VicSifter: A collaborative DDoS detection system with lightweight victim identification

Proc. of the 11th IEEE Int. Conference on Trust, Security and Privacy in Computing and Communications, TrustCom-2012 - 11th IEEE Int. Conference on Ubiquitous Computing and Communications, IUCC-2012

Volumn , Issue , 2012, Pages 215-222

  Wang, Fei ^a   Wang, Xiaofeng ^a   Su, Jinshu ^a   Xiao, Bin ^b  

^a NATIONAL UNIVERSITY OF DEFENSE TECHNOLOGY   (China)

^b HONG KONG POLYTECHNIC UNIVERSITY   (Hong Kong)

Author keywords

collaborative detection; DDoS attacks; lightweight; victim identification

Indexed keywords

ANOMALY DETECTION; ANOMALY DETECTION METHODS; BANDWIDTH RESOURCE; COLLABORATIVE DETECTION; DDOS ATTACK; DDOS DETECTION; DISTRIBUTED DENIAL OF SERVICE ATTACK; HIGH-SPEED; LIGHTWEIGHT; LOW OVERHEAD; MULTIPLE NODES; NETWORK LINKS; PASSING PACKETS; REAL WORLD DATA; SECURITY PROBLEMS; SPACE REQUIREMENTS; SYSTEM SCALABILITY; TIMELY IDENTIFICATION;

GATEWAYS (COMPUTER NETWORKS); SCALABILITY; UBIQUITOUS COMPUTING;

NETWORK SECURITY;

EID: 84868098039     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/TrustCom.2012.295     Document Type: Conference Paper

References (18)

1. B. Xiao, W. Chen, and Y. He, "An autonomous defense against syn flooding attacks: Detect and throttle attacks at the victim side independently," J. Parallel Distrib. Comput., vol. 68, no. 4, pp. 456-470, Apr. 2008.
2. The top five ddos attacks of 2011. [Online]. Available: http://www.itbusinessedge.com/slideshows/show.aspx?c=92910
3. Worldwide Infrastructure Security Report, Volume VI, Arbor Networks, 2010. [Online]. Available: http://www.arbornetworks.com/report
4. A. Lakhina, M. Crovella, and C. Diot, "Diagnosing networkwide traffic anomalies," SIGCOMM Comput. Commun. Rev., vol. 34, pp. 219-230, Aug. 2004.
5. B. Xiao, W. Chen, Y. He, and E.-M. Sha, "An active detecting method against syn flooding attack," in Parallel and Distributed Systems, 2005. Proceedings. 11th International Conference on, vol. 1, july 2005, pp. 709-715 Vol. 1.
6. S. Oshima, T. Nakashima, and T. Sueyoshi, "Anomaly detection using chi-square values based on the typical features and the time deviation," AINA, vol. 0, pp. 97-104, 2011.
7. M. Roesch, "Snort - lightweight intrusion detection for networks," in Proceedings of the 13th USENIX conference on System administration, 1999, pp. 229-238.
8. Y. Chen, K. Hwang, and W.-S. Ku., "Collaborative detection of ddos attacks over multiple network domains," IEEE Trans. Parallel Distrib. Syst., vol. 18, pp. 1649-1662, Dec. 2007.
9. O. Salem, S. Vaton, and A. Gravey, "A scalable, efficient and informative approach for anomaly-based intrusion detection systems: theory and practice," Int. J. Netw. Manag., vol. 20, pp. 271-293, September 2010.
10. H. Liu, Y. Sun, and M. S. Kim, "A scalable ddos detection framework with victim pinpoint capability," Journal of Communications, vol. 6, no. 9, 2011.
11. B. Krishnamurthy, S. Sen, Y. Zhang, and Y. Chen, "Sketch-based change detection: methods, evaluation, and applications," in IMC '03. ACM, 2003, pp. 234-247.
12. R. Schweller, A. Gupta, E. Parsons, and Y. Chen, "Reversible sketches for efficient and accurate change detection over network data streams," in IMC '04. New York, NY, USA: ACM, 2004, pp. 207-212.
13. Z. Li, Y. Gao, and Y. Chen, "Hifind: A high-speed flow-level intrusion detection approach with dos resiliency," Comput. Netw., vol. 54, no. 8, pp. 1282-1299, Jun. 2010.
14. M. Muthuprasanna and G. Manimaran, "Distributed divide-and-conquer techniques for effective ddos attack defenses," in ICDCS '08., june 2008, pp. 93-102.
15. T. Peng, C. Leckie, and K. Ramamohanarao, "Survey of network-based defense mechanisms countering the dos and ddos problems," ACM Comput. Surv., vol. 39, April 2007.
16. G. Cormode and S. Muthukrishnan, "An improved data stream summary: the count-min sketch and its applications," J. Algorithms, vol. 55, no. 1, pp. 58-75, Apr. 2005.
17. A. Renyi, "On measures of entropy and information," in Fourth Berkeley Symposium on Mathematical Statistics and Probability, 1960, pp. 547-561.
18. M. Denuit and S. V. Bellegem, "On the stop-loss and total variation distances between random sums," Statistics & Probability Letters, vol. 53, no. 2, pp. 153-165, 2001.