A novel distributed detection scheme against DDoS attack

Journal of Networks

Volumn 4, Issue 9, 2009, Pages 921-928

  Zhou, Zaihong ^a   Xie, Dongqing ^b   Xiong, Wei ^b  

^a HUNAN UNIVERSITY   (China)

^b GUANGZHOU UNIVERSITY   (China)

Author keywords

CUSUM algorithm; DDoS attack; Distributed detection; P2P; Similarity

Indexed keywords

ABNORMALITY DETECTION; CHORD PROTOCOL; COMMUNICATION PROBLEMS; CUSUM ALGORITHMS; DDOS ATTACK; DETECTION ACCURACY; DETECTION ALGORITHM; DETECTION RATES; DETECTION SCHEME; DISTRIBUTED APPLICATION SYSTEMS; DISTRIBUTED DETECTION; EARLY DETECTION; FALSE POSITIVE RATES; IP ADDRESSS; MALICIOUS NODES; P2P NETWORK; P2P-BASED; SIMILARITY ALGORITHM;

ALGORITHMS; COMMUNICATION; INTERNET PROTOCOLS; NETWORK ARCHITECTURE; NETWORK PROTOCOLS;

BROADCASTING;

EID: 78651538896     PISSN: 17962056     EISSN: None     Source Type: Journal    
DOI: 10.4304/jnw.4.9.921-928     Document Type: Article

References (21)

1. S. Elansary, L. O. Alima, P. Brand, et al. "Efficient Broadcast in Structured Peer-to-Peer Networks," In: Proceedings of International Workshop on Peer-to-Peer Systems. Springer-Verlag, London, 2003, pp: 304-314.
2. J.B.D. Cabrera, L. Lewis, X.Z. Qin et al. "Proactive detection of distributed denial of service attacks using MIB traffic variables-a feasibility study," In: proceedings of IEEE/IFIP International Integrated Network Management Symposium. Seattle, Washington, May 2001, pp: 609-622.
3. L. Feinstein, D. Schnackenberg, R. Balupari et al. "Statistical approaches to DDoS attack detection and response," In: Proceedings of DARPA Information Survivability Conference and Exposition. Washington, DC, April 2003, pp: 303-314.
4. C. Papadopoulos, R. Lindell, J. Mehringer et al. "COSSACK: Coordinated Suppression of Simultaneous Attacks," In: proceedings of DARPA Information Survivability Conference and Exposition. Washington, DC, April 2003, pp: 94-96.
5. S. Y. Jin, and D. S. Yeung, "A Covariance Analysis Model for DDoS Attack Detection," IEEE International Conference on Communications (ICC2004), June, 2004, pp: 1882-1886
6. S. Y. Jin, and D. S. Yeung, "DDoS Detection Based On Feature Space Modeling," IEEE International Conference on Machine Learning and Cybernetics, August, 2004, pp: 4210-4215
7. W. Lu, I. Traore, An unsupervised approach for detecting DDoS attacks based on traffic based metrics, IEEE Pacific Rim Conference on Communications, Computers and Signal Processing, Victoria, BC, August 2005, pp: 462-465,
8. C. Siaterlis and V. Maglaris, "Detecting incoming and outgoing DDoS attacks at the edge using a single set of network characteristics," Proceedings. 10th IEEE Symposium on Computers and Communications, 2005. ISCC 2005, 27-30, June 2005, pp: 469-475.
9. J. Mirkovic, M. Robinson, P. Reiher, et al. "Alliance Formation for DDoS Defense," In: Proceedings of the New Security Paradigms Workshop. ACM SIGSAC, San Francisco, CA, USA, 2003, pp: 11-18.
10. H. Y. Lam, C. P. Li, S. T. Chanson, et al. "A Coordinated Detection and Response Scheme for Distributed Denial-of-Service Attacks," In: Proceedings of IEEE International Conference on Communications. Istanbul, Turkey, 2006, pp: 2165-2170.
11. B. Xiao, W. Chen, Y. X. He. "A novel approach to detecting DDoS Attacks at an Early Stage," The Journal of Supercomputing, Springer Netherlands, 2006, 36(3): 235-248.
12. G. Koutepas, F. Stamatelopoulos, B. Maglaris. "Distributed Management Architecture for Cooperative Detection and Reaction to DDoS Attacks," Journal of Network and Systems Management, 2004, 12(1): 73-94.
13. Y. Chen, K. Hwang. "Collaborative Change Detection of DDoS Attacks on Community and ISP Networks," In: Proceedings of International Symposium on Collaborative Technologies and Systems. Las Vegas, NV, USA, 2006, pp: 401-410.
14. Y. Chen, K. Hwang, W. S. Ku. Collaborative Detection of DDoS Attacks over Multiple Network Domains. In: Proceedings of the IEEE Transactions on Parallel and Distributed Systems, 2007, 18(12): 1649-1662.
15. A. A. Cardenas, J. S. Baras, V. Ramezani. "Distributed Change Detection for Worms, DDoS and Other Network Attacks," In: Proceedings of the American Control Conference. Boston, Massachusetts, USA, 2004, pp: 1008-1013.
16. R. B. Blazek, H. Kim, B. Rozovskii, et al. "A Novel Approach to Detection of Denial-of-Service Attacks Via Adaptive Sequential and Batch-Sequential Change-Point Detection Methods," Workshop on Statistical and Machine Learning Techniques in Computer Intrusion Detection. Pittsburgh, Pennsylvania, USA, 2006, pp: 3372-3382.
17. H. N. Wang, D. L. Zhang, K. G. Shin. "Detecting SYN Flooding Attacks," In: Proceedings of the 21st Annual Joint Conf. of the IEEE Computer and Communications Societies. New York, USA, 2002, pp: 1530-1539.
18. H. N. Wang, D. L. Zhang, K. G. Shin. "Change-Point Monitoring for the Detection of DoS Attacks," IEEE Trans. Dependable and Secure Computing, 2004, 1(4): 193-208.
19. T. Peng, C. Leckie, K. Ramamohanarao. "Detecting Distributed Denial of Service Attacks by Sharing Distributed Beliefs," In: Proceedings of the Eighth Australasian Conf. Information Security and Privacy. Wollongong, Australia, 2003, pp: 214-225.
20. Z. X. Sun, Y. W. Tang, Y. Cheng. "Router Anomaly Traffic Detection Based on Modified-CUSUM Algorithm," Journal of Software, 2005, 16(12): 2117-2123.
21. J. Kang, Z. Zhang, J. B. Ju. "An Improvement on Precision in D-WARD Detection System with CUSUM Algorithm," Chinese Journal of Scientific Instrument, 2006, 27(5): 456-460.