Differentiating malicious DDoS attack traffic from normal TCP flows by proactive tests

IEEE Communications Letters

Volumn 10, Issue 11, 2006, Pages 793-795

  Gao, Zhiqiang ^a   Ansari, Nirwan ^a  

^a NEW JERSEY INSTITUTE OF TECHNOLOGY   (United States)

Author keywords

DDoS defense; Proactive test; TCP

Indexed keywords

ATTACK TRAFFIC; CRITICAL ISSUES; DDOS ATTACK; DDOS DEFENSE; DISTRIBUTED DENIAL OF SERVICE ATTACK; MALICIOUS TRAFFIC; PROACTIVE TEST; SIMULATION RESULT; TCP; TCP FLOWS;

SECURITY OF DATA;

EID: 40949163757     PISSN: 10897798     EISSN: None     Source Type: Journal    
DOI: 10.1109/LCOMM.2006.060669     Document Type: Article

References (6)

1. P. Mutaf, "Defending against a denial of service attack on TCP," in Proc. International Symposium on Recent Advances in Intrusion Detection (RAID 99).
2. J. Haggeity, T. Berry, Q. Shi, and M. Merabti, "DiDDeM: a system for early detection of TCP SYN flood attacks," in Proc. IEEE GLOBECOM 2004, pp. 2037-2042.
3. J. Xu and W. Lee, "Sustaining availability of Web services under distributed denial of service attacks," IEEE Trans. Comp., special issue on reliable distributed systems, vol. 52, no. 2, pp. 195-208, Feb. 2003.
4. D. Yau, J. Lui, F. Liang, and Y. Yan, "Defending against distributed denial-of-service attacks with max-min fair server-centric router throttles," IEEE/ACM Trans. Networking, vol. 13, no. 1, pp. 29-41, Feb. 2005.
5. A. Kuzmanovic and E. Knightly, "Low-rate TCP-targeted denial of service attacks (the shrew vs. the mice and elephants)," in Proc. ACM SIGCOMM 2003, pp. 75-86.
6. D. Moore, G. Voelker, and S. Savage, "Inferring Internet denial-of-service activity," in Pmc. 10th USENIX Security Symposium, pp. 9-22.