Sliding mode observer for anomaly detection in TCP/AQM networks

2009 2nd International Conference on Communication Theory, Reliability, and Quality of Service, CTRQ 2009

Volumn , Issue , 2009, Pages 113-118

  Rahmé, Sandy ^a,b   Labit, Yann ^a,b   Gouaisbaut, Frédéric ^a,b  

^a LAAS CNRS   (France)

^b UNIVERSITÉ PAUL SABATIER   (France)

Author keywords

[No Author keywords available]

Indexed keywords

ANOMALY DETECTION; FINITE TIME; FLUID FLOW MODELS; NETWORK COMMUNITIES; OPEN PROBLEMS; PERTURBATION SIGNALS; SIMULINK; SLIDING MODE OBSERVERS; SMOOTHING TECHNIQUES; SYSTEM STATE; TIME-DELAY SYSTEMS; TRAFFIC MONITORING;

DELAY CONTROL SYSTEMS; FLOW OF FLUIDS; INFORMATION THEORY; QUALITY CONTROL; QUALITY OF SERVICE; SIGNAL RECONSTRUCTION; SLIDING MODE CONTROL;

RELIABILITY THEORY;

EID: 70449103089     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CTRQ.2009.18     Document Type: Conference Paper

References (38)

1. S. M. Specht and R. Lee, "Distributed denial of service: Taxonomies of attacks, tools, and countermeasures," in In ISCA PDCS, 2004, pp. 543-550.
2. J. Mirkovic, "A taxonomy of ddos attacks and ddos defense mechanisms," ACM SIGCOMM Computer Communication Review, vol.34, pp. 39-53, 2004.
3. J. Aussibal, P. Borgnat, Y. Labit, N. Dewaele, G. Larrieu, L. Gallon, P. Owezarski, P. Abry, and K. Boudaoud, "Base de traces d'anomalies légitimes et illégitimes." in 2nd Conference on Security in Network Architectures and Information Systems SAR-SSI 2007, June 2007, pp. 153-168.
4. D. Dittrich, "The dos project's trinoo distributed denial of service attack tool," http://staff.washington.edu/dittrich/misc/tinoo.analysis.
5. TFN2k, http://packetstormsecurity.org/distributed/TFN2k Analysis-1.3.txt.
6. A. Hussain, J. Heidemann, and C. Papadopoulos, "A framework for classifying denial of service attacks," in SIGCOMM, Karlsruhe, Germany, Aug 2003, pp. 99-110.
7. N. Ye, "A markov chain model of temporal behavior for anomaly detection," in Proceedings of the 2000 IEEE Systems, Man, and Cybernetics Information Assurance and Security Workshop, 2000, pp. 171-174.
8. A. Lakhina, M. Crovella, and C. Diot, "Diagnosing network-wide traffic anomalies," in ACM SIGCOMM, Portland, 2004, pp. 219-230.
9. P. Barford, J. Kline, D. Plonka, and A. Ron, "A signal analysis of network traffic anomalies," in Internet Measurement Workshop 2002, 2002, pp. 71-82.
10. J. Jung, B. Krishnamurthy, and M. Rabinovich, "Flash crowds and denial of service attacks: Characterization and implications for cdns and web sites," in Proceedings of the International World Wide Web Conference, 2002, pp. 252-262.
11. Y. Ariba, Y. Labit, and F. Gouaisbaut, "Network anomaly estimation for tcp/aqm networks using an observer," 3rd ACM International Workshop on Feedback Control Implementation and Design in Computing Systems and Networks, p. 38183823, June 2008.
12. V. Misra, W. Gong, and D. Towsley, "Fluid-based analysis of a network of aqm routers supporting tcp flows with an application to red," in ACM SIGCOMM, Aug. 2000, pp. 151-160.
13. J.-P. Richard, "Time delay systems: An overview of some recent advances and open problems," Automatica, vol.39, pp. 1667-1694, 2003.
14. C. de Souza, R. Palhares, and P. Peres, "Robust hσ filtering for uncertain linear systems with multiple time-varying state: An lmi approach," 38-th IEEE CDC'99, Conference on Decision and Control, pp. 2023-2028, 1999. (Pubitemid 30575608)
15. E. Fridman, F. Gouaisbaut, M. Dambrine, and J.-P. Richard, "Sliding mode control of systems with time-varying delays via a descriptor approach," International Journal of Systems Science, vol.34, pp. 553-559, 2003.
