Detecting pulsing denial-of-service attacks with nondeterministic attack intervals

Eurasip Journal on Advances in Signal Processing

Volumn 2009, Issue , 2009, Pages

  Chang, Rocky K C ^a   Luo, Xiapu ^a   Chan, Edmond W W ^a  

^a HONG KONG POLYTECHNIC UNIVERSITY   (Hong Kong)

Author keywords

[No Author keywords available]

Indexed keywords

ATTACK MODEL; CUSUM ALGORITHMS; DETECTION ALGORITHM; DETECTION SCHEME; DYNAMIC TIME WARPING; LIMITING CASE; PDOS ATTACKS; PULSING DENIAL OF SERVICES; TCP THROUGHPUT; TRAFFIC ANOMALIES;

COMPUTER CRIME; TELECOMMUNICATION TRAFFIC; TRANSMISSION CONTROL PROTOCOL; WAVELET TRANSFORMS;

SECURITY OF DATA;

EID: 66749157109     PISSN: 16876172     EISSN: 16876180     Source Type: Journal    
DOI: 10.1155/2009/256821     Document Type: Article

References (28)

1. Kuzmanovic A., Knightly E. W., Low-rate TCP-targeted denial of service attacks: the shrew vs. the mice and elephants Proceedings of the Conference on Applications, Technologies, Architectures, and Protocols for Computer Communications (SIGCOMM 03) August 2003 Karlsruhe, Germany 75 86
2. Guirguis M., Bestavros A., Matta I., Exploiting the transients of adaptation for RoQ attacks on internet resources Proceedings of the 12th IEEE International Conference on Network Protocols (ICNP 04) October 2004 Berlin, Germany 184 195
3. Luo X., Chang R. K. C., On a new class of pulsing denial-of-service attacks and the defense Proceedings of the Network and Distributed System Security Symposium (NDSS 05) February 2005 San Diego, Calif, USA 1 19
4. Shevtekar A., Anantharam K., Ansari N., Low rate TCP denial-of-service attack detection at edge routers IEEE Communications Letters 2005 9 4 363 365
5. Kwok Y.-K., Tripathi R., Chen Y., Hwang K., HAWK: halting anomalies with weighted choKing to rescue well-behaved TCP sessions from shrew DDoS attacks Proceedings of the 3rd International Conference on Computer Network and Mobile Computing (ICCNMC 05) August 2005 Zhangjiajie, China 423 432
6. Xu Y., Gurin R., On the robustness of router-based denial-of-service (DoS) defense systems ACM SIGCOMM Computer Communication Review 2005 35 3 47 60
7. The open source network intrusion detection system: Snort,. http://www.snort.org
8. Hussain A., Heidemann J., Papadopoulos C., A framework for classifying denial of service attacks Proceedings of the Conference on Applications, Technologies, Architectures, and Protocols for Computer Communications (SIGCOMM 03) August 2003 Karlsruhe, Germany 99 110
9. Chen Y., Hwang K., Kwok Y.-K., Filtering of shrew DDoS attacks in frequency domain Proceedings of the 30th Anniversary of IEEE Conference on Local Computer Networks (LCN 05) November 2005 Sydney, Australia 786 793
10. Chen Y., Hwang K., Collaborative detection and filtering of shrew DDoS attacks using spectral analysis Journal of Parallel and Distributed Computing 2006 66 9 1137 1151
11. Sun H., Lu J. C. S., Yau D. K. Y., Defending against low-rate TCP attacks: dynamic detection and protection Proceedings of the 12th IEEE International Conference on Network Protocols (ICNP 04) October 2004 Berlin, Germany 196 205
12. Mirkovic J., Prier G., Reiher P., Attacking DDoS at the source Proceedings of the 10th IEEE International Conference on Network Protocols (ICNP 02) November 2002 Paris, France 312 321
13. Chandrayana K., Kalyanaraman S., Uncooperative congestion control Proceedings of the ACM Joint International Conference on Measurement and Modeling of Computer Systems (SIGMETRICS 04) June 2004 New York, NY, USA 258 269
14. Allman M., Paxson V., Stevens W., TCP congestion control April 1999 RFC 2581 San Francisco, Calif, USA IETF
15. Stricker M. A., Orengo M., Similarity of color images 2420 Storage and Retrieval for Image and Video Databases III February 1995 San Jose, Calif, USA 381 392 Proceedings of SPIE
16. Smeulders A. W. M., Worring M., Santini S., Gupta A., Jain R., Content-based image retrieval at the end of the early years IEEE Transactions on Pattern Analysis and Machine Intelligence 2000 22 12 1349 1380
17. Brodsky B., Darkhovsky B., Non-Parametric Statistical Diagnosis: Problems and Methods 2000 Dordrecht, The Netherlands Kluwer Academic Publishers
18. Rizzo L., Dummynet: a simple approach to the evaluation of network protocols ACM SIGCOMM Computer Communication Review 1997 27 1 31 41
19. Floyd S., Jacobson V., Random early detection gateways for congestion avoidance IEEE/ACM Transactions on Networking 1993 1 4 397 413
20. Floyd S., RED: Discussions of Setting Parameters. 1997, http://www.icir.org/floyd/REDparameters.txt
21. WinPcap: The Windows Packet Capture Library. 2008, http://www.winpcap.org
22. NLANR/DAST: Iperf 1.7.0-The TCP/UDP bandwidth measurement tool. 2003, http://dast.nlanr.net/Projects/Iperf
23. Lawrence Berkeley National Laboratory (LBNL) and ICSI. LBNLs internal enterprise traffic, 2005, http://www.icir.org/enterprise-tracing
24. MAWI Working Group, Packet traces from WIDE backbone. 2006, http://tracer.csl.sony.co.jp/mawi
25. Sun H., Lui J. C. S., Yau D. K. Y., Distributed mechanism in detecting and defending against the low-rate TCP attack Computer Networks 2006 50 13 2312 2330
26. Jang J.-S. R., Lee H.-R., A general framework of progressive filtering and its application to query by singing/humming IEEE Transactions on Audio, Speech, and Language Processing 2008 16 2 350 358
27. Weeks M., Bayoumi M., Discrete wavelet transform: architectures, design and performance issues The Journal of VLSI Signal Processing 2003 35 2 155 178
28. Oppenheim A., Willsky A., Nawab S., Signals and Systems 1996 2nd Englewood Cliffs, NJ, USA Prentice-Hall