboration and Internet Computing (CIC)},
	year = {2018},
	month = {Oct},
	abstract = {<p>Distributed denial of service (DDoS) attacks continue to pose a serious threat to various businesses and consumers. With the growth in the number of devices connected to the internet, these attacks continue to grow in number. Despite the availability of security tools, the attacks continue to happen and are causing various businesses to sweat. These tools may take anywhere from a few hours to a few days to counter the attacks, which is unacceptable. In this paper, we put forth a novel feedback control mechanism to minimize the effect of volumetric attacks such as DDoS. During an attack, the feedback control model detects and reduces the impact of the attack by maintaining the service level agreements (SLA) of the network service. The controller makes intelligent decisions to ensure the quality of service (QoS) metrics are gracefully degraded by tuning the micro-firewall rules such as the committed information rate and burst size. A proportional Integral (PI) controller is used as a closed-loop feedback controller to maintain the stability of the network in spite of an attack. This proposed architecture is verified in a lab setup, and we observe that we are able to minimize the degradation of the real-time service so that the user{\textquoteright}s quality of experience (QoE) is preserved. We validate the proposed architecture with a model generated by using the system identification technique. Results from the setup show that the closed-loop feedback control model stabilizes the network in real-time.</p>
},
	keywords = {authorisation, automatic feedback control, closed loop systems, closed-loop feedback control model, Computer crime, computer network management, computer network security, DDoS, Distributed Denial of Service attacks, feedback control, Graceful Degradation, Internet, Mathematical model, network service, Packet loss, PI control, proportional Integral controller, QoE, QoS, quality of experience, quality of service, Real Time Services, real-time service, real-time systems, Resilient, service level agreements, service metrics, SLA, state space, Streaming media, System Identification, volumetric attacks},
	doi = {10.1109/CIC.2018.00-37},
	author = {Vempati, Jagannadh and Ram Dantu}
}
@conference {340,
	title = {Uninterrupted Video Surveillance in the Face of an Attack},
	booktitle = {2018 17th IEEE International Conference On Trust, Security And Privacy In Computing And Communications/ 12th IEEE International Conference On Big Data Science And Engineering (TrustCom/BigDataSE)},
	year = {2018},
	month = {Aug},
	abstract = {<p>Distributed denial of service (DDoS) attacks continue to plague businesses and consumers alike, and due to an ever-growing digital landscape, these attacks are expected to grow in size and complexity. Current mitigation techniques ranging from hours to days are completely unacceptable given the cost and inconvenience these attacks place in our society. This paper puts forth three feedback control mechanisms to minimize the effects of DDoS attacks on real-time traffic. The first, called differentiated services code point (DSCP) Markdown, is a passive approach that uses micro firewall rules to lower the priority of out-of-profile packets while a second mechanism actively drops the out-of-profile packets based on rate and burst size parameters. The third technique uses parallel links when feedback is applied to stabilize the network after an attack has been detected. Results from all three techniques have shown to have a positive effect on real-time traffic. The first two approaches were able to stabilize network traffic in real-time, while the parallel links technique resulted in a slight delay. We validate the feedback mechanisms with our model that was generated using the system identification technique. Results show that the feedback architecture provides a fit accuracy with positive results.</p>
},
	keywords = {attack mitigation techniques, authorisation, autoregressive processes, burst size parameters, Computer crime, computer network security, DDoS, DDoS attacks, differentiated services code point markdown, DiffServ networks, distributed denial of service attack, DSCP, DSCP Markdown approach, feedback control, feedback mechanisms, Internet, IP networks, Jitter, Mathematical model, micro-firewall, out-of-profile packets, parallel links technique, QoS, quality of service, real-time services, real-time systems, Resilient, Streaming media, system identification technique, uninterrupted video surveillance, video surveillance},
	doi = {10.1109/TrustCom/BigDataSE.2018.00121},
	author = {Vempati, Jagannadh and Ram Dantu and Thompson, Mark}
}
