Implementation of Anomaly-Based IDS in Virtualized Environments to Protect IoT Networks Against DDoS Attacks

• Grant number: 24/02685-5
• Support Opportunities: Scholarships in Brazil - Scientific Initiation
• Start date: March 01, 2024
• End date: February 28, 2026
• Field of knowledge: Physical Sciences and Mathematics - Computer Science - Computer Systems
• Agreement: MCTI/MC
• Principal Investigator: Aldri Luiz dos Santos
• Grantee: Erik Roberto Reis Neves
• Host Institution: Instituto de Ciências Exatas (ICEx). Universidade Federal de Minas Gerais (UFMG). Ministério da Educação (Brasil). Belo Horizonte , SP, Brazil
• Associated research grant: 18/23098-0 - MENTORED: from modeling to experimentation - predicting and detecting DDoS and zero-day attacks, AP.TEM

Abstract

Building detection systems based on anomalies to identify and mitigate DDoS attacks enables networks, such as IoT, to operate securely and robustly, preventing damage to the services offered in this environment. Using tools such as Docker and Kubernetes, it is feasible to emulate IoT networks in virtual environments segregated from the network environments used by companies, allowing experiments involving attacks and defense to be carried out. Given that the activities carried out within the scope of the MENTORED project depend on the knowledge and application of these tools, their contribution is crucial to assess the quality of existing detection and prediction systems, as well as to reduce the costs of purchasing and implementing equipment. In the scientific initiation project, the aim is to analyze how the implementation of anomaly intrusion detection systems, through the virtualization of IoT network environments, can emulate DDoS attacks against these networks. Furthermore, the project focuses on evaluating the effectiveness of DDoS attack prediction and detection systems developed in the MENTORED project.