FVBA: A combined statistical approach for low rate degrading and high bandwidth disruptive DDoS attacks detection in ISP domain

Proceedings of the 2008 16th International Conference on Networks, ICON 2008

Volumn , Issue , 2008, Pages

  Gupta, B B ^a   Misra, Manoj ^a   Joshi, R C ^a  

^a INDIAN INSTITUTE OF TECHNOLOGY ROORKEE   (India)

Author keywords

Distributed denial of service (DDoS); False negatives; False positives; Network security

Indexed keywords

DDOS ATTACK; DDOS DETECTION; DIFFERENT ATTACKS; DISTRIBUTED DENIAL OF SERVICE ATTACK; DISTRIBUTED DENIAL-OF-SERVICE (DDOS); FALSE ALARM RATE; FALSE NEGATIVES; FALSE POSITIVES; HIGH BANDWIDTH; HIGH DETECTION RATE; LEGITIMATE USERS; LINUX PLATFORM; LOW RATES; NETWORK SIMULATORS; SIMULATION RESULT; STATISTICAL APPROACH; STATISTICAL MEASURES;

ALARM SYSTEMS; COMPUTER OPERATING SYSTEMS; INTERNET SERVICE PROVIDERS; TELECOMMUNICATION NETWORKS;

NETWORK SECURITY;

EID: 66649133397     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICON.2008.4772654     Document Type: Conference Paper

References (19)

1. C. Sangpachatanaruk, S. M. Khattab, T. Znati, R Melhem, D. Mossé, "Design and analysis of a replicated elusive server scheme for mitigating denial of service attacks," Journal of Systems and Software, Vol. 73, Issue 1, pp. 15 - 29, 2004.
2. Denial of Service Attacks - DDOS, SMURF, FRAGGLE, TRINOO, Available: www.infosyssec.com/infosyssec/secdos1.htm.
3. "DDoS attacks on Yahoo, Buy.com, eBay, Amazon, Datek, E*Trade," CNN Headline News, Feb. 7-11, 2000.
4. AusCERT, "2005 Australian computer crime and security survey," Tech. Report, Australian Computer Emergency Response Team, 2005. Available: http://www.auscert.org.au/ crimesurvey [accessed Jan. 4, 2006].
5. L. A. Gordon, M. P. Loeb, W. Lucyshyn, R. Richardson, "2005 CSI/FBI computer crime and security survey," Tech. Report, Computer Security Institute, 2005. Available: www.GCSI.com.
6. GT-ITM Traffic Generator Documentation and tool, Available: http://www.cc.gatech.edu/fac/ EllenLegura/graphs.html.
7. NS Documentation, Available: http://www.isi.edu/ nsnam/ns.
8. J. Molsa, "Mitigating denial of service attacks: A tutorial," Journal of computer security, 13, pp. 807-837, IOS Press, 2005.
9. J. Mirkovic, P. Reiher, "A Taxonomy of DDoS Attack and DDoS defense Mechanisms," ACM SIGCOMM Computer Communications Review, vol. 34 (2), pp. 39-53, April 2004.
10. T Peng, C Leckie, K Ramamohanarao, "Survey of Network Based Defense Mechanisms Countering the DoS and DDoS Problems," ACM Computing Surveys, vol. 39 (1), Article 3, April 2007.
11. Krishan Kumar, R. C. Joshi, and Kuldip Singh, "An Integrated Approach for Defending Against Distributed Denial-of-Service (DDoS) Attacks," In proceedings of IRISS-2006, India.
12. V. Paxson, "Bro: A System for Detecting Network Intruders in Real- Time," International Journal of Computer and Telecommunication Networking, vol. 31 (24), pp. 2435-2463, 1999.
13. M. Roesch, "Snort-Lightweight Intrusion Detection for Networks," In Proceedings of the USENIX Systems Administration Conference (LISA '99), pp. 229-238, Nov.1999.
14. J. Mirkovic, G. Prier, and P. Reiher, "Attacking DDoS at the source," In Proceedings of ICNP-2002, Paris, France, pp. 312-321, 2002.
15. C. M. Cheng, H. T. Kung, and K. S. Tan, "Use of spectral analysis in defense against DoS attacks," In Proceedings of IEEE GLOBECOM 2002, Taipei, Taiwan, pp. 2143-2148, 2002.
16. W. Lee, S. J. Stolfo, and K. W. Mok, "A data mining framework for building intrusion detection models," In Proceedings of the 1999 IEEE Symposium on Security and Privacy, Oakland, CA, pp. 120-132, May 9-12, 1999.
17. W. Lee, S. J. Stolfo, and K. W. Mok, "A data mining framework for building intrusion detection models," In Proceedings of the 1999 IEEE Symposium on Security and Privacy, Oakland, CA, pp. 120-132, May 9-12, 1999.
18. Ellen W. Zegura, Kenneth L. Calvert, and Michael J. Donahoo, "A quantitative comparison of graph-based models for Internet Topology," IEEE/ACM Transactions on Networking, 5(6), pp. 770-783, 1997. (Pubitemid 127768486)
19. B. Gibson, "TCP Limitations on File Transfer Performance Hamper the Global Internet," White paper, Sept. 2006. Available: http://www. niwotnetworks.com/gbx/TCPLimitsFastFileTransfer.htm.