DDoS attack detection using three-state partition based on flow interaction

Communications in Computer and Information Science

Volumn 58, Issue , 2009, Pages 176-184

  Cheng, Jieren ^a,b   Zhang, Boyun ^c   Yin, Jianping ^a   Liu, Yun ^a   Cai, Zhiping ^a  

^a NATIONAL UNIVERSITY OF DEFENSE TECHNOLOGY   (China)

^b XIANGNAN UNIVERSITY   (China)

^c CENTRAL SOUTH UNIVERSITY   (China)

Author keywords

Distributed Denial of Service; IP Flow Interaction; Network Security; Three State Partition

Indexed keywords

DDOS ATTACK; DETECTION TIME; DISTRIBUTED DENIAL OF SERVICE; DISTRIBUTED DENIAL OF SERVICE ATTACK; FALSE ALARM RATE; INTERACTION BEHAVIOR; IP ADDRESSS; IP FLOW; NETWORK FLOWS; NORMAL FLOW; SELF ADAPTING; STATE PARTITION;

FLOW INTERACTIONS; TRANSMISSION CONTROL PROTOCOL;

NETWORK SECURITY;

EID: 73349103437     PISSN: 18650929     EISSN: None     Source Type: Book Series    
DOI: 10.1007/978-3-642-10847-1_22     Document Type: Conference Paper

References (14)

1. Handley, M.: DoS-resistant Internet subgroup report. Internet Architecture WG (2005)
2. Kumar, V., Jayalekshmy, P., Patra, G., et al.: On Remote Exploitation of TCP Sender for Low-Rate Flooding Denial-of-Service Attack. IEEE Communications Letters (2009)
3. Cheng, C., Kung, H., Tan, K.: Use of spectral analysis in defense against DoS attacks. In: Proceedings of IEEE GLOBECOM (2002)
4. Lakhina, A., Crovella, M., Diot, C.: Diagnosing Network-Wide Traffic Anomalies. In: Proceedings of ACM SIGCOMM, Portland, Oregon, USA (2004)
5. Abdelsayed, S., Glimsholt, D., Leckie, C., et al.: An efficient filter for denial-of service bandwidth attacks. In: Proceedings of the 46th IEEE GLOBECOM (2003)
6. Mirkovic, J., Reiher, P.: D-WARD: A Source-End Defense Against Flooding Denial-of- ServiceAttacks. IEEE Trans. on Dependable and Secure Computing (2005)
7. Lakhina, A., Crovella, M., Diot, C.: Mining Anomalies Using Traffic Feature Distributions. In: Proceedings of ACM SIGCOMM, Philadelphia, Pennsylvania, USA (2005)
8. Peng, T., Leckie, C., Kotagiri, R.: Proactively detecting distributed denial of service attacks using source ip address monitoring. In: Proceedings of the Third International IFFP-TC6 Networking Conference (2004)
9. Forrest, S., Hofmeyr, S.: Architecture for an artificial immune system. Evolution. Computat. 7(1), 45-68 (1999)
10. Vitaly, S., Ming, W.: Security against probe-response attacks in collaborative intrusion detection. In: Proceedings of ACM SIGCOMM (2007)
11. Cheng, J., Yin, J., Liu, Y., et al.: Detecting Distributed Denial of Service Attack Based on Address Correlation Value. Journal of Computer Research and Development (2009)
12. Cheng, J., Yin, J., Liu, Y., et al.: DDoS attack detection Algorithm using IP Address Features. In: Deng, X., Hopcroft, J.E., Xue, J. (eds.) FAW 2009. LNCS, vol.5598. Springer, Heidelberg (2009)
13. Cheng, J., Yin, J., Wu, C., et al.: DDoS Attack Detection Method Based on Linear Prediction Model. In: Huang, D.-S., et al. (eds.) ICIC 2009. LNCS, vol.5754, pp. 1004- 1013. Springer, Heidelberg (2009)
14. http://www.ll.mit.edu/mission/communications/ist/corpora/ ideval/data/index.html