Abstract
With the increasing use and popularity of computer networks, data
security and online service availability have become priority concerns
for academia and industry. One of the significant threats to be
prevented, detected, and mitigated is the Distributed Denial of Service
(DDoS) attack. With the advancement of new technologies and
network paradigms, these attacks have been tackled by innovative
solutions such as mitigation services based on Network Function
Virtualization (NFV), which was utilized to develop the DeMONS
service, a solution for DDoS mitigation. Despite its effectiveness,
DeMONS’ results can be enhanced by introducing new traffic engineering
modules. In this way, this paper presents DeMONS++, an
extension of DeMONS that incorporates a strategically positioned
traffic shaping module within its service topology. Experiments conducted
in simulated environments demonstrated that DeMONS++
improves DDoS mitigation, achieving better performance in metrics
such as benign traffic acceptance and user satisfaction in the tested
scenarios.