16. M. Darouach, P. Pierrot, and E. Richard, "Design of reduced-order observers without internal delays," Automatic Control, IEEE Transactions on, vol.44, pp. 1711-1713, Sep 1999.
17. M. Darouach, "Linear functional observers for systems with delays in state variables," Automatic Control, IEEE Transactions on, vol.46, no.3, pp. 491-496, Mar 2001.
18. V. Utkin, Sliding Modes in Control and Optimization. Berlin, Germany: Springer-Verlag, 1992.
19. W. Perruquetti and J.-P. Barbot, Sliding Mode Control in Engineering. New York: Marcel Dekker, Inc, 2002.
20. C. Tan and C. Edwards, "An lmi approach for designing sliding mode observers," International Journal of Control, vol.74, pp. 1559-1568, June 2001.
21. A. Seuret, "Commande et observation des systémes à retards variables: Théorie et applications," Ph.D. dissertation, Ecole Centrale de Lille Université des Sciences et Technologie de Lille, Lille I, Oct. 2006.
22. S. Spurgeon, "Sliding mode observers: a survey," International Journal of Systems Science, vol.39, pp. 751-764, Aug 2008.
23. C. Edwards, S. Spurgeon, and R. Patton, "Sliding mode observers for fault detection and isolation," Automatica, vol.36, pp. 541-553, 2000. (Pubitemid 30550607)
24. R. Srikant, The mathematics of internet congestion control. Boston:Birkhuser, 2004.
25. S. Low, F. Paganini, and J. Doyle, "Internet congestion control," Control Systems Magazine, IEEE, vol.22, pp. 28-43, Feb 2002.
26. C. Hollot, V. Misra, D. Towsley, and W. Gong, "Analysis and design of controllers for aqm routers supporting tcp flows," Automatic Control, IEEE Transactions on, vol.47, pp. 945-959, Jun 2002.
27. V. Jacobson, "Congestion avoidance and control," in ACM SIGCOMM, Stanford, CA, Aug. 1988, pp. 314-329.
28. S. Floyd and V. Jacobson, "Random early detection gateways for congestion avoidance," Networking, IEEE/ACM Transactions on, vol.1, pp. 397-413, Aug 1993.
29. T. Ott, T. Lakshman, and L. Wong, "Sred: stabilized red," INFOCOM '99. Eighteenth Annual Joint Conference of the IEEE Computer and Communications Societies. Proceedings. IEEE, vol.3, pp. 1346-135 vol.3, Mar 1999.
30. W. chang Feng, K. Shin, D. Kandlur, and D. Saha, "The blue active queue management algorithms," Networking, IEEE/ACM Transactions on, vol.10, pp. 513-528, Aug 2002.
31. D. Lapsley and S. Low, "Random early marking for internet congestion control," Global Telecommunications Conference, 1999. GLOBECOM '99, vol.3, pp. 1747-1752, 1999.
32. S. Kunniyur and R. Srikant, "Analysis and design of an adaptive virtual queue (avq) algorithm for active queue management," in ACM SIGCOMM, San Diego, CA, USA, Aug. 2001, pp. 123-134.
33. S. Ryu, C. Rump, and C. Qiao, "Advances in active queue management (aqm) based tcp congestion control," Telecommunication Systems, vol.4, pp. 317-351, 2004.
34. Y. Ariba, Y. Labit, and F. Gouaisbaut, "Design and performance evaluation of a state-space based aqm," Communication Theory, Reliability, and Quality of Service, 2008. CTRQ '08. International Conference on, pp. 89-94, July 2008.
35. J. Slotine, J. Hedrick, and E. Misawa, "On sliding observers for nonlinear systems," in American Control Conference, 1986, pp. 1794-1800.
36. K. Gu, V. L. Kharitonov, and J. Chen, Stability of Time-Delay Systems. Birkhuser, 2003.
37. A. Kuzmanovic and E. W. Knightly, "Low-rate tcp-targeted denial of service attacks (the shrew vs. the mice and elephants," in Proceedings of ACM SIGCOMM, 2003, pp. 75-86.
38. Y. Chen and K. Hwang, "Collaborative detection and filtering of shrew ddos attacks using spectral analysis," J. Parallel Distrib. Comput., vol.66, no.9, pp. 1137-1151, 2006.