Lightweight detection of DoS attacks

ICON 2007 - Proceedings of the 2007 15th IEEE International Conference on Networks

Volumn , Issue , 2007, Pages 77-82

  Pukkawanna, Sirikarn ^a   Visoottiviseth, Vasaka ^a   Pongpaibool, Panita ^b  

^a MAHIDOL UNIVERSITY   (Thailand)

^b NATIONAL ELECTRONICS AND COMPUTER TECHNOLOGY CENTER   (Thailand)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER CRIME; INTERNET; MAPS; NETWORK SECURITY; SECURITY OF DATA; SENSORS; TELECOMMUNICATION TRAFFIC; TURBULENT FLOW;

ATTACK PATTERNS; BLIND CLASSIFICATION; CURRENT FLOWING; DENIAL-OF-SERVICE ATTACKS; DOS ATTACKS; FALSE POSITIVE; INTERNATIONAL CONFERENCES; INTERNET INFRASTRUCTURES; INTRUSION DETECTION SYSTEMS; PORT NUMBERS; SYN FLOODING; SYSTEM SURVIVABILITY;

INTRUSION DETECTION;

EID: 48149114703     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICON.2007.4444065     Document Type: Conference Paper

References (19)

1. Thomas Karagiannis, Konstantina Papagiannaki, and Michalis Faloutsos, "BLINC: Multilevel Traffic Classification in the Dark, "ACM Sigcomm, 2005.
2. J. Mirkovic, J. Martin, and P. Reiher, "A Taxonomy of DDoS Attacks and DDoS Defense Mechanisms," ACM Sigcomm Computer Comm. Rev., vol. 34, no.2, 2004, 39-53.
3. Snort, http://www.snort.org.
4. M. Roughan, S. Sen, O. Spatscheck, and N. Duffield, "Class-of- service mapping for QoS: A statistical signature-based approach to IP traffic classification," Internet Measurement Conference, 2004
5. A. McGregor, M. Hall, P. Lorier, and J. Brunskill, "Flow clustering using machine learning techniques," In Proceeding of Passive and Active Measurement Workshop, 2004
6. D. Zuev and A. Moore, "Traffic classification using a statistical approach," In Proceeding of Passive and Active Measurement Workshop, 2005.
7. A. Moore and D. Zuew, "Internet traffic classification using Bayesian analysis," In Proceeding of ACM SIGMETRICS, 2005.
8. Yan Qial and Xie Weixin, "A Network IDS with Low False Positive Rate," In Proceeding of the 2002 Congress on, Vol.2, pp. 1121-1126, 2002.
9. Neptune http://www.phrack.org/archives/48/P48-13.
10. nmap http://insecure.org/nmap/.
11. jping http://www.tenebril.com/src/info.php?id=11777455.
12. nbtscan http://www.inetcat.net/sonware/nbtscan.html.
13. CERT Coordination Center, "Denial of Service Attacks," http://www.cert.org/tech_tips/denial_of_service.html.
14. CERT Coordination Center, "Trends in Denial of Service Attack Technology," October 2001, http://www.cert.org/archive/pdf/DoS_trends.pdf.
15. CERT Coordination Center, "TCP SYN flooding and IP spoofing attacks," http://www.cert.org/advisories/CA-1996-21.html.
16. S. Axelsson, "Intrusion detection systems: A survey and taxonomy," Technical Report 99-15, Department of Computer Engineering, Chalmers University, March 2000.
17. Flashget http://www.flashget.com/.
18. Haining Wang, Danlu Zhang, and Kang G. Shin, "Detecting SYN Flooding Attacks," In Proceeding of IEEE INFOCOM'2002, New York City, June 2002.
19. Security Focus, "Identifying P2P users using traffic analysis", http://www.securityfocus.com/infocus/1843.