A new detection method for distributed Denial-of-Service attack traffic based on statistical test

Journal of Universal Computer Science

Volumn 15, Issue 2, 2009, Pages 488-504

  Chen, Chin Ling ^a  

^a NATIONAL PINGTUNG UNIVERSITY   (Taiwan)

Author keywords

Network monitoring; Security and protection; Statistical computing

Indexed keywords

EID: 65349192442     PISSN: 0958695X     EISSN: 09486968     Source Type: Journal    
DOI: None     Document Type: Article

References (21)

1. Ayres, P. E., Sun, H., Chao, H. Jonathan, Lau, W. C.: "ALPi: A DDoS defense system for high-speed networks"; IEEE Journal on Selected Areas in Com munications, 24, 10 (October 2006), 1864-1876.
2. Chuah, M. C., Lau, W. C., Kim, Y., Chao, H. Jonathan: "Transient performance of packetScore for blocking DDoS attacks"; ICC 2004-IEEE International Conference on Communications, 1 (June 2004), 1892-1896.
3. Duwairi, B. A., Manimaran, G.: "Intentional dropping: A novel scheme for SYN flooding mitigation"; IEEE INFOCOM 2006-IEEE International Conference on Computer Communications, 1 (April 2006), 3030-3034.
4. Gao, Z., Ansari, N.: "Differentiating malicious DDoS attack traffic from normal TCP flows by proactive tests"; IEEE Communications Letters, 10,11 (November 2006), 793-795.
5. Haggerty, J., Berry, T., Shi, Q., Merabti, M.: "DiDDeM: A system for early detection of TCP SYN flood attacks"; GLOBECOM 2004-IEEE Global Telecommunications Conference, 1 (Dec 2004), 5011-5011.
6. Jin. S., Yeung, D. S.: "A covariance analysis model for DDoS attack detection"; ICC 2004-IEEE International Conference on Communications, 1 (June 2004), 1882-1886.
7. Jing, Y., Wang, X., Xiao, X., Zhang, G.: "Defending against meek DDoS attacks by IP traceback-based rate limiting"; GLOBECOM 2006-IEEE Global Telecommunications Conference, 1 (November 2006), 1475-1479.
8. Keromytis, D.: "Vishal Misra and Dan Rubenstein SOS: An architecture for mitigating DDoS attacks"; IEEE Journal on Selected Areas in Communications, 22, 1 (Jan 2004), 176-188.
9. Kong, J., Mirza, M., Shu, J., Yoedhana, C., Gerla, M., Lu, S.: "Random flow network modeling and simulations for DDoS attack mitigation"; ICC 2003-IEEE International Conference on Communications, 1 (May 2003), 487-491.
10. Lam, H. Y., Li, C. P., Chanson, S. T., Yeung, D. Y.: "A coordinated detection and response scheme for distributed denial-of-service attacks"; ICC 2006-IEEE International Conference on Communications, 1 (June 2006), 2150-2155.
11. Li, Q., Chang, E. C., Chan, M. C.: "On the effectiveness of DDoS attacks on statistical filtering"; IEEE INFOCOM 2005-IEEE International Conference on Computer Communications, 1 (March 2005), 1373-1383.
12. Moore, D., Shannon, C., Brown, D. J., Voelker, G. M., Savage, S.: "Inferring Internet Denial-of-Service activity"; ACM Transactions on Computer Systems, 24, 2 (May 2006), 115-139.
13. Muthuprasanna, M., Manimaran, G.: "Spacetime encoding scheme for DDoS attack traceback"; GLOBECOM 2005-IEEE Global Telecommunications Conference, 1 (November 2005), 457-461.
14. Ohsita, Y., Ata, S., Murata, M.: "Detecting distributed denial-of-service attacks by analyzing TCP SYN packets statistically"; GLOBECOM 2004-IEEE Global Telecommunications Conference, 1 (Dec 2004), 5012-5012.
15. Siaterlis, C., Maglaris, B.: "Detecting DDoS attacks using a multilayer perception classifier"; IM 2005-IFIP/IEEE International Symposium on Integrated Network Management, 1 (May 2005), 1133-1136.
16. Siris, V. A., Papagalou, F.: "Application of anomaly detection algorithms for detecting SYN flooding attacks"; GLOBECOM 2004-IEEE Global Telecommunications Conference, 1 (Dec 2004), 5013-5013.
17. Tupakula, U. K., Varadharajan, V., Gajam, A. K.: "Counteracting TCP SYN DDoS attacks using automated model"; GLOBECOM 2004-IEEE Global Telecommunications Conference, 1 (Dec 2004), 5071-5071.
18. Wang, H., Zhang, D., Shin, K. G.: "Detecting SYN Flooding attacks"; IEEE INFOCOM 2002-The Conference on Computer Communications, 1 (June 2002), 1530-1539.
19. Xiang, Y., Zhou, W.: "Mark-aided distributed filtering by using neural network for DDoS defense"; GLOBECOM 2005-IEEE Global Telecommunications Conference, 1 (November 2005), 316-320.
20. You, Y., Zulkernine, M., Haque, A.: "Detecting flooding-based DDoS attacks"; ICC 2007-IEEE International Conference on Communications, 1 (June 2007),1229-1234.
21. Zou, C. C., Duffield, N., Towsley, D., Gong, W.: "Adaptive defense against various network attacks"; IEEE Journal on Selected Areas in Communications, 24, 10 (October 2006), 1877-1888.