SYN flooding attack detection based on entropy computing

GLOBECOM - IEEE Global Telecommunications Conference

Volumn , Issue , 2009, Pages

  Bellaïche, Martine ^a   Grégoire, Jean Charles ^b  

^a ÉCOLE POLYTECHNIQUE DE MONTRÉAL   (Canada)

^b INRS EMT   (Canada)

Author keywords

Denial of service; Entropy; Network security; Syn flooding; TCP handshake

Indexed keywords

DENIAL OF SERVICE; DETECTION SYSTEM; ENTROPY MEASURE; SYN FLOODING; SYN FLOODING ATTACK; TCP HANDSHAKE;

ENTROPY; TELECOMMUNICATION TRAFFIC; TRANSMISSION CONTROL PROTOCOL;

NETWORK SECURITY;

EID: 77951539790     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/GLOCOM.2009.5425454     Document Type: Conference Paper

References (17)

1. D. M. G. Voelker, and S. Savage, "Inferring Internet denial-of-service activity," in USENIX Security Symposium, August 2001.
2. C. L. Schuba, I. V. Krsul, M. G. Kuhn, E. H. Spafford, A. Sundaram, and D. Zamboni, "Analysis of a denial of service attack on TCP," in Proceedings of the IEEE Symposium on Security and Privacy. IEEE Computer Society, 1997, p. 208.
3. R. B. Blazek, H. Kim, B. Rozovskii, and A. Tartakovsky, "A novel approach to detection of denial of service attacks via adaptive sequential and batch sequential change point detection methods," in Workshop on Information Assurance and Security, IEEE, June 2001.
4. H. Wang, D. Zhang, and K. G. Shin, "Detecting SYN flooding attacks," in Proceedings of IEEE INFOCOM, 2002.
5. S. Jin and D.S.Yeung, "A covariance analysis model for DDoS attack detection," in IEEE International Conference on Communications, vol. 4, June 2004.
6. V. A. Siris and F. Papagalou, "Application of anomaly detection algorithms for detecting SYN flooding attacks," in IEEE, GlobeCom, December 2004.
7. Y. O. M. Murata and S. Ata, "Detecting distributed denial-of-service attacks by analyzing TCP SYN Packets statistically," in IEEE, GlobeCom, December 2004.
8. B. Lim and M. Uddin, "Statistical-based SYN-flooding detection using programmable network processor," in Third International Conference on Information Technology and Applications ICITA, July 2005.
9. B. Xiao, W. Chen, Y. He, and S. E.H.-M., "An active detecting method against SYN flooding attack," in Proceedings. 11th International Conference on Parallel and Distributed Systems, July 2005.
10. S.-W. Shin, K.-Y. Kim, and J.-S. Jang, "D-SAT: detecting SYN flooding attack by two-stage statistical approach," in The Symposium on Applications and the Internet, IEEE, Janurary 2005.
11. B. Al-Duwairi and G. Manimaran, "Intentional dropping: a novel scheme for SYN flooding mitigation," in Proceedings of the 24th Annual Joint Conference of the IEEE Computer and Communications Societies, INFOCOM, vol. 4, March 2005.
12. R. Mahajan, S. Bellovin, S. Floyd, J. Vern, and P. Scott, "Controlling high bandwidth aggregates in the network," in Computer Communications Review, July 2002.
13. M. Bellaïche and J.-C. Grégoire, "Monitoring TCP handshakes on DDoS flooding," in Submitted to Security and Communications Networks, John Wiley & Sons, July 2009.
14. L. Feinstein, D. Schnackenberg, R. Balupari, and D. Kindred, "Statistical approaches to DDoS attack detection and response," in Proceedings in DARPA Information Survivability Conference and Exposition. IEEE Computer Society, April 2003.
15. C. Shannon and W. Weaver, "The mathematical theory of communication," in University of Illinois Press, 1963.
16. "UCLA packet traces," http://lever.cs.ucla.edu/ddos/traces/.
17. J. Mirkovic, G. Prier, and P. Reiher, "Attacking DDoS at the source," in Proceedings of ICNP, November 2002.