Wavelet-based detection of DoS attacks

GLOBECOM - IEEE Global Telecommunications Conference

Volumn , Issue , 2006, Pages

  Dainotti, Alberto ^a   Pescapé, Antonio ^a   Ventre, Giorgio ^a  

^a UNIVERSITY OF NAPLES FEDERICO II   (Italy)

Author keywords

[No Author keywords available]

Indexed keywords

ALARM SYSTEMS; COMPUTER ARCHITECTURE; TELECOMMUNICATION TRAFFIC; WAVELET TRANSFORMS;

ADAPTIVE THRESHOLD; AUTOMATED DETECTION; CUMULATIVE SUM; DENIAL OF SERVICE (DOS);

SIGNAL DETECTION;

EID: 50949130514     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/GLOCOM.2006.279     Document Type: Conference Paper

References (21)

1. J. Brutlag, "Aberrant behavior detection in time series for network monitoring, USENIX Fourteenth System Administration Conference LISA XIV, Dec. 2000.
2. V. A. Siris, F. Papagalou, "Application of Anomaly Detection Algorithms for Detecting SYN Flooding Attacks", IEEE GLOBECOM 2004, Nov. 2004, pp. 2050-2054.
3. R. B. Blazek, H. Kim, B. Rozovskii, A. Tartakovsky, "A Novel Approach to Detection of Denial-of-Service Attacks via Adaptive Sequential and Batch-Sequential Change-Point Detection Methods", IEEE Workshop Information Assurance and Security, 2001, pp. 220-226.
4. Y. Gu, A. McCallum, D. Towsley, "Detecting Anomalies in Network Traffic Using Maximum Entropy Estimation", IMC 2005.
5. A. Lakhina, M. Crovella, C. Diot, "Diagnosing Network-Wide Traffic Anomalies", ACM SIGCOMM 2004.
6. C.-M. Cheng, H.T.Kung, K.-S. Tan, "Use of spectral analysis in defense against DoS attacks", IEEE GLOBECOM 2002, pp. 2143-2148
7. P. Barford, J. Kline, D. Plonka, A. Ron, "A signal analysis of network traffic anomalies",ACM SIGCOMM InternetMeasurement Workshop 2002.
8. P. Huang, A. Feldmann, W. Willinger, "A non-intrusive, wavelet-based approach to detecting network performance problems", ACM SIGCOMM Internet Measurement Workshop, Nov. 2001.
9. L. Li, G. Lee, "DDos attack detection and wavelets", IEEE ICCCN'03, Oct. 2003, pp. 421-427.
10. A. Magnaghi, T. Hamada, T. Katsuyama, "A Wavelet-Based Framework for Proactive Detection of Network Misconfigurations", ACM SIGCOMM'04 Workshops, 2004.
11. S. Mallat, W. L. Hwang, "Singularity Detection and Processing with Wavelets", IEEE Trans. on information theory, vol. 38, No.2, Mar. 1992.
12. http://www-stat.stanford.edu/wavelab/.
13. R. Lippmann, et al., "The 1999 DARPA Off-Line Intrusion Detection Evaluation", Computer Networks 34(4) 579-595, 2000. Data is available at http://www.ll.mit.edu/IST/ideval/
14. G. Vigna, R. Kemmerer, "NetSTAT: A Network-based Intrusion Detection System", Journal of Computer Security, 7(1), IOS Press, 1999.
15. R. Sekar, A. Gupta, J. Frullo, T. Shanbhag, S. Zhou, A. Tiwari and H. Yang, "Specification Based Anomaly Detection: A New Approach for Detecting Network Intrusions", ACM CCS, 2002.
16. http://lever.cs.ucla.edu/ddos/traces
17. J. Mirkovic, G. Prier, P. Reiher, "Attacking DDoS at the Source", ICNP 2002, pp. 312-321, Nov. 2002.
18. http://www.grid.unina.it/Traffic
19. CERT Coordination Center. Denial-of-service tools - Advisory CA-1999-17, http://www.cert.org/advisories/CA-1999-17.html, Dec. 1999.
20. CERT Coordination Center. DoS Developments - Advisory CA-2000-01, http://www.cert.org/advisories/CA-2000-01.html, Jan. 2000.
21. J. Yuan, K. Mills, "Monitoring the macroscopic effect of DDos flooding attacks", IEEE Trans. on dependable and secure computing, vol.2, N.4, 2005.