Mitigating application layer distributed denial of service attacks via effective trust management

IET Communications

Volumn 4, Issue 16, 2010, Pages 1952-1962

  Yu, J ^a   Fang, C ^b   Lu, L ^b   Li, Z ^c  

^a NATIONAL UNIVERSITY OF DEFENSE TECHNOLOGY   (China)

^b NATIONAL UNIVERSITY OF SINGAPORE   (Singapore)

^c BEIHANG UNIVERSITY   (China)

Author keywords

[No Author keywords available]

Indexed keywords

APPLICATION LAYERS; BANDWIDTH OVERHEADS; COMPUTATION COSTS; DDOS ATTACK; DISTRIBUTED DENIAL OF SERVICE ATTACK; FLOODING ATTACKS; JAVA PACKAGES; LEGITIMATE USERS; REPLAY ATTACK; SIMULATION RESULT; TRUST MANAGEMENT; USER IDENTIFICATION; WEB SERVERS;

COMPUTER CRIME; INTERNET PROTOCOLS; NETWORK PROTOCOLS; SECURITY OF DATA; SERVERS; TRANSMISSION CONTROL PROTOCOL;

NETWORK LAYERS;

EID: 78149435896     PISSN: 17518628     EISSN: None     Source Type: Journal    
DOI: 10.1049/iet-com.2009.0809     Document Type: Article

References (30)

1. Mirkovic, J. Dietrich, S. Dittrich, D. Reiher, P.: 'Internet denial of service: attack and defense mechanisms', (Prentice-Hall PTR 2004)
2. Ranjan, S. Swaminathan, R. Uysal, M. Knightly, E.: 'DDoS-resilient scheduling to counter application layer attacks under imperfect detection', Proc. INFOCOM'06, 2006
3. Yu, J. Li, Z. Chen, H. Chen, X.: 'A Detection and offense mechanism to defend against application layer DDoS attacks', Proc. ICNS'07, 2007
4. Li, Q. Chang, E. Chan, M.: 'On the effectiveness of DDoS attacks on statistical filtering', Proc. INFOCOM'05, 2005
5. Mirkovic, J. Prier, G.: 'Attacking DDoS at the source', Proc. ICNP'02, 2002
6. Li, K. Zhou, W. Yu, S.: 'Effective metric for detecting distributed denial-of-service attacks based on information divergence', IET Commun., 2009, 3, (12), p. 1851-1860
7. Mohammed, L. Issac, B.: 'DoS attacks and defense mechanisms in wireless networks', Proc. IEE Mobility Conf.'05, 2005
8. Tupakula, U. Varadharajan, V.: 'A practical method to counteract denial of service attacks', Proc. ACSC'03, 2003
9. Lu, L. Chan, M. Chang, E.: 'Analysis of a general probabilistic packet marking model for IP traceback', Proc. ASIACCS'08, 2008
10. Stone, R.: 'CenterTrack: an IP overlay network for tracking DoS floods', Proc. Ninth Usenix Sec. Symp., 2002
11. Chen, Y. Hwang, K. Ku, W.: 'Collaborative detection of DDoS attacks over multiple network domains', IEEE Trans. Parallel Distrib. Syst., 2007, 2, (3), p. 1-49, 1045-9219
12. Xiang, Y. Lin, Y. Lei, W.L. Huang, S.J.: 'Detecting DDOS attack based on network self-similarity', IEE Proc. Commun., 2004, 151, (3), p. 292-295, 1350-2425
13. Liang, J. Naoumov, N. Ross, K.W.: 'The index poisoning attack in P2P file sharing systems', Proc. INFOCOM'06, 2006
14. Athanasopoulos, E. Anagnostakis, K. Markatos, E.: 'Misusing unstructured P2P systems to perform DoS attacks: the network that never forgets', Proc. ACNS'06, 2006
15. Naoumov, N. Ross, K.: 'Exploiting P2P Systems for DDoS Attacks', Proc. INFOSCALE'06, 2006
16. Yu, J. Li, Z. Chen, X.: 'Misusing Kademlia protocol to perform DDoS attacks', Proc. ISPA'08, 2008
17. Walfish, M. Vutukuru, M. Balakrishnan, H. Karger, D. Shenker, S.: 'DDoS Defense by offense', Proc. SIGCOMM'06, 2006
18. Khattab, S. Gobriel, S. Melhem, R. Mosse, D.: 'Live baiting for service-level DoS attackers', Proc. INFOCOM'08, 2008
19. Srivatsa, M. Iyengar, A. Yin, J. Liu, L.: 'Mitigating application-level denial of service attacks on web servers: a client-transparent approach', ACM Trans. Web, 2008, 18, (12), p. 1649-1662
20. Xie, Y. Yu, S.: 'Monitoring the application-layer DDoS attacks for popular websites', IEEE/ACM Trans. Netw., 2009, 17, (1), p. 15-25, 1063-6692
21. Xie, Y. Yu, S.: 'A large-scale hidden semi-Markov model for anomaly detection on user browsing behaviors', IEEE/ACM Trans. Netw., 2009, 17, (1), p. 54-65, 1063-6692
22. Yen, W. Lee, M.: 'A framework for defending application layer DDoS attacks using an AI approach', Proc. IASTED Int. Conf. on Artifical Intelligence and Applications, 2007
23. Cornelli, F. Damiani, E. Vimercati, S. Paraboschi, S. Samarati, P.: 'Choosing reputable servents in a P2P network', Proc. WWW'02, 2002
24. Srivatsa, M. Xiong, L. Liu, L.: 'TrustGuard: countering vulnerabilities in reputation management for decentralized overlay networks', Proc. WWW'05, 2005
25. Douglis, F. Feldmannz, A. Krishnamurthy, B.: 'Rate of change and other metrics: a live study of the World Wide Web', Proc. USENIX Symp. on Internetworking Technologies and Systems, 1997
26. Arlitt, M. Williamson, C.: 'Web server workload characterization: the search for invariants', Proc. ACM SIGMETRICS'96, 1996
27. Natu, M. Mirkovic, J.: 'Fine-grained capabilities for flooding DDoS defense using client reputations', Proc. LSAD'07, 2007
28. Thing, V.L.L. Lee, H.C.J. Sloman, M.: 'Traffic redirection attack protection system (TRAPS)', Proc. IFIP SEC'05, 2005
29. Morein, W.G. Stavrou, A. Cook, D.L. Keromytis, A.D. Misra, V. Rubenstein, D.: 'Using graphical turing tests to counter automated DDoS attacks against web servers', Proc. ACM CCS'03, 2003
30. Yu, J. Fang, C. Lu, L. Li, Z.: 'A lightweight mechanism to mitigate application layer DDoS attacks', Proc. Infoscale'09, 2009