Witnessing distributed denial-of-service traffic from an attacker's network

2011 7th International Conference on Network and Service Management, CNSM 2011

Volumn , Issue , 2011, Pages

  Seo, Sin Seok ^a   Won, Young J ^b   Hong, James Won Ki ^a  

^a Pohang University of Science and Technology (POSTECH)   (South Korea)

^b Internet Initiative Japan Inc   (Japan)

Author keywords

DDoS; Monitoring; Traffic Analysis

Indexed keywords

COMMERCIAL WEBSITES; CYBER WARFARE; DDOS; DDOS ATTACK; DISTRIBUTED DENIAL OF SERVICE; DISTRIBUTED DENIAL OF SERVICE ATTACK; KOREAN GOVERNMENT; NETWORK TRAFFIC; NORTH KOREA; TRAFFIC ANALYSIS; TRAFFIC PATTERN;

CRITICAL INFRASTRUCTURES; MONITORING;

NETWORK MANAGEMENT;

EID: 84855754585     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (14)

1. S. S. Kim and A. L. N. Reddy, "Statistical techniques for detecting traffic anomalies through packet header data," IEEE/ACM Transactions on Networking, vol. 16, no. 3, pp. 562-575, Jun. 2008.
2. P. Du and S. Abe, "Detecting DoS attacks using packet size distribution,"in Proc. 2nd International Conference on Bio-Inspired Models of Network, Information, and Computing Systems (BIONETICS '07), Budapest, Hungary, Dec. 10-13, 2007, pp. 93-96.
3. F. Al-Haidari, M. Sqalli, K. Salah, and J. Hamodi, "An entropy-based countermeasure against intelligent DoS attacks targeting firewalls," in Proc. 2009 IEEE International Symposium on Policies for Distributed Systems and Networks (POLICY '09), Imperial College London, UK, Jul. 20-22, 2009, pp. 41-44.
4. R. K. C. Chang, "Defending against flooding-based Distributed Denial-of- Service attacks: A tutorial," IEEE Communications Magazine, vol. 40, no. 10, pp. 42-51, Oct. 2002.
5. X. Yang, D. Wetherall, and T. Anderson, "TVA: A DoS-limiting network architecture," IEEE/ACM Transactions on Networking, vol. 16, no. 6, pp. 1267-1280, Dec. 2008.
6. "Large-scale DDoS attacks in the United States and South Korea," White Paper, Internet Initiative Japan Inc., Nov. 16, 2009.
7. S. Jang, "3.3 DDoS report: In South Korea," Hauri, Tech. Rep., Mar. 5, 2011.
8. J. Mirković, A. Hussain, B. Wilson, S. Fahmy, P. Reiher, R. Thomas, W.-M. Yao, and S. Schwab, "Towards user-centric metrics for Denial- Of-Service measurement," in Proc. ACM Workshop on Experimental Computer Science (ExpCS '07), San Diego, CA, USA, Jun. 13-14, 2007, pp. 1-14.
9. Z. M. Mao, V. Sekar, O. Spatscheck, J. van der Merwe, and R. Vasudevan, "Analyzing large DDoS attacks using multiple data sources," in Proc. ACM SIGCOMM Workshop on Large-scale Attack Defense (LSAD '06), Pisa, Italy, Sep. 11, 2006, pp. 161-168.
10. Y. Xie and S.-Z. Yu, "Monitoring the application-layer DDoS attacks for popular websites," IEEE/ACM Transactions on Networking, vol. 17, no. 1, pp. 15-25, Feb. 2009.
11. J. Mirković, G. Prier, and P. Reiher, "Attacking DDoS at the source," in Proc. IEEE 10th International Conference on Network Protocols (ICNP '02), Paris, France, Nov. 12-15, 2002, pp. 312-321.
12. S. Malliga, A. Tamilarasi, and M. Janani, "Filtering spoofed traffic at source end for defending against DoS / DDoS attacks," in Proc. IEEE 17th International Conference on Computer, Communication and Networks (ICCCN '08), St. Thomas, Virgin Islands, USA, Aug. 3-7, 2008, pp. 1-5.
13. Y. Zhang, Q. Liu, and G. Zhao, "A real-time DDoS attack detection and prevention system based on per-IP traffic behavioral analysis," in Proc. IEEE 3rd International Conference on Computer Science and Information Technology (ICCSIT '10), Rome, Italy, Apr. 28-30, 2010, pp. 163-167.
14. T. Karagiannis, K. Papagiannaki, and M. Faloutsos, "BLINC: Multi-level traffic classification in the dark," in Proc. ACM SIGCOMM '05, Philadelphia, PA, USA, Aug. 22-26, 2005, pp. 229-240.