Information theory based detection against network behavior mimicking DDoS attacks

IEEE Communications Letters

Volumn 12, Issue 4, 2008, Pages 318-321

  Yu, Shui ^a   Zhou, Wanlei ^a   Doss, Robin ^a  

^a DEAKIN UNIVERSITY   (Australia)

Author keywords

DDoS detection; Distribution distance

Indexed keywords

INFORMATION THEORY;

ATTACK FLOW; DDOS DETECTION; DETECTION ALGORITHM; DISTRIBUTION DISTANCE; FLOODING ATTACKS; NETWORK BEHAVIORS; NETWORK TRAFFIC; TIME-PERIODS;

DENIAL-OF-SERVICE ATTACK;

EID: 58149490850     PISSN: 10897798     EISSN: None     Source Type: Journal    
DOI: 10.1109/LCOMM.2008.072049     Document Type: Article

References (5)

1. R. B. G. Carl, G. Kesidis, and S. Rai, "Denial of service attack detection techniques," IEEE Internet Computing, Jan. 2006.
2. Y. Chen and K. Hwang, "Collaborative change detection of DDoS attacks on community and ISP networks," in Proc. IEEE CTS 2006.
3. J. J. B. Krishnamurthy and M. Rabinovich, "Flash crowds and denial of service attacks: Characterization and implications for CDNs and Web sites," in Proc. International WWW conferences 2002.
4. R. C. J. K. Kumar and K. Singh, "A distributed approach using entropy to detect DDoS attacks in ISP domain," in Proc. International Conference on Signal Processing, Communications and Networking (ICSCN'07).
5. T. M. Cover and J. A. Thomas, Elements of Information Theory, Second Ed., 2007.