Detecting and mitigating HX-DoS attacks against cloud web services

Proceedings of the 2012 15th International Conference on Network-Based Information Systems, NBIS 2012

Volumn , Issue , 2012, Pages 429-434

  Chonka, Ashley ^a   Abawajy, Jemal ^a  

^a DEAKIN UNIVERSITY   (Australia)

Author keywords

Cloud Security; Cyber Physical Systems; HX Denial of Service Attacks

Indexed keywords

ATTACK TRAFFIC; CLOUD SERVICES; CYBER PHYSICAL SYSTEMS (CPSS); DEFENCE SYSTEMS; DENIAL OF SERVICE; FALSE POSITIVE; PHYSICAL WORLD; SECURITY PROBLEMS; SERVICE ATTACK; SOFTWARE-AS-A-SERVICE; THREE MODELS;

EMBEDDED SYSTEMS; FLOODS; HTTP; INFORMATION SYSTEMS; MODELS; TRANSMISSION CONTROL PROTOCOL; WEB SERVICES; WEBSITES; XML;

COMPUTER CRIME;

EID: 84870803934     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/NBiS.2012.146     Document Type: Conference Paper

References (34)

1. T. Erl, "Service-Oriented Architecture: A Field Guide to Integrating XML and Web Services", Prentice Hall PTR, NJ, 2004.
2. SOAP 1.1, (2008), http://www.w3.org/TR/soap/, last accessed 30/03/2012
3. th March, 2012
4. T. Peng, C. Leckie, and K. Ramamohanarao, "Survey of Network- Based Defense Mechanisms Countering the DoS and DDoS Problems," ACM Computing Surveys, vol. 39, no. 1, Article 3, 2007.
5. H. Wang, C. Jin, and K. G. Shin, "Defense Against Spoofed IP Traffic Using Hop-Count Filtering," IEEE/ACM Transactions on Networking, vol. 15, no. 1 pages 40-53, 2007,
6. R. R. Kompella, S. Singh, and G. Varghese, "On Scalable Attack Detection in the Network," IEEE/ACM Transactions on Networking, vol. 15, no. 1, pages 14-25, 2007.
7. R. Chen, J. Park, and R. Marchany, "A Divide-and-Conquer Strategy for Thwarting Distributed Denial-of-Service Attacks," IEEE Transactions on Parallel and Distributed Systems, vol. 18, no. 5, pp. 577-588, 2007.
8. A. Chonka, W. Zhou, and J. Singh, "Chaos Theory Based Detection against Network Mimicking DDoS Attacks", IEEE Communications Letters, Volume 13, Issue 9, pages 717-719, Sept. 2009,.
9. A. Yaar, A. Perrig, and D. Song, "StackPi: New Packet Marking and Filtering Mechanisms for DDoS and IP Spoofing Defense," IEEE Journal of Selected Areas in Communication, vol. 24, no. 10, 2006.
10. Z. Duan, X. Yuan, and J. Chandrashekar, "Controlling IP Spoofing through Interdomain Packet Filters," IEEE Transactions on Dependable and Secure Computing, vol.5, no. 1, pp. 22-36, 2007.
11. F. Soldo, A. Markopoulou, and K. Argyraki, "Optimal Filtering of Source Address Prefixes: Models and Algorithms," IEEE INFOCOM, Roi de Janeiro, Brazil, 2009.
12. A. El-Atawy, E. Al-Shaer, T. Tran et al., "Adaptive Early Packet Filtering for Protecting Firewalls against DoS Attacks," IEEE INFOCOM, Rio de Janeiro, Brazil, 2009.
13. A.Chonka, Y.Xiang, W. Zhou, and A. Bonti, , Cloud Security Defence to Protect Cloud Computing against HTTP-DoS and XMLDoS Attacks, Journal of Network and Computer Applications, Elsevier, vol. 3, no. 4, pages 1097-1107, 2011.
14. N.Y Jan, S.C. Lin, S.S. Tseng,, N.P. Lin, "A decision support system for constructing an alert classification model" Expert Systems with Applications, Volume 36, Issue 8, Pages 11145-11155, October 2009
15. S. Noh, G. Jung, K. Choi, C. Lee, "Compiling network traffic into rules using soft computing methods for the detection of flooding attacks" Applied Soft Computing, Volume 8, Issue 3, pages 1200-1210, June 2008.
