{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,7]],"date-time":"2026-10-07T18:06:43Z","timestamp":1791396403204,"version":"4.3.3"},"reference-count":40,"publisher":"Association for Computing Machinery (ACM)","issue":"3","license":[{"start":{"date-parts":[[2024,2,23]],"date-time":"2024-02-23T00:00:00Z","timestamp":1708646400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"Guangdong Key Lab of AI and Multi-modal Data Processing"},{"name":"United International College (UIC), Zhuhai","award":["2020KSYS007"],"award-info":[{"award-number":["2020KSYS007"]}]},{"name":"Computer Science","award":["UICR0400025-21"],"award-info":[{"award-number":["UICR0400025-21"]}]},{"name":"Chinese National Research Fund","award":["61872239"],"award-info":[{"award-number":["61872239"]}]},{"name":"Guangdong Basic and Applied Basic Research Fund","award":["2021A1515110190"],"award-info":[{"award-number":["2021A1515110190"]}]},{"name":"The Institute of Artificial Intelligence and Future Networks"},{"name":"Beijing Normal University (Zhuhai) Guangdong"},{"name":"China Zhuhai Science-Tech Innovation Bureau","award":["ZH22017001210119PWC and 28712217900001"],"award-info":[{"award-number":["ZH22017001210119PWC and 28712217900001"]}]},{"name":"Interdisciplinary Intelligence SuperComputer Center of Beijing Normal University Zhuhai"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Sen. Netw."],"published-print":{"date-parts":[[2024,5,31]]},"abstract":"<jats:p>Application-layer distributed denial-of-service (DDoS) attacks incapacitate systems by using up their resources, causing service interruptions, financial losses, and more. Consequently, advanced deep-learning techniques are used to detect and mitigate these attacks in cloud infrastructures. However, in mobile edge computing (MEC), it becomes economically impractical to equip each node with defensive resources, as these resources may largely remain unused in edge devices. Furthermore, current methods are mainly concentrated on improving the accuracy of DDoS attack detection and saving CPU resources, neglecting the effective allocation of computational power for benign tasks under DDoS attacks. To address these issues, this paper introduces SecEG, a secure and efficient strategy against DDoS attacks for MEC that integrates container-based task isolation with lightweight online anomaly detection on edge nodes. More specifically, a new model is proposed to analyze resource contention dynamics between DDoS attacks and benign tasks. Subsequently, by employing periodic packet sampling and real-time attack intensity predicting, an autoencoder-based method is proposed to detect DDoS attacks. We leverage an efficient scheduling method to optimize the edge resource allocation and the service quality for benign users during DDoS attacks. When executed in the real-world edge environment, our experimental findings validate the efficacy of the proposed SecEG strategy. Compared to conventional methods, the service rate of benign requests increases by 23% under intense DDoS attacks, and the CPU resource is saved up to 35%.<\/jats:p>","DOI":"10.1145\/3641106","type":"journal-article","created":{"date-parts":[[2024,1,23]],"date-time":"2024-01-23T12:28:45Z","timestamp":1706012925000},"page":"1-21","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":11,"title":["SecEG: A Secure and Efficient Strategy against DDoS Attacks in Mobile Edge Computing"],"prefix":"10.1145","volume":"20","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-8451-3337","authenticated-orcid":false,"given":"Haiyang","family":"Huang","sequence":"first","affiliation":[{"name":"Institute of Artificial Intelligence and Future Networks, Beijing Normal University, Zhuhai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2826-7757","authenticated-orcid":false,"given":"Tianhui","family":"Meng","sequence":"additional","affiliation":[{"name":"Institute of Artificial Intelligence and Future Networks, Beijing Normal