Source detection of SYN flooding attacks

2009 International Conference on Network and Service Security, N2S 2009

Volumn , Issue , 2009, Pages

  Bellaïche, Martine ^a   Grégoire, Jean Charles ^b  

^a ÉCOLE POLYTECHNIQUE DE MONTRÉAL   (Canada)

^b INRS EMT   (Canada)

Author keywords

Denial of service; Network security; Source based detection; Stateful detection; SYN flooding attack; TCP handshake

Indexed keywords

DENIAL OF SERVICE; ENTROPY MEASURE; SOURCE DETECTION; SYN FLOODING ATTACK; TCP HANDSHAKE;

INTERNET; TELECOMMUNICATION TRAFFIC; TRANSMISSION CONTROL PROTOCOL;

NETWORK SECURITY;

EID: 70449625471     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (14)

1. D. M. G. Voelker, and S. Savage, "Inferring Internet denial-of-service activity," in USENIX Security Symposium, August 2001.
2. P. Ferguson and D. Senie, "Network ingress filtering: Defeating denial of service attacks which employ IP source address spoofing," 2000, http://www.ietf.org/rfc/rfc2827.txt.
3. H. Wang, D. Zhang, and K. G. Shin, "Detecting SYN flooding attacks," in Proceedings of IEEE INFOCOM, 2002.
4. J. Mirkovic, G. Prier, and P. Reiher, "Source-end DDoS defense," in Second IEEE International Symposium on Network Computing and Applications, April 2003.
5. K. Park and H. Lee, "On the effectiveness of Route-Based packet filtering for distributed DoS attack prevention in Power-Law Internets," in SIGCOMM. ACM, August 2001, pp. 15-26.
6. H. Wang, D. Zhang, and K. G. Shin, "Sniffing SYN flooding sources," in Proceedings of IEEE International Conference on Distributed Computing Systems (ICDCS), 2002.
7. M. Basseville and I. V. Nikiforov, Detection of abrupt changes: theory and application. Prentice-Hall, Inc., 1993.
8. S. Malliga, A. Tamilarasi, and M. Janani, "The impact of flooding attacks on network-based services," in International Conference on Computing, Communication and Networking, December 2008.
9. H. Wang and K. G. Shin, "Transport-aware IP routers: A built-in protection mechanism to counter DDoS attacks," IEEE Transactions on Parallel and Distributed Systems, vol. 14, no. 9, September 2003.
10. L. Feinstein, D. Schnackenberg, R. Balupari, and D. Kindred, "Statistical approaches to DDoS attack detection and response," in Proceedings in DARPA Information Survivability Conference and Exposition. IEEE Computer Society, April 2003.
11. C. Shannon and W. Weaver, "The mathematical theory of communication," in University of Illinois Press, 1963.
12. V. A. Siris and F. Papagalou, "Application of anomaly detection algorithms for detecting SYN flooding attacks," in IEEE, GlobeCom, December 2004.
13. "UCLA packet traces," http://lever.cs.ucla.edu/ddos/traces/.
14. B. Xiao, W. Chen, Y. He, and S. E.H.-M., "An active detecting method against SYN flooding attack," in Proceedings. 11th International Conference on Parallel and Distributed Systems, July 2005.