16. C.Xiang, P.C.Yong, and L.S. Meng, "Design of multiple-level hybrid classifier for intrusion detection system using Bayesian clustering and decision trees", Pattern Recognition Letters, Volume 29, Issue 7, pages 918-924, 1 May 2008
17. T. Abbes, A. Bouhoula, and M. Rusinowitch, "Protocol Analysis in Intrusion Detection Using Decision Tree", Proceedings of the International Conference on Information Technology: Coding and Computing (ITCC'04), 2004.
18. C. Yu and H. Kai , "Collaborative detection and filtering of shrew DDoS attacks using spectral analysis", Journal of Parallel and Distributed Systems, Volume 66, Issue 9, pages 1137-1151, September 2006.
19. Y. Chen, Y.K. Kwok, and K. Hwang, "Collaborative Defense Against Periodic Shrew DDoS Attacks in Frequency Domain", ACM Transactions on Information and System Security (TISSEC), May 2005
20. S. Padmanabhuni, V. Singh, K.M Senthil and A. Chatterjee, "Preventing Service Oriented Denial of Service (PreSODoS): A Proposed Approach", ICWS apos;06. International Conference on Volume , Issue , pp 577-584, 2006
21. M. Jensen, N. Gruschka, R. Herkenhöner and N. Luttenberger,"SOA and Web Services: New Technologies, New Standards - New Attacks" Fifth European Conference on Web Services, 0-7695-3044-3/07, 2007.
22. J.Stewart, "HTTP DDoS Attack Mitigation Using Tarpitting", Securework.com, http://www.secureworks.com/research/threats/ddos/, June 25, 2007.
23. A. Chonka, W. Zhou, Y. Xiang, and J. Singh, "Detecting and Tracing DDoS attacks by Intelligent Decision Prototype (IDP)", IEEE Workshop on Web and Pervasive Security, IEEE, pp. 578-583, 2008.
24. A. Chonka, W.Zhou, and Y.Xiang, "Protecting Web Services with Service Oriented Traceback Architecture", IEEE 8th International Conference on Computer and Information Technology, IEEE, pp. 706-711, 2008.
25. A. Chonka, W. Zhou and Y. Xiang, "Defending Grid Web Services from XDoS Attacks by SOTA", 3rd IEEE International Workshop on Web and Pervasive Security (WPS), 2009.
26. StuPot Project, "HXDoS Dataset", Deakin University, http://www.deakin.edu.au/~chonka/ , last accessed 30th March, 2012.
27. C. Jin , H. Wang , K.G. Shin, Hop-count filtering: an effective defense against spoofed DDoS traffic, Proceedings of the 10th ACM conference on Computer and communications security, October 27-30, 2003, Pages: 30 - 41
28. M. Li, An approach to reliably identifying signs of DDOS flood attacks based on LRD traffic pattern recognition, Computers & Security, Volume 23, Issue 7, October 2004, Pages 549-558.
29. J. Jung and B. Krishnamurthy and M. Rabinovich. Flash Crowds and Denial of Service Attacks: Characterization and Implications for CDNs and Web Sites. In WWW, Hawaii, May 2002.
30. C. Jin , H. Wang , K. G. Shin, "Hop-count filtering: an effective defense against spoofed DDoS traffic", Proceedings of the 10th ACM conference on Computer and communications security, Pages: 30-41, October 27-30, 2003.
31. Nadalin, A., Kaler, C., Monzillo, R., and Hallam-Baker. P., (2008), 'Web Services Security: SOAP Message Security 1.1 (WSSecurity 2004)', http://docs.oasis-open.org/wss/v1.1/, last accessed 03/04/2012.
32. XML -Signature, 'XML-Signature Syntax and Processing' http://www.w3.org/TR/xmldsig-core/ last accessed 03/04/2012.
33. XML- Encryption, 'XML-Signature Syntax and Processing' http://www.w3.org/TR/xmlenc-core/ last accessed 03/04/2012.
34. B. P. Rimal, E. Choi, and I. Lumb, "A taxonomy and survey of cloud computing systems," International Joint Conference on INC, IMS and IDC, Jan 2009.