University, Zhuhai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0994-3297","authenticated-orcid":false,"given":"Jianxiong","family":"Guo","sequence":"additional","affiliation":[{"name":"Institute of Artificial Intelligence and Future Networks, Beijing Normal University, Zhuhai, China and Guangdong Key Lab of AI and Multi-Modal Data Processing, BNU-HKBU United International College, Zhuhai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3761-1759","authenticated-orcid":false,"given":"Xuekai","family":"Wei","sequence":"additional","affiliation":[{"name":"Institute of Artificial Intelligence and Future Networks, Beijing Normal University, Zhuhai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1000-3937","authenticated-orcid":false,"given":"Weijia","family":"Jia","sequence":"additional","affiliation":[{"name":"Institute of Artificial Intelligence and Future Networks, Beijing Normal University, Zhuhai, China and Guangdong Key Lab of AI and Multi-Modal Data Processing, BNU-HKBU United International College, Zhuhai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2024,2,23]]},"reference":[{"key":"e_1_3_2_2_2","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2019.2934468"},{"key":"e_1_3_2_3_2","volume-title":"\\(\\lbrace\\) USENIX \\(\\rbrace\\)  Workshop on Hot Topics in Edge Computing (HotEdge 18)","author":"Bhardwaj Ketan","year":"2018","unstructured":"Ketan Bhardwaj, Joaquin Chung Miranda, and Ada Gavrilovska. 2018. Towards IoT-DDoS prevention using edge computing. In \\(\\lbrace\\) USENIX \\(\\rbrace\\) Workshop on Hot Topics in Edge Computing (HotEdge 18)."},{"key":"e_1_3_2_4_2","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.1901.03407"},{"key":"e_1_3_2_5_2","doi-asserted-by":"publisher","DOI":"10.1155\/2018\/7178164"},{"key":"e_1_3_2_6_2","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2022.3219261"},{"issue":"3","key":"e_1_3_2_7_2","doi-asserted-by":"crossref","first-page":"1834","DOI":"10.1109\/TCOMM.2022.3142284","article-title":"Two-stage task offloading optimization with large deviation delay analysis in IoT networks","volume":"70","author":"Feng Chunhui","year":"2022","unstructured":"Chunhui Feng, Zhong Shen, Qinghai Yang, and Weihua Wu. 2022. Two-stage task offloading optimization with large deviation delay analysis in IoT networks. IEEE Transactions on Communications 70, 3 (2022), 1834\u20131847.","journal-title":"IEEE Transactions on Communications"},{"key":"e_1_3_2_8_2","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2019.2927886"},{"key":"e_1_3_2_9_2","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484589"},{"key":"e_1_3_2_10_2","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2021.3055559"},{"key":"e_1_3_2_11_2","doi-asserted-by":"publisher","DOI":"10.1145\/3326066"},{"key":"e_1_3_2_12_2","doi-asserted-by":"crossref","first-page":"000209","DOI":"10.1109\/SISY.2018.8524703","volume-title":"2018 IEEE 16th International Symposium on Intelligent Systems and Informatics (SISY)","author":"Huraj Ladislav","year":"2018","unstructured":"Ladislav Huraj, Marek Simon, and Tibor Hor\u00e1k. 2018. IoT measuring of UDP-based distributed reflective DoS attack. In 2018 IEEE 16th International Symposium on Intelligent Systems and Informatics (SISY). IEEE, 000209\u2013000214."},{"key":"e_1_3_2_13_2","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM42981.2021.9488707"},{"key":"e_1_3_2_14_2","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2017.201"},{"key":"e_1_3_2_15_2","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM42981.2021.9488742"},{"key":"e_1_3_2_16_2","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2021.3086219"},{"key":"e_1_3_2_17_2","doi-asserted-by":"publisher","DOI":"10.1109\/TSUSC.2019.2904680"},{"key":"e_1_3_2_18_2","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2020.3026580"},{"issue":"7","key":"e_1_3_2_19_2","doi-asserted-by":"crossref","first-page":"5298","DOI":"10.1109\/JIOT.2020.3033298","article-title":"Distributed probabilistic offloading in edge computing for 6G-enabled massive internet of things","volume":"8","author":"Liao Zhuofan","year":"2021","unstructured":"Zhuofan Liao, Jingsheng Peng, Jiawei Huang, Jianxin Wang, Jin Wang, Pradip Kumar Sharma, and Uttam Ghosh. 