Streaming algorithms for robust, real-time detection of DDoS attacks

Proceedings - International Conference on Distributed Computing Systems

Volumn , Issue , 2007, Pages 4-13

  Ganguly, Sumit ^a   Garofalakis, Minos ^b   Rastogi, Rajeev ^c   Sabnani, Krishan ^c  

^a INDIAN INSTITUTE OF TECHNOLOGY KANPUR   (India)

^b YAHOO RESEARCH   (United States)

^c LUCENT TECHNOLOGIES   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER CRIME; DATA REDUCTION; DISTRIBUTED COMPUTER SYSTEMS; REAL TIME CONTROL;

DISTRIBUTED DENIAL-OF-SERVICE (DDOS) ATTACKS; REAL-TIME DETECTION; STREAMING ALGORITHMS;

ALGORITHMS;

EID: 34848889298     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICDCS.2007.142     Document Type: Conference Paper

References (17)

1. "NetFlow Services and Applications". Cisco Systems White Paper (http://www.cisco.com/), 1999.
2. "CERT Advisory CA-1996-21: TCP SYN Flooding and IP Spoofing Attacks", (http://www.cert.org/), Nov. 2000.
3. N. Alon, Y. Matias, and M. Szegedy. "The Space Complexity of Approximating the Frequency Moments". In ACM STOC, 1996.
4. G. Cormode, and S. Muthukrishnan. "Space Efficient Mining of Multigraph Streams". In ACM PODS, 2005.
5. C. Cranor, T. Johnson, O. Spatscheck, and V. Shkapenyuk. "Gigascope: A Stream Database for Network Applications". In ACM SIGMOD, June 2003.
6. C. Estan and G. Varghese. "New Directions in Traffic Measurement and Accounting". In ACM SIGCOMM, Aug. 2002.
7. P. Flajolet and G. N. Martin. "Probabilistic Counting Algorithms for Data Base Applications". Journal of Computer and Systems Sciences, 31:182-209, 1985.
8. S. Ganguly, M. Garofalakis, and R. Rastogi. "Processing Set Expressions over Continuous Update Streams". In ACM SIGMOD, 2003.
9. S. Ganguly, M. Garofalakis, R. Rastogi, and K. Sabnani. "Streaming Algorithms for Robust, Real-Time Detection of DDoS Attacks". Bell Labs Tech. Memo.
10. Y. Gao, Z. Li, and Y. Chen. "A DoS Resilient Flow-Level Intrusion Detection Approach for High-Speed Networks". In IEEE ICDCS, 2004.
11. P. B. Gibbons. "Distinct Sampling for Highly-Accurate Answers to Distinct Values Queries and Event Reports". In VLDB, Sep. 2001.
12. J. Jung, B. Krishnamurthy, and M. Rabinovich. "Flash Crowds and Denial of Service Attacks: Characterization and Implications for CDNs and Web Sites". In WWW, May 2002.
13. R. Kompella, S. Singh, and G. Varghese. "On Scalable Attack Detection in the Network". In ACM SIGCOMM IMC, 2004.
14. G. S. Manku and R. Motwani. "Approximate Frequency Counts over Data Streams". In VLDB, Aug. 2002.
15. D. Moore, C. Sharon, D. Brown, G. M. Voelker, and S. Savage. "Inferring Internet Denial-of-Service Activity". In ACM TOCS, 2006.
16. S. Venkataraman, D. Song, P. Gibbons, and A. Blum. "New Streaming Algorithms for Superspreader Detection". In Network and Distributed System Security Symposium NDSS, 2005.
17. H. Wang, D. Zhang, and K. G. Shin. "Detecting SYN Flooding Attacks". In IEEE INFOCOM, June 2002.