Intrusion detection with CUSUM for TCP-based DDoS

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 3823 LNCS, Issue , 2005, Pages 1255-1264

  Leu, Fang Yie ^a   Yang, Wei Jie ^a  

^a TUNGHAI UNIVERSITY   (Taiwan)

Author keywords

[No Author keywords available]

Indexed keywords

ALGORITHMS; COMPUTER OPERATING SYSTEMS; COMPUTER SCIENCE; COMPUTER SIMULATION; INTERNET; ROUTERS; COMPUTER CRIME; DENIAL-OF-SERVICE ATTACK; EMBEDDED SYSTEMS; INTELLIGENT BUILDINGS; NETWORK MANAGEMENT; NETWORK SECURITY; RADIO FREQUENCY IDENTIFICATION (RFID); SENSOR NETWORKS; TELECOMMUNICATION NETWORKS; UBIQUITOUS COMPUTING;

CIDS; CUSUM; DISTRIBUTED DENIAL OF SERVICE (DDOS); INTRUSION DETECTION; NETWORK MANAGEMENT UNITS;

DEMODULATION; INTRUSION DETECTION;

AUTONOMOUS NETWORKS; DETECTION ALGORITHM; DISTRIBUTED DENIAL OF SERVICE; INTRUSION DETECTION SYSTEMS; LARGE-SCALE ATTACKS; MANAGEMENT UNIT; NETWORK SERVICES; OPERATIONAL ENVIRONMENTS;

EID: 33744939733     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/11596042_127     Document Type: Conference Paper

References (15)

1. Gibson, S.: DRDoS, Distributed Reflection Denial of Service. http://grc.corn/dos/drdos.htm.
2. Brodsky, B.E., Darkhovsky, B.S.: Nonparametric Methods in Change-point Problems. Kluwer Academic Publishers (1993).
3. Wang, H., Zhang D., Shin, K.G.: Change-Point Monitoring for the Detection of DoS Attacks. IEEE Transactions on Dependable and Secure Computing, vol. 1, (Oct.-Dec. 2004) 193-208.
4. Chang, R.K.C.: Defending against flooding-based distributed denial-of-service attacks: a tutorial. IEEE Communications Magazine, vol. 40 ( Oct. 2002) 42-51.
5. Leu, F.Y., Hung J.J., Hung, C.H.: UDAIDTS: Union Defense with Active Intrusion Detection and Hash-based Traceback System. Proceedings of International Conference on Information Management Conference, Taiwan (July 2003) (in Chinese).
6. Snoeren, A.C. et al.: Single-Packet IP Traceback. IEEE/ACM Transaction on Network, vol. 10, no. 6 (Dec. 2002) 721-734.
7. Belenky, A., Ansar, N.: On IP traceback. IEEE Communications Magazine, vol. 41 (July 2003) 142-153.
8. Dawn Song, X.D., Perrig, A.: Advanced and Authenticated Marking Schemes for IP Traceback. Proceedings of 20th Annual Joint Conference of the IEEE Computer and Communications Societies, vol. 2 (April 2001) 878-886.
9. Bellovin, S.M.: ICMP Traceback Messages. IETF draft, 2000. http://www.research.att.com/smb/papers/draftbellovin-itrace-00.txt, (refer to in March 2005).
10. Savage, S. et al.: Network Support for IP Traceback. IEEE/ACM Transaction on Network, vol. 9, no. 3 (June 2001) 226-237.
11. Wang, H., Zhang, D., Shin, K.G.: Detecting SYN Flooding Attacks. Proceedings of IEEE Computer Communications (June 2002) 1530-1539.
12. Paxson, V.: An Analysis of Using Reflectors for Distributed Denial-of Service Attacks. Computer Communication Review, 31(3) (July 2001) 38-47.
13. Mirkovic, J., Prier, G., Reiher, P.: Attacking DDoS at the Source. Proceedings of IEEE International Conference on Network Protocols (Nov. 2002) 312-321.
14. Gil, T.M., Poletter, M.: MULTOPS: A Data-Structure for Bandwidth Attack Detection. Proceedings of USENIX Security Symposium (Aug. 2001).
15. Leu, F.Y., Yang, W.J., Chang, W.K.: IFTS: Intrusion Forecast and Traceback based on Union Defense Environment. Proceedings of the 11th International Conference on Parallel and Distributed Systems (July 2005).