LD2: A system for lightweight detection of denial-of-service attacks

Proceedings - IEEE Military Communications Conference MILCOM

Volumn , Issue , 2008, Pages

  Pukkawanna, Sirikarn ^a   Pongpaibool, Panita ^a   Visoottiviseth, Vasaka ^b  

^a NATIONAL ELECTRONICS AND COMPUTER TECHNOLOGY CENTER   (Thailand)

^b MAHIDOL UNIVERSITY   (Thailand)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER CRIME; INTERNET PROTOCOLS; LADDER NETWORKS;

CPU CYCLES; DENIAL-OF-SERVICE ATTACKS; DETECTION ACCURACIES; DOS ATTACKS; FLOW BEHAVIORS; OPEN SOURCES; PACKET CONTENTS; PORT SCANS; SYN FLOODS;

MILITARY COMMUNICATIONS;

EID: 62349121593     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/MILCOM.2008.4753369     Document Type: Conference Paper

References (24)

1. J. Mirkovic, J. Martin, and P. Reiher, "A Taxonomy of DDoS Attacks and DDoS Defense Mechanisms," ACM Sigcomm Computer Comm. Rev., vol. 34, no.2, 2004, 39-53.
2. S. Pukkawanna, V.Visoottiviseth, P.Pongpaibool, "Lightweight Detection of DoS Attack", In Proc. of IEEE ICON2007, Adelaide, South Australia, November 2007.
3. T. Karagiannis, K. Papagiannaki, and M. Faloutsos, "BLINC: Multilevel Traffic Classification in the Dark," In Proc. of ACM Sigcomm, 2005.
4. Snort, http://www.snort.org.
5. Ntop, http://ntop.org.
6. S. Axelsson, "Intrusion detection systems: A survey and taxonomy," Technical Report 99-15, Department of Computer Engineering, Chalmers University, March 2000.
7. Yan Qial and Xie Weixin, "A Network IDS with Low False Positive Rate," In Proc. of the 2002 Congress on Evolutionary Computation, Vol.2, pp. 1121-1126, 2002.
8. M. Roughan, S. Sen, O. Spatscheck, and N. Duffield, "Class-of- service mapping for QoS: A statistical signature-based approach to IP traffic classification," Internet Measurement Conference, 2004.
9. A. McGregor, M. Hall, P. Lorier, and J. Brunskill, "Flow clustering using machine learning techniques," In Proc. of Passive and Active Measurement Workshop, 2004.
10. D. Zuev and A. Moore, "Traffic classification using a statistical approach," In Proc. of Passive and Active Measurement Workshop, 2005.
11. A. Moore and D. Zuew, "Internet traffic classification using Bayesian analysis," In Proc. of ACM SIGMETRICS, 2005.
12. Iperf, http://dast.nlanr.net/Projects/Iperf/
13. MAWI Working Group Traffic Archive, http://mawi.wide.ad.jp/mawi/.
14. tcpreplay, http://tcpreplay.synfrn.net/trac/
15. Neptune, http://www.phrack.org/archives/48/P48-13.
16. nmap, http://insecure.org/nmap/.
17. jping, http://www.tenebril.com/src/info.php?id=11777455.
18. udpflood.c, http://www.leetupload.com/dbindex2/index.php? dir=Misc/Exploit-Code-Archive/&sort=size&sort-mode=a
19. smurf.c, http://www.hackerzlair.org/software/c/.
20. Juniper Networks, "Denial of Service and Attack Protection," Firewall/VPN Feature Brief, http://www.juniper.net/products/integrated/dos.pdf, June 2006.
21. sysstat, http://pagesperso-orange.fr/sebastien.godard/.
22. Snort Forums Archive, http://www.snort.org/archive-3-4690.html.
23. Arakis, "Port Description," http://www.arakis.pl/en/ports.html, June 21, 2008.
24. Perm Computing, "W32.Sasser.Worm," http://www.upenn.edu/ computing/virus/04/w32.sasser.worm.html.