ARM-CPD: Detecting SYN flooding attack by traffic prediction

Proceedings of 2009 2nd IEEE International Conference on Broadband Network and Multimedia Technology, IEEE IC-BNMT2009

Volumn , Issue , 2009, Pages 443-447

  Qibo, Sun ^a   Shangguang, Wang ^a   Danfeng, Yan ^a   Fangchun, Yang ^a  

^a BEIJING UNIVERSITY OF POSTS AND TELECOMMUNICATIONS   (China)

Author keywords

ARIMA; CUSUM; DoS; TCP SYN flooding

Indexed keywords

ACCESS PATTERNS; AUTOREGRESSIVE INTEGRATED MOVING AVERAGE MODELS; CUMULATIVE SUM ALGORITHMS; CUSUM; DETECTION METHODS; DETECTION TIME; NON-PARAMETRIC; REAL TIME; SYN FLOODING ATTACK; TCP SYN FLOODING; TRACE DRIVEN SIMULATION; TRAFFIC PREDICTION;

TRANSMISSION CONTROL PROTOCOL;

BROADBAND NETWORKS;

EID: 74549174089     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICBNMT.2009.5348532     Document Type: Conference Paper

References (17)

1. H. Wang, D. Zhang, and K. G. Shin. Detecting SYN flooding attacks. I NFOCOM, 2002.
2. Qiu, Xiaofeng, Hao, Jihong, Chen, Ming .A mechanism to defend SYN flooding attack based on network measurement system. ITRE 2004 - 2nd International Conference on Information Technology: Research and Education.
3. Yuan, Dongqing, Zhong, Jiling.A lab implementation of SYN flood attack and defense. SIGITE'08: Proceedings of the 9th ACM SIG-Information Technology Education Conference, 2008.
4. Sun, Changhua, Fan, Jindou, Liu, Bin.A robust scheme to detect SYN flooding attacks. Proceedings of the Second International Conference on Communications and Networking in China, ChinaCom 2007.
5. V. A. Siris, Fotini P. Application of Anomaly Detect Algorithms for Detecting SYN Flooding Attack. Elsevier Computer Communications, 29: 1433-1442, 2006.
6. Nakashima, Takuo, Oshima, Shunsuke.A detective method for SYN flood attacks. First International Conference on Innovative Computing, Information and Control 2006.
7. Dalia Nashat,Xiaohong Jiang,Susumu Horiguchi.Detecting SYN Flooding Agents under Any Type of IP Spoofing . ICEBE archive Proceedings of the 2008 IEEE International Conference on e-Business Engineering table of contents.
8. Seung-won Shin, Ki-young Kim, Jong-soo Jang.D-SAT: detecting SYN flooding attack by two-stage statistical approach. Applications and the Internet, 2005, Page(s):430 - 436.
9. Haggerty, J., Berry, T., Shi, Q., Merabti, M..DiDDeM: a system for early detection of TCP SYN flood attacks. GLOBECOM 2004.
10. Tao Peng, Christopher Leckie, Kotagiri Rammamohanarao. Survey of Network-Based Defense Mechanisms Countering the DoS and DDoS Problems. ACM Computing Surveys Vol. 39, Issue 1. 2007.
11. Jelena Mirkovic and Peter Reiher. Taxonomy of DDoS Attack and DDoS Defense Mechanisms. ACM SIGCOMM 2004.
12. Guiyi Wei, Ye Gu, Yun Ling.An Early Stage Detecting Method against SYN Flooding Attack.Computer Science and its Applications, 2008.
13. Bin Xiao, Wei Chen, Yanxiang He, Sha, E.H.-M.. An active detecting method against SYN flooding attack.Parallel and Distributed Systems, 2005.
14. Papagiannaki, K.,Taft, N., Zhang, Z.-L., Diot, C..Long-term forecasting of Internet backbone traffic: observations and initial models. INFOCOM 2003.
15. Sang A, Li S Q. A Predictability Analysis of Network Traffic [C].Proceedings of IEEE INFOCOM'2000, Tel-Aviv, Israel, 2000-03.
16. P.J.Brockwell, R.A.Davis. Introduction to Time Series and Forecasting. 2nd ed, Springer New York, 2002.
17. Zare Moayedi, H., Masnadi-Shirazi, M.A.. Arima model for network traffic prediction and anomaly detection. Information Technology, 2008.