{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,9,29]],"date-time":"2025-09-29T08:12:31Z","timestamp":1759133551055},"reference-count":45,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2018,6]]},"DOI":"10.1109\/netsoft.2018.8459910","type":"proceedings-article","created":{"date-parts":[[2018,9,13]],"date-time":"2018-09-13T21:43:41Z","timestamp":1536875021000},"page":"46-54","source":"Crossref","is-referenced-by-count":7,"title":["A Security Orchestration System for CDN Edge Servers"],"prefix":"10.1109","author":[{"given":"Elaheh","family":"Jalalpour","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Milad","family":"Ghaznavi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Daniel","family":"Migault","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Stere","family":"Preda","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Makan","family":"Pourzandi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Raouf","family":"Boutaba","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"journal-title":"Technical Details behind A 400Gbps NTP Amplification DDoS Attack","year":"0","author":"prince","key":"ref39"},{"key":"ref38","article-title":"Improving content delivery using provider-aided distance information","author":"poese","year":"2010","journal-title":"ACM IMC"},{"key":"ref33","article-title":"On dominant characteristics of residential broadband internet traffic","author":"maier","year":"2009","journal-title":"ACM IMC"},{"key":"ref32","article-title":"Drawbridge: Software-defined ddos-resistant traffic engineering","author":"li","year":"2014","journal-title":"ACM"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/COMPSAC.2016.219"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2011.09.014"},{"key":"ref37","first-page":"200502","author":"moses","year":"2005","journal-title":"eXtensible Access Control Markup Language (XACML) Version 2 0"},{"key":"ref36","first-page":"2","article-title":"Docker: lightweight linux containers for consistent development and deployment","author":"merkel","year":"2014","journal-title":"Linux Journal"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/67544.66946"},{"key":"ref34","article-title":"The bsd packet filter: A new architecture for user-level packet capture","author":"mccanne","year":"1993","journal-title":"USENIX"},{"journal-title":"Sandvine global internet phenomena report 2h-2013","year":"2013","key":"ref10"},{"key":"ref40","article-title":"Network Service Header (NSH). Internet-Draft draft-ietf-sfc-nsh-28","author":"quinn","year":"2017","journal-title":"Work in Progress"},{"journal-title":"Network Function Virtualisation (NFV) Management and Orchestration","year":"2014","key":"ref11"},{"journal-title":"Network functions virtualisation (nfv) release 3 security security management and monitoring specification","year":"2014","key":"ref12"},{"journal-title":"Cloudflare rate limiting","year":"2017","key":"ref13"},{"journal-title":"Ddos prevention Ddos protection product I defencepro","year":"2017","key":"ref14"},{"journal-title":"Defend http rate limiting Stop application layer ddos attacks at the edge of the internet","year":"2017","key":"ref15"},{"journal-title":"Owasp modsecurity core rule set project","year":"2017","key":"ref16"},{"journal-title":"Web application ddos protection I layer 3–4 and 7 I incapsula","year":"2017","key":"ref17"},{"journal-title":"What is rate limiting?","year":"2017","key":"ref18"},{"key":"ref19","article-title":"Holistic ddos mitigation using nfv","author":"alharbi","year":"2017","journal-title":"2017 IEEE CCWC"},{"key":"ref28","article-title":"Traffic types and growth in backbone networks","author":"gerber","year":"2011","journal-title":"OSA OFC NFOEC"},{"journal-title":"Global ddos threat landscape q3","year":"2016","key":"ref4"},{"key":"ref27","article-title":"Bohatei: Flexible and elastic ddos defense","author":"fayaz","year":"2015","journal-title":"USENIX conference on Security symposium"},{"journal-title":"Fastly ddos mitigation","year":"0","key":"ref3"},{"journal-title":"Open Vswitch","year":"0","key":"ref6"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2015.116"},{"journal-title":"Netflix Open Connect","year":"0","key":"ref5"},{"journal-title":"Assign interrupts to processor cores on intel ethernet controller","year":"2009","key":"ref8"},{"journal-title":"What to look for when choosing a cdn for ddos protection","year":"0","key":"ref7"},{"journal-title":"Cdn hosting vs traditional web hosting","year":"0","key":"ref2"},{"journal-title":"Ways to improve performance of your server in modsecurity 2 5","year":"2009","key":"ref9"},{"journal-title":"Akamai's [state of the internet] \/ security q3 2016 report","year":"0","key":"ref1"},{"key":"ref20","doi-asserted-by":"crossref","DOI":"10.1145\/2774993.2774998","article-title":"Programming slick network functions","author":"anwer","year":"2015","journal-title":"ACM SOSR"},{"key":"ref45","article-title":"Senss: Software defined security service","author":"yu","year":"2014","journal-title":"ONS"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/2934872.2934875"},{"key":"ref21","first-page":"247","author":"baral","year":"1997","journal-title":"Formal characterizations of active databases Part II"},{"key":"ref42","article-title":"Content delivery networks: protection or threat?","author":"triukose","year":"2009","journal-title":"ESORIS"},{"key":"ref24","doi-asserted-by":"crossref","DOI":"10.14722\/ndss.2016.23442","article-title":"Forwarding-loop attacks in content delivery networks","author":"chen","year":"2016","journal-title":"the 23st Annual Network and Distributed System Security Symposium"},{"key":"ref41","article-title":"Design and implementation of a consolidated middlebox architecture","author":"sekar","year":"2012","journal-title":"NSDI"},{"key":"ref23","article-title":"On transaction boundaries in active databases: a performance perspective","author":"carey","year":"1991","journal-title":"IEEE TKDE"},{"key":"ref44","article-title":"Monitoring the application-layer ddos attacks for popular websites","author":"xie","year":"2009","journal-title":"IEEE\/ACM Trans Netw"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-50345-5_9"},{"journal-title":"The continued rise of ddos attacks","year":"2013","author":"wueest","key":"ref43"},{"key":"ref25","article-title":"A selective defense for application layer ddos attacks","author":"dantas","year":"2014","journal-title":"IEEE JISIC"}],"event":{"name":"2018 4th IEEE Conference on Network Softwarization and Workshops (NetSoft)","start":{"date-parts":[[2018,6,25]]},"location":"Montreal, QC","end":{"date-parts":[[2018,6,29]]}},"container-title":["2018 4th IEEE Conference on Network Softwarization and Workshops (NetSoft)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8429968\/8458492\/08459910.pdf?arnumber=8459910","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,1,26]],"date-time":"2022-01-26T09:40:05Z","timestamp":1643190005000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8459910\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018,6]]},"references-count":45,"URL":"https:\/\/doi.org\/10.1109\/netsoft.2018.8459910","relation":{},"subject":[],"published":{"date-parts":[[2018,6]]}}}