An accurate sampling scheme for detecting SYN flooding attacks and portscans

IEEE International Conference on Communications

Volumn , Issue , 2011, Pages

  Korczynski, Maciej ^a   Janowski, Lucjan ^b   Duda, Andrzej ^a  

^a GRENOBLE INSTITUTE OF TECHNOLOGY   (France)

^b AGH UNIVERSITY OF SCIENCE AND TECHNOLOGY   (Poland)

Author keywords

[No Author keywords available]

Indexed keywords

DETECTION PERFORMANCE; FALSE POSITIVE RATES; SAMPLING METHOD; SAMPLING RATES; SAMPLING SCHEMES; SYN FLOODING ATTACK; TRACE-BASED SIMULATION;

EID: 80052163345     PISSN: 05361486     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/icc.2011.5962593     Document Type: Conference Paper

References (11)

1. H. Wang, D. Zhang, and K. G. Shin, "Detecting SYN Flooding Attacks," in Proceedings of IEEE INFOCOM'2002, June 2002, pp. 1530-1539.
2. H. Wang, D. Zhang, and K. Shin, "Change-Point Monitoring for the Detection of DoS Attacks," in IEEE Transactions on Dependable and Secure Computing. IEEE Computer Society Press, October 2004.
3. W. Chen and D. Y. Yeung, "Defending against TCP SYN flooding attacks under different types of IP spoofing," in Fifth International Conference on Networking (ICN), 2006.
4. R. Kompella, S. Singh, and G. Varghese, "On scalable attack detection in the network," in IEEE/ACM Transactions on Networking, vol. 15, no. 1, San Francisco, CA, USA, February 2007, pp. 14-25.
5. C. Sun, C. Hu, Y. Zhou, X. Xiao, and B. Liu, "A More Accurate Scheme to Detect SYN Flood Attacks," in IEEE INFOCOM Workshops, April 2009, pp. 1-2.
6. "Packet Sampling (PSAMP) IETF Working Group Charter," http://www.ietf.org/html.charters/psamp-charter.html.
7. "NetFlow Services Solutions Guide," http://www.cisco.com/.
8. G. Androulidakis, V. Chatzigiannakis, S. Papavassiliou, M. Grammatikou, and V. Maglaris, "Understanding and Evaluating the Impact of Sampling on Anomaly Detection Techniques," in IEEE MILCOM Military Communications Conference, October 2006, pp. 1-7.
9. J. Mai, C.-N. Chuah, A. Sridharan, T. Ye, and H. Zang, "Is Sampled Data Sufficient for Anomaly Detection?" in Proceedings of the 6th ACM SIGCOMM Conference on Internet Measurement, October 2006.
10. "TracesPlay," http://tracesplay.sourceforge.net/.
11. B. Efron and R. Tibshirani, "Bootstrap Methods for Standard Errors, Confidence Intervals, and Other Measures of Statistical Accuracy," in Statistical Science, vol. 1, no. 1, February 1986, pp. 54-75.