Integrated DDoS attack defense infrastructure for effective attack prevention

2010 2nd International Conference on Information Technology Convergence and Services, ITCS 2010

Volumn , Issue , 2010, Pages

  Choi, Yang Seo ^a   Oh, Jin Tae ^a   Jang, Jong Soo ^a   Ryou, Jae Cheol ^b  

^a Electronics and Telecommunications Research Institute (ETRI)   (South Korea)

^b Chungnam National University   (South Korea)

Author keywords

Component; DDoS; Defense infrastructure; Information security; Network security

Indexed keywords

ATTACK DETECTION; ATTACK PATTERNS; ATTACK PREVENTION; ATTACK TRAFFIC; COMPONENT; CONSTRUCTION METHOD; DDOS; DDOS ATTACK; DEFENSE INFRASTRUCTURE; DEFENSE TECHNIQUES; DEFENSE TECHNOLOGIES; GENERAL PURPOSE; INFORMATION SECURITY; INTERNET INFRASTRUCTURE; NETWORK TOPOLOGY; SOUTH KOREA;

ELECTRIC NETWORK TOPOLOGY; INFORMATION TECHNOLOGY;

NETWORK SECURITY;

EID: 78049522894     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ITCS.2010.5581263     Document Type: Conference Paper

References (19)

1. J. Mirkovic, G. Prier, and P. Reiher, "Attacking DDoS at the Source, " Proceedings of ICNP 2002, pp. 312-321, Paris, France, November 2002.
2. U. Tupakula and V. Varadharajan, "A Practical Method to Counteract Denial of Service Attacks, " In Proceedings of ACSC'03, pp. 275-284, Adelaide, Australia, 2003.
3. L. Lu, M. Chan, and E. Chang, "Analysis of a General Probabilistic Packet Marking Model for IP Traceback, " In Proceedings of ASIACCS'08, 2008.
4. David Moore, Vern Paxson, Stefan Savage, Colleen Shannon, Stuart Staniford, Nicholas Weaver, "The Spread of the Sapphire/Slammer Worm", http://www.caida.org/publications/papers/2003/sapphire/sapphire.html.
5. Y. Chen, K. Hwang, and W. Ku, "Collaborative Detection of DDoS Attacks over Multiple Network Domains, " IEEE Transations on Parallel and Distributed Systems, 2007.
6. S. Ranjan, R. Swaminathan, M. Uysal, et al., "DDoS-Shield: DDoSResilient Scheduling to Counter Application Layer Atttacks, " IEEE/ACM Transactions on Networking, vol. 7, no. 1, Feb. 2009, pp. 26-39.
7. J. Liang, N. Naoumov, and K. W. Ross, "The Index Poisoning Attack in P2P File Sharing Systems, " In Proceedings of INFOCOM'06, 2006.
8. J. Yu, C. Fang, L. Lu, and Z. Li, "A Lightweight Mechanism to Mitigate Application Layer DDoS Attacks, " The 4th International ICST Conference on Scalable Information Systems (INFOSCALE'09), Hong Kong, China, June 10-11, 2009.
9. T. Yatagai, T. Isohara, and I. Sasase, "Detection of HTTP-GET flood Attack Based on Analysis of Page Access Behavior, " Proc. PACRIM'07, 2007, pp. 232-235.
10. W. Z. Lu and S. Z. Yu, "A HTTP Flooding Detection Method Based on Browser Behavior", 2006 International Conference on IEEE Computational Intelligence and Security, vol. 2, Nov. 2006, pp. 1151-1154.
11. Y. Xie and S. Yu, "Monitoring the Application-Layer DDoS Attacks for Popular Websites, " IEEE/ACM Transactions on Networking, 2009.
12. Y. Xie and S. Yu, "A Large-Scale Hidden Semi-Markov Model for Anomaly Detection on User Browsing Behaviors, " IEEE/ACM Transactions on Networking, 2009.
13. F. Cornelli, E. Damiani, S. Vimercati, et al., "Choosing Reputable servents in a p2p Network, " In Proceedings of WWW'02, 2002.
14. S. Khattab, S. Gobriel, R. Melhem, et al., "Live Baiting for Service-level DoS Attackers, " In Proceedings of INFOCOM'08, 2008.
15. Y. Bhole and A. Popescu, "Measurement and Analysis of HTTP Traffic, " Journal of Network and Systems Management, vol. 13, no. 4, Dec. 2005, pp. 357-371.
16. LIBSVM - A Library for Support Vector Machines, http://www.csie.ntu.edu. tw/∼cjlin/libsvm.
17. Arbor Networks ASERT Team, "July, 2009 South Korea and US DDoS Attacks, " ARBOR Networks, July 10, 2009.
18. J. Nazario, "BlackEnergy DDoS Bot Anaysis, " ARBOR Networks, Oct. 2007.
19. K. Han, E. Im, "A Study on the Analysis of Netbot and Design of Detection Framework, " In Proceedings of JWIS 2009, 2009.