Mitigating DBA Exploits: Enhanced Security Against Degradation Attacks in XG-PON

Next-Generation Gigabit Passive Optical Networks (NG-PON) improve bandwidth and data rates, but their upstream channel security has been overlooked due to assumptions about its point-to-point nature. This paper introduces a Security-Enhanced Dynamic Bandwidth Allocation (SE-DBA) algorithm for XG-PON to address this vulnerability. SE-DBA includes a detection phase for abnormal behavior and a mitigation phase that reduces bandwidth allocation to identified attackers. Network simulations using OMNET++ demonstrate that SE-DBA improves SE-DBA increases the lawful ONU's network resilience during attacks by 50% compared to GIANT. The results also demonstrate SE-DBA's ability to penalize the malicious ONU by reducing its bandwidth request to 20% of its original request.