Detection of syn flooding attacks using generalized autoregressive conditional heteroskedasticity (GARCH) modeling technique

Proceedings of 16th National Conference on Communications, NCC 2010

Volumn , Issue , 2010, Pages

  Ranjan, Nikhil ^a   Murthy, Hema A ^a   Gonsalves, Timothy A ^a  

^a INDIAN INSTITUTE OF TECHNOLOGY MADRAS   (India)

Author keywords

GARCH; Heteroskedasticity; TCP SYN flooding

Indexed keywords

AUTO-REGRESSIVE; DENIAL OF SERVICE ATTACKS; DETECTION MECHANISM; EXPONENTIAL BACKOFF; FINANCIAL TIME SERIES; GENERALIZED AUTOREGRESSIVE CONDITIONAL HETEROSKEDASTICITY; HETEROSKEDASTICITY; HIGH INTENSITY; LINEAR PREDICTION; MODELING TECHNIQUE; NON-LINEAR; RETRANSMISSIONS; STATISTICAL MODELING; SYN FLOODING ATTACK; TCP SYN FLOODING;

COMPUTER CRIME; FINANCIAL DATA PROCESSING; TIME SERIES;

SECURITY OF DATA;

EID: 77952127491     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/NCC.2010.5430151     Document Type: Conference Paper

References (22)

1. "Computer Emergency Response Team, CERT Coordination Center,Denial of Service Attacks." [Online]. Available: http://www.cert.org/tech tips/denial of service.html
2. "CSI/FBI Computer Crime and Security Survey." [Online]. Available: http://i.cmpnet.com/gocsi/db area/pdfs/fbi/FBI2004.pdf
3. D. Moore, G. M. Voelker, and S. Savage, "Inferring internet denial-of-service activity," pp. 9-22.
4. D. M. Divakaran, H. A. Murthy, and T. A. Gonsalves, "Detection of SYN flooding attacks using linear prediction analysis," 14th IEEE International Conference on Networks, pp. 1-6, September 2006.
5. B. Zhou, D. He, and Z. Sun, "Traffic predictability based on ARIMA/GARCH model," 2006, pp. 207-215. [Online]. Available: http://ieeexplore.ieee.org/xpls/absn all.jsp?arnumber=1678242
6. "Syn Cookies." [Online]. Available: http://cr.yp.to/syncookies. html
7. J. Lemon, "Resisting syn flood dos attacks with a syn cache," in BSDCon 2002, Feb 2002, pp. 89-97.
8. C. L. Schuba, I. V. Krsul, M. G. Kuhn, E. H. Spafford, A. Sundaram, and D. Zamboni, "Analysis of a denial of service attack on tcp," in Proceedings of the 1997 IEEE Symposium on Security and Privacy, IEEE Computer Society. IEEE Computer Society Press, May, pp. 208-223.
9. "Tcp Syn Flooding Attack and the Firewall-1 Syndefender." [Online]. Available: http://www.checkpoint.com/products/firewall-1
10. S. V. A and P. F, "Application of anomaly detection algorithms for detecting syn flooding attacks," in IEEE GLOBECOM,04, no. 4.
11. H. Wang, H. Wang, D. Zhang, D. Zhang, K. G. Shin, and K. G. Shin, "Detecting syn flooding attacks detecting syn flooding attacks," in INFOCOM 2002. Twenty-First Annual Joint Conference of the IEEE Computer and Communications Societies. Proceedings. IEEE, pp. 1530-1539.
12. "The telecommunications and computer networking group, Indian Institute of Technology." [Online]. Available: www.TeNeT.res.in
13. W. E. Leland, M. S. Taqqu, W. Willinger, and D. V. Wilson, "On the self-similar nature of ethernet traffic (extended version)," Networking, IEEE/ACM Transactions on, no. 1, pp. 1-15.
14. A.Sang and S.Li, "A predictability analysis of network traffic," no. 39, pp. 329-345, 2002.
15. A. Adas, "Traffic models in broadband networks," Communications Magazine, IEEE, no. 7, pp. 82-89.
16. "Garch toolbox." [Online]. Available: http://math.bu.edu/misc/ DOCSERVER/raw/garch.pdf
17. B. Qian and K. Rasheed, "Hurst exponent and financial market predictability," in IASTED conference on Financial Engineering and Applications (FEA 2004), 2004, pp. 203-209.
18. J. M. Maheu, "Can Garch Models Capture the Long-Range Dependence in Financial Market Volatility?" University of Toronto ,Dept. of Economics, Tech. Rep.
19. T. Bollerslev, "Generalized autoregressive conditional heteroskedasticity," Journal of Econometrics, vol. 31, pp. 307-327, 1986.
20. R. Engle, "Garch 101: The use of ARCH/GARCH models in applied econometrics," The Journal of Economic Perspectives, no. 4, pp. 157-168.
21. W. J. Kirchgssner, Gebhard, Introduction to Modern Time Series Analysis, Springer series 2007.
22. "Snort." [Online]. Available: http://www.snort.org/