A distributed approach using entropy to detect DDoS attacks in ISP domain

Proceedings of ICSCN 2007: International Conference on Signal Processing Communications and Networking

Volumn , Issue , 2007, Pages 331-337

  Kumar, Krishan ^a   Joshi, R C ^a   Singh, Kuldip ^a  

^a INDIAN INSTITUTE OF TECHNOLOGY ROORKEE   (India)

Author keywords

And false negatives; Anomaly detection; Distributed Denial of Service (DDoS); Entropy; False positives

Indexed keywords

COMPUTATION THEORY; COMPUTER SIMULATION; ENTROPY; FEATURE EXTRACTION; TOPOLOGY;

ANOMALY DETECTION; FALSE POSITIVES; ISP LEVEL TOPOLOGY; VICTIM'S SITE;

SECURITY OF DATA;

EID: 34548183355     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICSCN.2007.350758     Document Type: Conference Paper

References (17)

1. R.K.C. Chang, "Defending against Flooding-Based Distributed Denial-of-Service Attacks: A Tutorial," IEEE Communication Magazine, 2002.
2. J. Mirkovic, and P. Reiher, "A Taxonomy of DDoS Attack and DDoS defense Mechanisms," ACM SIGCOMM Computer Communications Review, Volume 34, Number 2, April 2004.
3. Computer Crime Research Center. "2004 CSI/FBI Computer Crime and Security Survey," Available at: http://www.crime-research.org/news/11.06. 2004/423/
4. David Moore, Geoffrey M Voelker, and Stefan Savage, "Inferring Internet Denial-of-Service Activity," In Proceedings of 10th USENIX Security Symposium, Aug. 2001
5. T. M. Gil, and M. Poletto, "Multops: a data-structure for bandwidth attack detection," Proceedings of the 10th USENIX Security Symposium, 2001.
6. R. B. Blazek, H. Kim, B. Rozovskii, and A. Tartakovsky, "A novel approach to detection of denial-of-service attacks via adaptive sequential and batch sequential change-point detection methods," Proceedings of IEEE Systems, Man and Cybernetics Information Assurance Workshop, 2001.
7. Boldizsar Bencsath, and Istvan Vajda, "Protection against DDoS Attacks Based on Traffic Level Measurements," Western Simulation MultiConference. San Diego, California, USA., 2004.
8. C.M. Cheng, H.T. Kung, and K.S. Tan, "Use of spectral analysis in defense against DoS attacks," Proceedings of IEEE GLOBECOM 2002, pp. 2143-2148, 2002.
9. J. Mirkovic, G. Prier, and P. Reiher, "Attacking DDoS at the source," Proceedings of ICNP 2002, Paris, France, pp. 312-321, 2002.
10. Anukool Lakhina, Mark Crovella, and Christophe Diot, "Mining Anomalies Using Traffic Feature Distributions,"
11. GT-ITM Traffic Generator Documentation and tool http://www.cc.gatech.edu/ fac/EllenLegura/graphs.html
12. NS Documentation Available: http://www.isi.edu/ nsnam/ns
13. V. Paxson, "Bro: A System for Detecting Network Intruders in Real-Time," Computer Networks, vol. 31, nos. 23-24, 1999.
14. M. Roesch, "Snort - Lightweight Intrusion Detection for Networks," Proc. USENIX Systems Administration Conf. (LISA'99), Nov. 1999.
15. Y. Xu, and R. Guerin, "On the Robustness of Router-based Denial-of-Service Defense Systems," ACM SIGCOMM, 2005.
16. J. Ioannidis, and S. M. Bellovin, "Implementing Pushback: Router-Based Defense Against DDoS Attacks," IEEE INFOCOMM, 2003.
17. Krishan Kumar, R.C. Joshi, and Kuldip Singh, "A Distributed Approach using Entropy to Detect DDoS Attack", Technical Report E & CE - TR - 2006 - 002, Indian Institute of Technology Roorkee, 2006.