Methods of distinguishing flash crowds from spoofed DoS attacks

NGI 2007: 2007 Next Generation Internet Networks - 3rd EuroNGI Conference on Next Generation Internet Networks: Design and Engineering for Heterogeneity

Volumn , Issue , 2007, Pages 167-173

  Le, The Quyen ^a   Zhanikeev, Marat ^a   Tanaka, Yoshiaki ^a  

^a WASEDA UNIVERSITY   (Japan)

Author keywords

[No Author keywords available]

Indexed keywords

FLASH MEMORY; INTERNET; SYSTEM STABILITY; TELECOMMUNICATION SERVICES; TELECOMMUNICATION TRAFFIC; WEB SERVICES;

DENIAL OF SERVICE (DOS); SPOOFED ATTACKS; TRAFFIC PATTERNS; WEB TRAFFIC;

NETWORK SECURITY;

EID: 34548812317     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/NGI.2007.371212     Document Type: Conference Paper

References (6)

1. T. Q. Le, M. Zhanikeev and Y. Tanaka, Anomaly Identification Based on Flow Analysis, Proc. of TENCON2006 Conference, Hong Kong, Nov 2006.
2. L. Feinstein, D. Schnackenberg, R. Balupari, and D. Kindred, Statistical Approaches to DDoS Attack Detection and Response,Proc. of DARPA Information Survivability Conference and Exposition, Apr. 2003, pp. 303-314.
3. J. Jung, B. Krishnamurthy, and M. Rabinovich, "Flash Crowds and Denial of Service Attacks: Characterization and Implications for CDNs and Web Sites", Proc. Int'l World Wide Web Conference, ACM Press, 2002, pp. 252-262.
4. WorldCup 98 and NASA Web server logs are available on the Internet Traffic Archive: http://ita.ee.lbl.gov/html/traces.html
5. Information about MAWI project is available on: http://tracer.csl.so.ny. co.jp/mawi/.
6. IP version 4 address space information is available on: http://www.iana.org/assignme.nts/ipv4-address-space