Light-weight detection method against DDoS attack

Jisuanji Xuebao/Chinese Journal of Computers

Volumn 29, Issue 8, 2006, Pages 1392-1400

  Chen, Wei ^a,b   He, Yan Xiang ^b   Peng, Wen Ling ^b  

^a NANJING UNIVERSITY OF POSTS AND TELECOMMUNICATIONS   (China)

^b WUHAN UNIVERSITY   (China)

Author keywords

Bloom filter; Change point detection; DDoS attack; Detection at the source end; SYN flooding attack

Indexed keywords

ASYMMETRIC TCP HANDSHAKES; BLOOM FILTERS; CHANGE POINT DETECTION; DDOS ATTACKS; DISTRIBUTED DENIAL OF SERVICE; HASH TABLES; SOURCE END DETECTION; SYN FLOODING ATTACKS;

CALCULATIONS; COSTS; DATA STORAGE EQUIPMENT; RELIABILITY; SECURITY OF DATA; SECURITY SYSTEMS; TELECOMMUNICATION SERVICES; TELECOMMUNICATION TRAFFIC;

INTERNET;

EID: 33749466484     PISSN: 02544164     EISSN: None     Source Type: Journal    
DOI: None     Document Type: Article

References (13)

1. Wang H., Zhang D., Shin K.G.. Detecting SYN flooding attacks. In: Proceedings of the Annual Joint Conference of the IEEE Computer Society and Communications Society (INFO-COM), New York, NY, USA, 2002, 3: 1530-1539.
2. Jin C., Wang H.N., Shin K.G.. Hop-count filtering: An effective defense against spoofed DDoS traffic. In: Proceedings of the 10th ACM Conference on Computer and Communication Security (CCS). Washington, DC, USA, 2003, 30-41.
3. Lemon J.. Resisting SYN flood DDoS attacks with a SYN cache. In: Proceedings of the BSDCon 2002 Conference, San Francisco, CA, USA, 2002, 89-97.
4. Mirkovic J., Prier G.. Attacking DDoS at the source. In: Proceedings of the 10th IEEE International Conference on Network Protocols, Paris, France, 2002, 312-321.
5. Ferguson P., Senie D.. Network ingress filtering: Defeating denial of service attacks which employ IP source address spoofing. May 2000. [Online], http://www.ietf.org/rfc/rfc2827.txt.
6. Branigan S., Burch H., Cheswick B., Wojcik F.. What can you do with Traceroute? IEEE Internet Computing, 2001, 5: 96.
7. Li De-Quan, Su Pu-Rui, Feng Deng-Guo. Notes on packet marking for IP traceback. Journal of Software, 2004, 15(2): 250-258 (in Chinese).
8. Ioannidis J., Bellovin S. M.. Implementing pushback: Router-based defense against DDoS attacks. In: Proceedings of the Network and Distributed System Security Symposium (NDSS), San Diego, California, 2002.
9. Bloom B. H.. Space/time trade-offs in hash coding with allowable errors. Communications of the ACM, 1970, 13(7): 422-426.
10. Brodsky B.. Nonparametric Methods in Change-Point Problems. The Netherlands: Kluwer Academic Publishers, 1993.
11. Lippmann R., Fried D., Graf I., Haines J., Kendall K., Mc-Clung D., Weber D., Webster S., Cunninghan D. W. R., Zissman M.. Evaluating intrusion detection systems: The 1998 DARPA off-line intrusion detection evaluation. In: Proceedings of the 2000 DARPA Information Survivability Conference and Exposition, Hilton Head, SC, USA, 2000, 2: 12-26.
12. Chan E., Chan H., Chan K., Chan V., Chanson S. et at. IDR: An intrusion detection router for defending against distributed denial of-service (DDoS) attacks. In: Proceedings of the 7th International Symposium on Parallel Architectures, Algorithms and Networks 2004 (ISPAN'04), Hong Kong, 2004, 581-586.
13. Abdelsayed S., Glimsholt D., Leckie C., Ryan S., Shami S.. An efficient filter for denial-of-service bandwidth attacks. In: Proceedings of the IEEE Global Telecommunications Conference (GLOBECOM'03), San Francisco, USA, 2003, 3: 1353-1357.