Statistical-based SYN-flooding detection using programmable network processor

Proceedings - 3rd International Conference on Information Technology and Applications, ICITA 2005

Volumn II, Issue , 2005, Pages 465-470

  Lim, Boonping ^a   Uddin, Md Safi ^a  

^a MULTIMEDIA UNIVERSITY   (Malaysia)

Author keywords

Network processor; Network security; Non parametric CUSUM; SYN flooding; Token bucket filtering

Indexed keywords

COMPUTER ARCHITECTURE; COMPUTER HARDWARE; COMPUTER SYSTEM FIREWALLS; EMBEDDED SYSTEMS; PACKET NETWORKS; ROUTERS; SECURITY SYSTEMS;

NETWORK PROCESSORS; NETWORK SECURITY; NON-PARAMETRIC CUSUM; SYN-FLOODING; TOKEN BUCKET FILTERING;

BROADBAND NETWORKS;

EID: 33646799500     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (22)

1. CERT, "TCP SYN flooding and IP spoofing attacks", http://www.cert.org/advisories/CA-1996-21.html.
2. CERT, "Vulnerability in certain TCP/IP implementations", http://www.cert.org/advisories/CA-1998-13.html.
3. M.Basseville and I.V.Nikiforov, Detection of Abrupt Changes: Theory and Application, Prentice Hall, 1993.
4. Haining Wang, Danlu Zhang, and Kang G. Shin, "Change-Point Monitoring for Detection of DoS Attacks", in IEEE Transactions on Dependable and Secure Computing, Vol. 1, No. 4, December 2004.
5. R. Mahajan, S. Bellovin, S. Floyd, V. Paxson, and S. Shenker, "Controlling high bandwidth aggregates in the network", ACM Computer Communications Review, 32(3), July 2002.
6. R.B. Blazek, H.J Kim, B. Rozovskii and A. Tartakovsky, "A novel approach to detection of denial-of-service attacks via adaptive sequential and batch-sequential change-point detection methods", in Proceedings of IEEE Workshop on Information Assurance and Security, June 2001.
7. V.A. Siris and F. Papagalou, "Application of anomaly detection algorithms for detecting SYN flooding attacks", in Proceedings of IEEE Global Telecommunications Conference, December 2004.
8. T. Peng, C. Leckie and K. Ramamohanarao, "Detecting distributed denial of service attacks by sharing distributed beliefs", in Proceedings of 8th Australasian Conference on Information Security and Privacy, July, 2003
9. T. Peng, C. Leckie and R. Kotagiri, "Protection from distributed denial of service attack using history-based IP filtering", in Proceedings of the IEEE International Conference on Communications, May 2003.
10. J.Mirkovic, "D-WARD: source-end defense against distributed denial-of-service attacks", PhD Thesis, University of California Los Angeles, 2003.
11. R.Thomas, B.Mark, T.Johnson and J.Croall, "NetBouncer: client-legitimacy-based high-performance DDos filtering", in Proceedings of the DARPA Information Survivability Conference and Exposition, 2003.
12. D.Moore, G.Voelker and S.Savage, "Inferring internet denial of service activity", in Proceedings of USENIX Security Symposium, August 2001.
13. B.P.Lim and Md.Safi Uddin, "A proposition towards mitigation of DDoS attacks using high speed programmable network processor", in Proceedings of M2USIC, 2003.
14. Dave Dittrich. Distributed Denial of Service (DDoS) attacks/tools resource page. http://staff.washington.edu/dittrich/misc/ddos/, 2003.
15. daemon9, "IP-spoofing demystified (trust-relationship exploitation)", Phrack Magazine, June 1996.
16. 2600 magazine, http://www.2600.com
17. Packet toolkit, http://packit.sourceforge.net/
18. hping, http://www.hping.org/
19. Dave Dittrich, "The "stacheldraht" distributed denial of service attack tool", December 1999.
20. Sven Dietrich, Neil Long and David Dittrich, "An analysis of the 'Shaft' distributed denial of service tool", March 2000.
21. David Dittrich, "The "Tribe Flood Network" distributed denial of service attack tool", October 1999.
22. Jason Barlow and Woody Thrower, "TFN2K - An Analysis", March 2000.