Denial-of-service attack-detection techniques

IEEE Internet Computing

Volumn 10, Issue 1, 2006, Pages 82-89

  Carl, Glenn ^a   Kesidis, George ^a   Brooks, Richard R ^b   Rai, Suresh ^c  

^a The Pennsylvania State University   (United States)

^b AMRL   (United States)

^c LOUISIANA STATE UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ALGORITHMS; COMPUTER CRIME; INFORMATION SERVICES; NETWORK PROTOCOLS; SECURITY OF DATA;

CHANGE-POINT DETECTION ALGORITHMS; DENIAL-OF-SERVICE (DOS); DETECTION TECHNIQUES; NETWORK SERVICES; NETWORK-BASED FLOODING ATTACKS; WAVELET ANALYSIS;

INTERNET;

EID: 31544436627     PISSN: 10897801     EISSN: None     Source Type: Journal    
DOI: 10.1109/MIC.2006.5     Document Type: Article

References (14)

1. D. Moore, G.M. Voelker, and S. Savage, "Inferring Internet Denial-of-Service Activity," Proc. Usenix Security Symp., Usenix Assoc., 2001; http://citeseer.ist.psu.edu/moore01inferring.html.
2. L. Gordon et al., CSI/FBI Computer Crime and Security Survey, Computer Security Inst., 2004; http://i.cmpnet.com/gocsi/db_area/pdfs/fbi/ FBI2004.pdf.
3. J. Mirkovic et al., Internet Denial of Service: Attack and Defense Mechanisms, Prentice Hall, 2005.
4. J. Mirkovic, J. Martin, and P. Reiher, "A Taxonomy of DDoS Attacks and DDoS Defense Mechanisms," ACM Sigcomm Computer Comm. Rev., vol. 34, no. 2, 2004, pp. 39-53.
5. J. Jung, B. Krishnamurthy, and M. Rabinovich, "Flash Crowds and Denial of Service Attacks: Characterization and Implications for CDNs and Web Sites," Proc. Int'l World Wide Web Conference, ACM Press, 2002, pp. 252-262.
6. J. Mirkovic, G. Prier, and P. Reiher, "Attacking DDoS at the Source," Proc. 10th Int'l Conf. Network Protocols (ICNP 2002), IEEE CS Press, 2002, pp. 312-321.
7. L Feinstein et al., "Statistical Approaches to DDoS Attack Detection and Response," Proc. DARPA Information Survivability Conf. and Exposition, vol. 1, 2003, IEEE CS Press, pp. 303-314.
8. R.B. Blazek et al., "A Novel Approach to Detection of 'Denial-of-Service' Attacks via Adaptive Sequential and Batch-Sequential Change-Point Detection Methods," Proc. IEEE Workshop Information Assurance and Security, IEEE CS Press, 2001, pp. 220-226.
9. H. Wang, D. Zhang, and K. Shin, "Detecting SYN Flooding Attacks," Proc. 21st Joint Conf. IEEE Computer and Comm. Societies (IEEE INFOCOM), IEEE Press, 2002, pp. 1530-1539.
10. R.R. Brooks, Disruptive Security Technologies with Mobile Code and Peer-to-Peer Networks, CRC Press, 2005.
11. J. Jung et al., "Fast Portscan Detection Using Sequential Hypothesis Testing," Proc. IEEE Symp. Security and Privacy, IEEE CS Press, 2004, pp. 211-225.
12. P. Barford et al., "A Signal Analysis of Network Traffic Anomalies," Proc. ACM SIGCOMM Internet Measurement Workshop, ACM Press, 2002, pp. 71-82.
13. J. Allen et al., State of the Practice of Intrusion Detection Technologies, tech. report CMU/SEI-99-TR-028, Software Eng. Inst., Carnegie Mellon Univ., 2000.
14. R. Lippmann et al., "The 1999 DARPA Off-Line Intrusion Detection Evaluation," Computer Networks, vol. 34, no. 4, 2000, pp. 579-595.