Sketch-based SIP flooding detection using Hellinger distance

GLOBECOM - IEEE Global Telecommunications Conference

Volumn , Issue , 2009, Pages

  Tang, Jin ^a   Cheng, Yu ^a   Zhou, Chi ^a  

^a Illinois Institute of Technology   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

DDOS ATTACK; DENIAL OF SERVICE; DETECTION SCHEME; DETECTION SYSTEM; HELLINGER DISTANCE; IP NETWORKS; MULTI-ATTRIBUTES; ON-LINE TRAFFIC; PROBABILITY MODELS; SECURITY ISSUES; SESSION CONTROL; SESSION INITIATION PROTOCOL; SKETCH DATA STRUCTURE; SKETCH TECHNIQUES; TRAFFIC DISTRIBUTIONS; VOICE OVER IP; VOICE SERVICES;

COMPUTER SIMULATION; DATA STRUCTURES; INTERNET TELEPHONY; TELECOMMUNICATION TRAFFIC; VOICE/DATA COMMUNICATION SYSTEMS;

INTERNET PROTOCOLS;

EID: 77951565662     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/GLOCOM.2009.5426267     Document Type: Conference Paper

References (17)

1. J. Rosenberg, H. Schulzrinne and G. Camarillo, "SIP: Session Initiation Protocol," IETF RFC 3261, June 2002
2. G. Yang and L. Le Cam, Asymptotics in Statistics: Some Basic Concepts, second edition, Wiley, March 2006.
3. H. Sengar, H. Wang, D. Wijesekera and S. Jajodia, "Detecting VoIP Floods Using the Hellinger Distance," IEEE Transactions on Parallel and Distributed Systems, vol. 19, no. 6, pp. 794-805, June 2008.
4. SIPp, [Online:]http://sipp.sourceforge.net/.
5. A. Gilbert, S. Guha, P. Indyk, S. Muthukrishnan and M. Strauss, "Quicksand: Quick Summary and Analysis of Network Data," DIMACS Technical Report 2001-43, 2001.
6. B. Krishnamurthy, S. Sen, Y. Zhang and Y. Chen, "Sketch-based Change Detection: Methods, Evaluation, and Applications," in Proc. ACM SIGCOMM IMS, 2003.
7. M. Thorup and Y. Zhang, "Tabulation Based 4-Universal Hashing with Applications to Second Moment Estimation," in Proc. the Fifteenth Annual ACM-SIAM Symposium on Discrete Algorithms, 2004.
8. J. Kurose and K. Ross, Computer Networking: A Top-Down Approach, fourth edition, Addison Wiley, April 2007.
9. D. Sisalem, J. Kuthan and S. Ehlert, "Denial of Service Attacks Targeting a SIP VoIP Infrastructure: Attack Scenarios and Prevention Mechanisms," IEEE Network, vol. 20, no. 5, pp. 26-31, 2006.
10. H. Sengar, D. Wijesekera, H. Wang and S. Jajodia, "VoIP Intrusion Detection Through Interacting Protocol State Machines," in Proc. IEEE International Conference on Dependable Systems and Networks, 2006.
11. H. Wang, D. Zhang and K. Shin, "Detecting SYN Flooding Attacks," in Proc. IEEE INFOCOM, 2002.
12. S. Jin and D. Yeung, "A Covariance Analysis Model for DDoS Attack Detection," in Proc. IEEE International Conference on Communications, 2004.
13. C. Chen and L. Liu, "Forecasting Time Series with Outliers," Journal of Forecasting, 1993.
14. A. Lakhina, M. Crovella and C. Diot, "Mining Anomalies Using Traffic Feature Distributions," in Proc. ACM SIGCOMM, August 2005.
15. S. Ehlert, C. Wang, T. Magedanz and D. Sisalem, "Specification-based Denial-of-Service Detection for SIP Voice-over-IP Networks," in Proc. the Third International Conference on Internet Monitoring and Protection, 2008.
16. E. Chen, "Detecting DoS Attacks on SIP Systems," in Proc. 1st IEEE Workshop on VoIP Management and Security, 2006.
17. R. Schweller, Z. Li, Y. Chen, Y. Gao, A. Gupta, Y. Zhang, P. Dinda, M. Kao and G. Memik "Reverse Hashing for High-Speed Network Monitoring: Algorithms, Evaluation, and Applications" in Proc. IEEE INFOCOM, 2006.