Application of anomaly detection algorithms for detecting SYN flooding attacks

Computer Communications

Volumn 29, Issue 9 SPEC. ISS., 2006, Pages 1433-1442

  Siris, Vasilios A ^a   Papagalou, Fotini ^a  

^a INSTITUTE OF COMPUTER SCIENCE   (Greece)

Author keywords

Change point detection; Denial of service; Network security

Indexed keywords

ALGORITHMS; PARAMETER ESTIMATION; PROBABILITY; SECURITY SYSTEMS; TELECOMMUNICATION TRAFFIC;

CHANGE POINT DETECTION; DENIAL OF SERVICE;

COMPUTER CRIME;

EID: 33646423315     PISSN: 01403664     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.comcom.2005.09.008     Document Type: Article

References (12)

1. Basseville M., and Nikiforov I.V. Detection of Abrupt Changes : Theory and Applications (1993), Prentice-Hall
2. R.B. Blazek, H. Kim, B. Rozovskii, A. Tartakovsky, A novel approach to detection of denial-of-service attacks via adaptive sequential and batch sequential change-point detection methods, in: Proceedings of IEEE Workshop on Systems, Man, and Cybernetics Information Assurance, June 2001.
3. J. Brutlag, Aberrant behavior detection in time series for network monitoring, in: Proceedings of LISA XIV, December 2000.
4. C.M. Cheng, H.T. Kung, K.-S. Tan, Use of spectral analysis in defending against DoS attacks, in: Proceedings of IEEE Globecom'02, November 2002.
5. J. Coppens, SCAMPI-a scaleable monitoring platform for the internet, in: Proceedings of 2nd International Workshop on Inter-Domain Performance and Simulation (IPS 2004), March 2004.
6. J. Hellerstein, F. Zhang, P. Shahabuddin, Characterizing normal operation of a web server, in: Proceedings of Computer Measurements Group, 1998.
7. Hellerstein J., Zhang F., and Shahabuddin P. A statistical approach to predictive detection. Computer Networks 35 (2001) 77-95
8. P. Hoogenboom, J. Lepreau, Computer system performance problem detection using time series models, in: Proceedings of USENIX Summer 1993 Technical Conference, June 1993.
9. P. Huang, A. Feldmann, W. Willinger, A non-intrusive, wavelet-based approach to detecting network performance problems, in: Proceedings of ACM SIGCOMM Internet Measurements Workshop, November 2001.
10. D. Moore, G. Voelker, S. Savage, Inferring Internet denial of service activity, in: Proceedings of USENIX Security Symposium, 2001.
11. M. Thottan, C. Ji, Adaptive thresholding for proactive problem detection, in: Proceedings of IEEE Int'l Workshop on Systems Management, 1998.
12. H. Wang, D. Zhang, K.G. Shin, Detecting SYN flooding attacks, in: Proceedings of IEEE INFOCOM'02, June 2002.