2021. Distributed probabilistic offloading in edge computing for 6G-enabled massive internet of things. IEEE Internet of Things Journal 8, 7 (2021), 5298\u20135308.","journal-title":"IEEE Internet of Things Journal"},{"issue":"9","key":"e_1_3_2_20_2","first-page":"7546","article-title":"A Bayesian Q-learning game for dependable task offloading against DDoS attacks in sensor edge cloud","volume":"8","author":"Liu Jianhua","year":"2020","unstructured":"Jianhua Liu, Xin Wang, Shigen Shen, Guangxue Yue, Shui Yu, and Minglu Li. 2020. A Bayesian Q-learning game for dependable task offloading against DDoS attacks in sensor edge cloud. IEEE Internet of Things Journal 8, 9 (2020), 7546\u20137561.","journal-title":"IEEE Internet of Things Journal"},{"key":"e_1_3_2_21_2","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2018.2816682"},{"key":"e_1_3_2_22_2","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2017.2780236"},{"key":"e_1_3_2_23_2","doi-asserted-by":"publisher","DOI":"10.1145\/3587935"},{"key":"e_1_3_2_24_2","first-page":"171","volume-title":"2018 14th International Conference on Mobile Ad-Hoc and Sensor Networks (MSN)","author":"Liu Zhicheng","year":"2018","unstructured":"Zhicheng Liu and Junxing Zhang. 2018. Launching low-rate DoS attacks with cache-enabled WiFi offloading. In 2018 14th International Conference on Mobile Ad-Hoc and Sensor Networks (MSN). 171\u2013176."},{"key":"e_1_3_2_25_2","doi-asserted-by":"publisher","DOI":"10.1145\/3543146.3543158"},{"key":"e_1_3_2_26_2","doi-asserted-by":"crossref","first-page":"469","DOI":"10.1109\/ICDE48307.2020.00047","volume-title":"2020 IEEE 36th International Conference on Data Engineering (ICDE)","author":"Mehnaz Shagufta","year":"2020","unstructured":"Shagufta Mehnaz and Elisa Bertino. 2020. Privacy-preserving real-time anomaly detection using edge computing. In 2020 IEEE 36th International Conference on Data Engineering (ICDE). IEEE, 469\u2013480."},{"key":"e_1_3_2_27_2","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.1802.09089"},{"key":"e_1_3_2_28_2","article-title":"SmartDefense: A distributed deep defense against DDoS attacks with edge computing","volume":"209","author":"Myneni Sowmya","year":"2022","unstructured":"Sowmya Myneni, Ankur Chowdhary, Dijiang Huang, and Adel Alshamrani. 2022. SmartDefense: A distributed deep defense against DDoS attacks with edge computing. Computer Networks 209 (2022), 108874.","journal-title":"Computer Networks"},{"key":"e_1_3_2_29_2","doi-asserted-by":"crossref","first-page":"1227","DOI":"10.1109\/ICDCS47774.2020.00191","volume-title":"2020 IEEE 40th International Conference on Distributed Computing Systems (ICDCS)","author":"Ngo Mao V.","year":"2020","unstructured":"Mao V. Ngo, Tie Luo, Hakima Chaouchi, and Tony Q. S. Quek. 2020. Contextual-bandit anomaly detection for IoT data in distributed hierarchical edge computing. In 2020 IEEE 40th International Conference on Distributed Computing Systems (ICDCS). IEEE, 1227\u20131230."},{"key":"e_1_3_2_30_2","doi-asserted-by":"publisher","DOI":"10.1145\/2876034.2893436"},{"issue":"7","key":"e_1_3_2_31_2","doi-asserted-by":"crossref","first-page":"5794","DOI":"10.1109\/JIOT.2020.3033265","article-title":"Hierarchical security paradigm for IoT multiaccess edge computing","volume":"8","author":"Singh Jaspreet","year":"2020","unstructured":"Jaspreet Singh, Yahuza Bello, Ahmed Refaey Hussein, Aiman Erbad, and Amr Mohamed. 