NIMBUS: cloud-scale attack detection and mitigation

Cloud services become an attractive target of attacks o Large-scale: 100s of Gbps o Diverse types: network-layer & application layer o Fast ramp-up rate: within a few minutes Existing approaches o Commercial hardware boxes (e.g. Firewall, IDS, DDoS-protection appliance) • Low Capacity: cannot accommodate attack volume • High Cost: Unfavorable cost vs. capacity tradeoffs • Inflexible: lack of programmability o Commercial attack prevention services (e.g. CloudFlare, Prolexic) • Risk of privacy and confidential leakage Attack-Detection-as-a-Service