Distributed Denial of Service detection using TCP/IP header and traffic measurement analysis

IEEE International Symposium on Communications and Information Technologies: ISCIT 2004

Volumn 1, Issue , 2004, Pages 605-610

  Limwiwatkul, Lersak ^a   Rungsawang, Arnon ^b  

^a NATIONAL ELECTRONICS AND COMPUTER TECHNOLOGY CENTER   (Thailand)

^b KASETSART UNIVERSITY   (Thailand)

Author keywords

[No Author keywords available]

Indexed keywords

DATA STORAGE EQUIPMENT; GRAPH THEORY; HARMONIC ANALYSIS; INTELLECTUAL PROPERTY; MATHEMATICAL MODELS; PACKET NETWORKS; SECURITY OF DATA; TELECOMMUNICATION TRAFFIC; TIME SERIES ANALYSIS; WEBSITES;

DISTRIBUTED ANALYSIS; DISTRIBUTED DENIAL OF SERVICE (DDOS); TCP/IP HEADERS; TRAFFIC MEASUREMENT ANALYSIS;

DISTRIBUTED PARAMETER CONTROL SYSTEMS;

EID: 21844462588     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (25)

1. CERT Coordination Center, "Denial of Service Attacks,",http:// www.cert.org/tech_tips/denial_of_service.html.
2. th Usenix Security Symposium, August, 2001.
3. CERT Incident Note IN-99-07, "Distributed Denial of Service Tools,", http://www.cert.org/incident_note/IN-99-07.html.
4. G. Mourani, "Securing and Optimizing Linux: The ultimate solution", http://linuxdoc.org/guide/sag2.pdf, 2001.
5. Microsoft Security, "Window 2000 Server Checklist", http://www.microsoft.com/security.
6. E. Zwicky, S. Cooper, D. Chapman, and D.Ru. Building Internet Firewalls. 2nd Edition. O'Reilly and Associates,2000.
7. A.D. Keromytis, V. Misra, and D. Rubenstein. Sos: Secure overlay services. In Proceedings of ACM SIGCOMM 2002, August 2002. USENIX.
8. A.D. Keromytis, V. Misra, and D. Rubenstein.Robert Stone. Centertrack: An IP overlay network for tracking DoS floods. In Proceedings of the USENIX Security Symposium, pages 199-212, Denver, CO, USA, July 2000.USENIX.
9. H. Jamjoom, J. Reumann and K.G. Shin, "Qguard: Protecting Internet Servers from Overload,", Publication, University of Michigan, 2000.
10. H. Sandstrom, A survey of the Denial of Service problem, Technical Report at Department of Computer Science and Electrical Engineering in Lulea University of Technology of Sweden.
11. S. Bellovin. ICMP traceback messages. Work in Progress: draft-bellovin-itrace-00.txt.
12. S. Savage, D. Wetherall, A. Karlin, and T. Anderson. Practical network support for IP traceback. In Proceedings of the ACM SIGCOMM Conference, pages 295-306, Stockholm, Sweeden, August 2000.
13. J. Ioannidis and S. M. Bellovin. Implementing pushback: Router-based defense against DDoS attacks. In Proceedings of Network and Distributed System Security Symposium, San Diego, CA, February 2002. The Internet Society.
14. R. Mahajan, S. M. Bellovin, S. Floyd, J. Ioannidis, V. Paxson, and S. Shenker. Controlling high bandwidth aggregates in the network. In ACM Computer Communication Review, July 2001.
15. Cisco Systems. Rmon http://www.cisro.com/warp/public/614/4.html.
16. th Workshop of HP Openview University Association, 2001.
17. A. Ramanathan, "WADeS: A Tool for Distributed Denial of Service Attack Detection", Thesis, Texas A&M University, August, 2002.
18. th Usenix Security Symposium, August, 2001.
19. A. Cearns, "Design of An Autonomous Anti-DDoS Network (A2D2),", Thesis, University of Western Ontario, London, Canada, 1995.
20. T. Peng, C. Leckie and K. Ramamohanarao, "Detecting Distributed Denial of Service Attacks Using Source IP Address Monitoring,", Technical Report, 2002.
21. th IEEE International Conference on Network Protocol (ICNP'02), 2002.
22. J. Mirkovic, J. Martin and P. Reiher, "A Taxonomy of DDoS Attacks and DDoS Defense Mechanisms,", UCLA CSD Technical Report no. 020018, 2002.
23. J. Park, Distributed Denial of Service, School of Information Technology and Engineering, George Mason University.
24. C. H. Jong and S.P. Shieh, "Detecting Distributed DoS/Scanning by Anomaly Distribution of Packet Fields,", In Proceeding of International Computer Symposium, 2002.
25. th ACM Conference on Computer and Communications Security (CCS-9), 2002.