Multipath TCP leverages parallel data transmission across multiple paths to improve transmission rates, reliability, and resource utilization. However, Multipath TCP faces severe network security and communication reliability challenges when exposed to low-rate distributed denial-of-service (LDDoS) attacks. In this paper, we propose a robustness optimization security scheme against cascading failures in Multipath TCP (ROSE+) to tackle the challenges posed by Low-rate Distributed Denial of Service (LDDoS) attacks on network security and communication reliability. The scheme integrates the intricate network load-capacity cascading failures model and leverages the unique characteristics of multipath TCP to facilitate the redistribution of load traffic at ineffectiveness nodes, thereby alleviating the cascading failures induced by LDDoS attack streams. Additionally, we optimize the robustness of communication transmission systems by devising a load-capacity cascading failures model. The experimental results demonstrate that the scheme reduces the probability of cascading failures by 20.07%. This research provides new ideas and methods to improve the robustness and destruction resistance of multipath TCP transmission.

With the advent of the 5G era, high-speed and secure network access services have become a common pursuit. The QUIC (Quick UDP Internet Connection) protocol proposed by Google has been studied by many scholars due to its high speed, robustness, and low latency. However, the research on the security of the QUIC protocol by domestic and foreign scholars is insufficient. Therefore, based on the self-similarity of QUIC network traffic, combined with traffic characteristics and signal processing methods, a QUIC-based network traffic anomaly detection model is proposed in this paper. The model decomposes and reconstructs the collected QUIC network traffic data through the Empirical Mode Decomposition (EMD) method. In order to judge the occurrence of abnormality, this paper also intercepts overlapping traffic segments through sliding windows to calculate Hurst parameters and analyzes the obtained parameters to check abnormal traffic. The simulation results show that in the network environment based on the QUIC protocol, the Hurst parameter after being attacked fluctuates violently and exceeds the normal range. It also shows that the anomaly detection of QUIC network traffic can use the EMD method.

With various industrial wireless networks greeting booming development, modern industrial devices configured with several network interfaces increasingly become the norm. Such multihomed industrial devices can increase application throughput by making use of multiple network paths, enabled by the multipath transmission control protocol (MTCP) (MPTCP). However, MPTCP might be challenged in the heterogeneous industrial networks because concurrent transmitting industrial application data over asymmetric network paths with different delays is almost bound to the receive buffer blocking problem, which is caused by out-of-order packet arrival and is harmful to the performance of the multipath transmission. The existing MPTCP solutions generally use static mathematical models to evaluate path quality and prohibit transmission on paths with poor quality, which are unable to perform efficiently under highly dynamic and complex network environments. Therefore, in this article, we propose a learning-driven latency-aware MPTCP variant, called${l}\,^2$-MPTCP, which seeks to possibly mitigate the out-of-order packet arrival and receive buffer blocking problems associated with the network heterogeneity in the industrial Internet.${l}\,^2$-MPTCP accurately computes each MPTCP path’s forward delay and assigns application data to multiple paths according to their calculated forward delay differences by using a novel multiexpert learning-enabled forward delay estimator.${l}\,^2$-MPTCP dynamically manages path usage and chooses the optimal path collection for bandwidth aggregation and multipath transmission by using a promising reinforcement learning-empowered multipath manager. Experimental results demonstrate that${l}\,^2$-MPTCP outperforms the current MPTCP solutions in terms of multipathing service quality.

With the development of social networks, more and more mobile social network devices have multiple interfaces. Multipath TCP (MPTCP), as an emerging transmission protocol, can fit multiple link bandwidths to improve data transmission performance and improve user experience quality. At the same time, due to the large-scale deployment and application of emerging technologies such as the Internet of Things and cloud computing, cyber attacks against MPTCP have gradually increased. More and more network security research studies point out that low-rate distributed denial of service (LDDoS) attacks are relatively popular and difficult to detect and are recognized as one of the most severe threats to network services. This article introduces six classic queue management algorithms: DropTail, RED, FRED, REM, BLUE, and FQ. In a multihomed network environment, we perform the performance evaluation of MPTCP under LDDoS attacks in terms of throughput, delay, and packet loss rate when using the six algorithms, respectively, by simulations. The results show that in an MPTCP-enabled multihomed network, different queue management algorithms have different throughput, delay, and packet loss rate performance when subjected to LDDoS attacks. Considering these three performance indicators comprehensively, the FRED algorithm has better performance. By adopting an effective active queue management (AQM) algorithm, the MPTCP transmission system can enhance its robustness capability, thus improving transmission performance. We suggest that when designing and improving the queue management algorithm, the antiattack performance of the algorithm should be considered: (1) it can adjust the traffic speed by optimizing the congestion control mechanism; (2) the fairness of different types of data streams sharing bandwidth is taken into consideration; and (3) it has the ability to adjust the parameters of the queue management algorithm in a timely and accurate manner.

The multipath TCP (MPTCP) enables multihomed mobile devices to realize multipath parallel transmission, which greatly improves the transmission performance of the mobile communication network. With the rapid development of all kinds of emerging technologies, network attacks have shown a trend of development with many types and rapid updates. Among them, low‐rate distributed denial of service (LDDoS) attacks are considered to be one of the most threatening issues in the field of network security. In view of the current research status, by using the network simulation software NS2, this paper first compares and analyzes the throughput and delay performance of the MPTCP transmission system under LDDoS attacks and, further, conducts simulation experiments and analysis on the queue occupancy rate of the LDDoS attack flow to extract the basic attack characteristics of the LDDoS attacks. The experimental results show that the LDDoS attacks will have a major destructive effect on the throughput performance and delay performance of the MPTCP transmission system, resulting in a decrease in the robustness of the transmission system. By analyzing and comparing the occupancy rate of the LDDoS attack flow in the MPTCP transmission system, it can be concluded that (1) the occupancy rate of the LDDoS scattered pulse traffic sent by each puppet machine changes slightly, and (2) the occupancy rate of LDDoS attack data flow is much greater than that of ordinary TCP data flow.