2020. Hierarchical security paradigm for IoT multiaccess edge computing. IEEE Internet of Things Journal 8, 7 (2020), 5794\u20135805.","journal-title":"IEEE Internet of Things Journal"},{"key":"e_1_3_2_32_2","doi-asserted-by":"publisher","DOI":"10.5555\/1696396"},{"key":"e_1_3_2_33_2","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2021.3139995"},{"issue":"03","key":"e_1_3_2_34_2","article-title":"Customer and cost sharing in a Jackson network","volume":"20","author":"Timmer Judith","year":"2018","unstructured":"Judith Timmer and Werner Scheinhardt. 2018. Customer and cost sharing in a Jackson network. International Game Theory Review 20, 03 (2018), 1850002.","journal-title":"International Game Theory Review"},{"key":"e_1_3_2_35_2","doi-asserted-by":"crossref","DOI":"10.1109\/TNSM.2022.3142254","article-title":"An online entropy-based DDoS flooding attack detection system with dynamic threshold","author":"Tsobdjou Lo\u00efc D.","year":"2022","unstructured":"Lo\u00efc D. Tsobdjou, Samuel Pierre, and Alejandro Quintero. 2022. An online entropy-based DDoS flooding attack detection system with dynamic threshold. IEEE Transactions on Network and Service Management (2022).","journal-title":"IEEE Transactions on Network and Service Management"},{"key":"e_1_3_2_36_2","doi-asserted-by":"publisher","DOI":"10.1109\/JPROC.2019.2918437"},{"key":"e_1_3_2_37_2","first-page":"1","volume-title":"IEEE INFOCOM 2016-the 35th Annual IEEE International Conference on Computer Communications","author":"Xu Yang","year":"2016","unstructured":"Yang Xu and Yong Liu. 2016. DDoS attack detection under SDN context. In IEEE INFOCOM 2016-the 35th Annual IEEE International Conference on Computer Communications. IEEE, 1\u20139."},{"key":"e_1_3_2_38_2","doi-asserted-by":"publisher","DOI":"10.1109\/NSS.2009.29"},{"issue":"3","key":"e_1_3_2_39_2","first-page":"1686","article-title":"Coda: Runtime detection of application-layer CPU-exhaustion DoS attacks in containers","volume":"16","author":"Zhan Mengqi","year":"2023","unstructured":"Mengqi Zhan, Yang Li, Huiran Yang, Guangxi Yu, Bo Li, and Weiping Wang. 2023. Coda: Runtime detection of application-layer CPU-exhaustion DoS attacks in containers. IEEE Transactions on Services Computing 16, 3 (2023), 1686\u20131697.","journal-title":"IEEE Transactions on Services Computing"},{"issue":"11","key":"e_1_3_2_40_2","first-page":"2927","article-title":"Lightweight and accurate DNN-based anomaly detection at edge","volume":"33","author":"Zhang Qinglong","year":"2022","unstructured":"Qinglong Zhang, Rui Han, Gaofeng Xin, Chi Harold Liu, Guoren Wang, and Lydia Y. Chen. 2022. Lightweight and accurate DNN-based anomaly detection at edge. IEEE Transactions on Parallel and Distributed Systems 33, 11 (2022), 2927\u20132942.","journal-title":"IEEE Transactions on Parallel and Distributed Systems"},{"key":"e_1_3_2_41_2","first-page":"1","volume-title":"2020 Opto-Electronics and Communications Conference (OECC)","author":"Zhao Yingqi","year":"2020","unstructured":"Yingqi Zhao, Yajie Li, Jun Li, Mingzhe Liu, Yifan Niu, Yongli Zhao, and Jie Zhang. 2020. Traffic scheduling strategy for mitigating DDoS attack in edge computing-enabled TWDM-PON. In 2020 Opto-Electronics and Communications Conference (OECC). IEEE, 1\u20134."}],"container-title":["ACM Transactions on Sensor Networks"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3641106","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3641106","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T23:57:26Z","timestamp":1750291046000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3641106"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,2,23]]},"references-count":40,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2024,5,31]]}},"alternative-id":["10.1145\/3641106"],"URL":"https:\/\/doi.org\/10.1145\/3641106","relation":{},"ISSN":["1550-4859","1550-4867"],"issn-type":[{"value":"1550-4859","type":"print"},{"value":"1550-4867","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,2,23]]},"assertion":[{"value":"2023-04-16","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2024-01-06","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2024-02-23","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}