Detecting flooding-based DDoS attacks

IEEE International Conference on Communications

Volumn , Issue , 2007, Pages 1229-1234

  You, Yonghua ^a   Zulkernine, Mohammad ^a   Haque, Anwar ^b  

^a QUEEN S UNIVERSITY   (Canada)

^b IP/BB Planning   (Canada)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER SIMULATION; INFORMATION SYSTEMS; INTERNET; MATHEMATICAL MODELS; TELECOMMUNICATION TRAFFIC;

MEAN DISTANCE VALUES; TRAFFIC SEPARATION;

SECURITY OF DATA;

EID: 38549153397     PISSN: 05361486     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICC.2007.208     Document Type: Conference Paper

References (26)

1. K. Xu, Z.-L. Zhang, and S. Bhattacharyya, "Reducing unwanted traffic in a backbone network," in Steps to Reducing Unwanted Traffic on the Internet Workshop (SRUTI), 2005, pp. 9-15.
2. Y. Chen, and K. Hwang, "Collaborative change detection of DDoS attacks on community and ISP networks," in the IEEE International Symposium on Collaborative Technologies and Systems (CTS'06), 2006, pp. 401-410.
3. R. Mahajan, S. Floyd, and D. Wetherall, "Controlling high-bandwidth flows at the congested router," in Proceedings of ACM 9th International Conference on Network Protocols (ICNP), 2001, pp. 192-201.
4. T. Peng, C. Leckie, and R. Kotagiri, "Proactively detecting DDoS attack using source ip address monitoring," in Proceedings of the Third International IFIP-TC6 Networking Conference, 2004, pp. 771-782.
5. R. R. Talpade, G. Kim, and S. Khurana, "Nomad: traffic based network monitoring framework for anomaly detection," in the Fourth IEEE Symposium on Computers and Communications, 1999, pp. 442-451.
6. G. Carl, G. Kesidis, R. Brooks, and S. Rai, "Denial-of-service attack detection techniques," IEEE Internet Computing, vol. 10, no. 1, January 2006, pp. 82-89.
7. VINT Project U. C. Berkeley/LBNL, "NS2: network simulator," Available at http://www.isi.edu/nsnam/ns, 2006.
8. Y. Kim, J.-Y. Jo, and K. K. Suh, "Baseline profile stability for network anomaly detection," in Proceedings of the 3rd International Conference On Information Technology: New Generations, 2006, pp. 720-725.
9. J. Jung, A. Berger, and H. Balakrishnan, "Modeling TTL-based internet caches," in Proceedings of the Twenty-Second Annual Joint Conference of the IEEE Computer and Communications Societies, 2003, pp. 417-426.
10. L. Feinstein, D. Schnackenberg, R. Balupari, and D. Kindred, "Statistical approaches to DDoS attack detection and response," in Proceedings of DARPA Information Survivability Conference and Exposition, 2003, pp. 303-314.
11. T. Gil and M. Poleto, "Multops: a data-structure for bandwidth attack detection," in Proceedings of 10th Usenix Security Symposium, 2001, pp. 23-38.
12. J. Jiang and S. Papavassiliou, "Detecting network attacks in the internet via statistical network traffic normality prediction," Journal of Network and System Management, vol. 12, no. 1, 2004, pp. 51-72.
13. S. Lee, H. Kim, J. Na, and J. Jang, "Abnormal traffic detection and its implementation," Advanced Communication Technology, vol. 1, February 2005, pp. 246-250.
14. W Gao, J. Wang, J. Chen, and S. Chen, "Pfed: a prediction-based fair active queue management algorithm," in Proceedings of the IEEE International, Conference on Parallel Processing (ICPP), 2005, pp. 485-491.
15. A. Yaar, A. Perrig, and D. Song, "Fit: fast internet traceback," in Proceedings of 24th Annual Joint Conference of the IEEE Computer and Communications Societies (INFOCOM), 2005, pp. 1395-1406.
16. The Swiss Education and Research Network, "Default TTL values in TCP/IP," Available at http://secfr.nerim.net/docs/fingerprint/en/ ttldefault.html, 2002.
17. V. Jacobson, "Congestion avoidance and control," in Proceedings of SIGCOMM'88, ACM, 1988, pp. 314-329.
18. P. Brockwell and R. Davis., Time Series: Theory and Methods. Springer-Verlag, 1991.
19. Y. Shu, L. Wang, and L. Zhang, "Internet traffic modeling and predict ion using FARIMA models," Chinese Journal of Computers, vol. 1, no. 24, 2001, pp. 46-54.
20. P. S. R. Diniz, Adaptive Filtering: Algorithms and Practical Implementation. Kluwer Academic, 2002.
21. J. Kong, M. Mirza, J. Shu, C. Yoedhana, M. Gerla, and S. Lu, "Random flow network modeling and simulations for DDoS attack mitigation," Communications, vol. 1, May 2003, pp. 487-491.
22. M. Faloutsos, P. Faloutsos, and C. Faloutsos, "On power-law relationships of the internet topology," in SIGCOMM, 1999, pp. 251-262.
23. Topology Project University of Michigan, "Inet: Internet Topology Generator," Available at topology.eecs.umich.edu/inet/, 2006.
24. C. Jin, H. Wang, and K. G. Shin, "Hop-count filtering: an effective defense against spoofed DDoS traffic," in Proceedings of the 10th ACM Conference on Computer and Communications Security, 2003, pp. 30-41.
25. V. Paxson and S. Floyd, "Wide-area traffic: the failure of poisson modeling," in IEEE/ACM Transactions on Networking, vol. 3, no. 3, June 1995, pp. 226-244.
26. C. Papadopoulos, R. Lindell, J. Mehringer, A. Hussain, and R. Govindan, "COSSACK: coordinated suppression of simultaneous attacks," in Proceedings of DARPA Information Survivability Conference and Exposition, 2003, pp. 2-13.