Application of anomaly detection algorithms for detecting SYN flooding attacks

GLOBECOM - IEEE Global Telecommunications Conference

Volumn 4, Issue , 2004, Pages 2050-2054

  Siris, Vasilios A ^a   Papagalou, Fotini ^a  

^a INSTITUTE OF COMPUTER SCIENCE   (Greece)

Author keywords

[No Author keywords available]

Indexed keywords

ALGORITHMS; INFORMATION MANAGEMENT; NETWORK PROTOCOLS; PARAMETER ESTIMATION; PREDICTIVE CONTROL SYSTEMS; PROBABILITY; SERVERS;

CUMULATIVE SUM (CUSUM) ALGORITHMS; DENIAL-OF-SERVICE (DOS) ATTACKS; MANAGEMENT INFORMATION BASE (MIB); TRANSMISSION CONTROL PROTOCOLS (TCP);

SECURITY OF DATA;

EID: 18144385431     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (9)

1. D. Moore, G. Voelker, and S. Savage, "Inferring Internet denial of service activity," in Proc. of USENIX Security Symposium, 2001.
2. H. Wang, D. Zhang, and K. G. Shin, "Detecting SYN flooding attacks," in Proc. of IEEE INFOCOM'02, 2002.
3. J. Hellerstein, F. Zhang, and P. Shahabuddin, "A statistical approach to predictive detection," Computer Networks, vol. 35, pp. 77-95, 2001.
4. M. Thottan and C. Ji, "Adaptive thresholding for proactive problem detection," in Proc. of IEEE Int'l Workshop on Syst. Manag., 1998.
5. P. Hoogenboom and J. Lepreau, "Computer system performance problem detection using time series models," in Proc. of USENIX Summer 1993 Technical Conference, June 1993.
6. J. Brutlag, "Aberrant behavior detection in time series for network monitoring," in Proc. of USA XIV, December 2000.
7. R. B. Blazek, H. Kim, B. Rozovskii, and A. Tartakovsky, "A novel approach to detection of denial-of-service attacks via adaptive sequential and batch sequential change-point detection methods," in Proc. of IEEE Workshop on Syst., Man, and Cybern. Informat. Assurance, June 2001.
8. M. Basseville and I. V. Nikiforov, Detection of Abrupt Changes: Theory and Applications. Prentice Hall, 1993.
9. V. A. Siris and F. Papagalou, "Application of anomaly detection algorithms for detecting SYN flooding attacks," ICS-FORTH, Tech. Rep. No. 330, December 2003.