Distinguishing DDoS attacks from flash crowds using probability metrics

NSS 2009 - Network and System Security

Volumn , Issue , 2009, Pages 9-17

  Li, Ke ^a   Zhou, Wanlei ^a   Li, Ping ^a   Hai, Jing ^a   Liu, Jianwen ^a  

^a DEAKIN UNIVERSITY   (Australia)

Author keywords

DDoS; Flash crowd; Probability metrics

Indexed keywords

DDOS ATTACK; DISTRIBUTED DENIAL OF SERVICE; FALSE NEGATIVE RATE; FALSE POSITIVE; FLASH CROWD; INTERNET SECURITY; INTERNET TRAFFIC; NETWORK FLOWS; NOVEL METHODS; PROBABILITY METRICS;

INTERNET; NETWORK SECURITY; PROBABILITY;

COMPUTER CRIME;

EID: 72849128542     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/NSS.2009.35     Document Type: Conference Paper

References (21)

1. I. Ari, B. Hong, E.L. Miller, S.A. Brandt, and D.D.E. Long. Managing flash crowds on the Internet. in Modeling, Analysis and Simulation of Computer Telecommunications Systems, 2003. MASCOTS 2003. 11th IEEE/ACM International Symposium on. 2003.
2. P. Barford and D. Plonka, Characteristics of network traffic flow anomalies, in Proceedings of the 1st ACM SIGCOMM Workshop on Internet Measurement. 2001, ACM: San Francisco, California, USA.
3. A.R. Barron, L. Gyorfi, and E.C. van der Meulen, Distribution estimation consistent in total variation and in two types of information divergence. Information Theory, IEEE Transactions on, 1992. 38(5): p. 1437-1454.
4. A. Bhattacharyya, On a measure of divergence between two statistical populations defined by probability distributions. Bull. Calcutta Math. Soc., 1943. vol. 35: p. pp. 99-109.
5. R.K.C. Chang, Defending against flooding-based distributed denial-of-service attacks: a tutorial. Communications Magazine, IEEE, 2002. 40(10): p. 42-51.
6. A. Djouadi, O. Snorrason, and F.D. Garber, The quality of training sample estimates of the Bhattacharyya coefficient. Pattern Analysis and Machine Intelligence, IEEE Transactions on, 1990. 12(1): p. 92-97.
7. P. Du and S. Abe, IP Packet Size Entropy-Based Scheme for Detection of DoS/DDoS Attacks. IEICE Transactions on Information and Systems, 2008: p. E91-D (5):1274-1281.
8. J. Jung, B. Krishnamurthy, and M. Rabinovich, Flash crowds and denial of service attacks: characterization and implications for CDNs and web sites, in Proceedings of the 11th international conference on World Wide Web. 2002, ACM: Honolulu, Hawaii, USA.
9. T. Kailath, The Divergence and Bhattacharyya Distance Measures in Signal Selection. Communication Technology, IEEE Transactions on, 1967. 15(1): p. 52-60.
10. S. Ledesma and D. Liu, Synthesis of Fractional Gaussian Noise Using Linear Approximation for Generating Self-Similar Network Traffic. Computer Communication Review, 2000. vol.30.
11. D. Mayur, A. Abhishek, C. Mason, V. Nalini, and M. Sharad. Flashback: A Peer-to-PeerWeb Server for Flash Crowds. in Distributed Computing Systems, 2007. ICDCS '07. 27th International Conference on. 2007.
12. J. McHUGH, Testing Intrusion detection systems: a critique of the 1998 and 1999 DARPA intrusion detection system evaluations as performed by Lincoln Laboratory. ACM Transactions on Information and System Security (TISSEC) 2000. 3(4): p. 262 - 294
13. A. Muller, Integral Probability Metrics and Their Generating Classes of Functions. Advances in Applied Probability, 1997. 29(2): p. 429-443.
14. E. Perrin, R. Harba, R. Jennane, and I. Iribarren, Fast and exact synthesis for 1-D fractional Brownian motion and fractional Gaussian noises. Signal Processing Letters, IEEE, 2002. 9(11): p. 382-384.
15. S.T. RACHEV, Probability metrics and the stability of stochastic models. Wiley series in probability and mathematical statistics., ed. WILEY. 1991, USA: John Wiley & Sons Ltd.
16. D. Rubenstein and S. Sahu, Can unstructured P2P protocols survive flash crowds? Networking, IEEE/ACM Transactions on, 2005. 13(3): p. 501-512.
17. W. Willinger. Traffic modeling for high-speed networks: Theory versus practice. in Stochastic Networks. 1995: Springer-Verlag.
18. W. Zhou. Keynote III: Detection and traceback of DDoS attacks. in Computer and Information Technology, 2008. CIT 2008. 8th IEEE International Conference on. 2008.
19. V.M. Zolotarev, Probability Metrics. Theory of Probability and its Applications, 1984. 28(2): p. 278-302.
20. http://www.ll.mit.edu/mission/communications/ist/corpora/ideval/data/ 2000/LLS-DDOS-2.0.2.html.
21. http://ita.ee.lbl.gov/html/contrib/SDSC-HTTP.html