Banner image placeholder
Banner image
Site avatar
Alex Carrega
Ph.D. IT & Network Engineer

Curriculum vitae



+39 348-74.85.497


TNT Lab @ UniGe

CNIT

via Opera Pia 13, 16154 Genoa, Italy



Automating Mitigation of Amplification Attacks in NFV Services


Journal article


Matteo Repetto, Gianmarco Bruno, Jalolliddin Yusupov, Guerino Lamanna, Benjamin Ertl, Alessandro Carrega
IEEE Transactions on Network and Service Management, vol. 19, 2022, pp. 2382-2396


Cite

Cite

APA   Click to copy
Repetto, M., Bruno, G., Yusupov, J., Lamanna, G., Ertl, B., & Carrega, A. (2022). Automating Mitigation of Amplification Attacks in NFV Services. IEEE Transactions on Network and Service Management, 19, 2382–2396. https://doi.org/10.1109/TNSM.2022.3172880


Chicago/Turabian   Click to copy
Repetto, Matteo, Gianmarco Bruno, Jalolliddin Yusupov, Guerino Lamanna, Benjamin Ertl, and Alessandro Carrega. “Automating Mitigation of Amplification Attacks in NFV Services.” IEEE Transactions on Network and Service Management 19 (2022): 2382–2396.


MLA   Click to copy
Repetto, Matteo, et al. “Automating Mitigation of Amplification Attacks in NFV Services.” IEEE Transactions on Network and Service Management, vol. 19, 2022, pp. 2382–96, doi:10.1109/TNSM.2022.3172880.


BibTeX   Click to copy

@article{repetto2022a,
  title = {Automating Mitigation of Amplification Attacks in NFV Services},
  year = {2022},
  journal = {IEEE Transactions on Network and Service Management},
  pages = {2382-2396},
  volume = {19},
  doi = {10.1109/TNSM.2022.3172880},
  author = {Repetto, Matteo and Bruno, Gianmarco and Yusupov, Jalolliddin and Lamanna, Guerino and Ertl, Benjamin and Carrega, Alessandro}
}

How can network operators detect and mitigate amplification attacks efficiently, without disrupting existing virtualized network services?

Our research presents ASTRID, a security framework integrating lightweight eBPF-based inspection, dynamically deployed security sidecars, ARIMA-based anomaly detection, and policy-driven automated mitigation.

The architecture enables adaptive monitoring through three operational states: BAU → WARN → ALARM, progressively activating deeper inspection and traffic filtering at the 5G network edge.

Experimental results demonstrate efficient packet processing, reduced CPU overhead compared with Zeek, and effective detection of amplification attacks under varying traffic conditions.

ASTRID, a security framework integrating lightweight eBPF-based inspection, dynamically deployed security sidecars, ARIMA-based anomaly detection, and policy-driven automated mitigation. The architecture enables adaptive monitoring through three operational states: BAU → WARN → ALARM, progressively activating deeper inspection and traffic filtering at the 5G network edge. Experimental results demonstrate efficient packet processing, reduced CPU overhead compared with Zeek, and effective detection of amplification attacks under varying traffic conditions.

🛡️ When Manga Meets Cybersecurity: Defending 5G Networks Against DDoS Attacks! ⚡

What if we could stop amplification attacks before they overwhelm the Internet?

Meet ASTRID, a framework combining Network Function Virtualization (NFV), eBPF-based monitoring, intelligent anomaly detection, and automated mitigation.

Through a manga-inspired journey, discover how compromised devices launch attacks, how suspicious traffic is detected, and how adaptive security mechanisms protect virtualized 5G networks at the edge.

What if we could stop amplification attacks before they overwhelm the Internet? Meet ASTRID, a framework combining Network Function Virtualization (NFV), eBPF-based monitoring, intelligent anomaly detection, and automated mitigation. Through a manga-inspired journey, discover how compromised devices launch attacks, how suspicious traffic is detected, and how adaptive security mechanisms protect virtualized 5G networks at the edge.


Share

Text Only Owlstown
QR Code
Translate to