Resisting web proxy-based HTTP attacks by temporal and spatial locality behavior

IEEE Transactions on Parallel and Distributed Systems

Volumn 24, Issue 7, 2013, Pages 1401-1410

  Xie, Yi ^a   Tang, S ^b   Xiang, Y ^c   Hu, J ^d  

^a SUN YAT SEN UNIVERSITY   (China)

^b MISSOURI WESTERN STATE UNIVERSITY   (United States)

^c DEAKIN UNIVERSITY   (Australia)

^d UNIVERSITY OF NEW SOUTH WALES   (Australia)

Author keywords

attack detection; attack response; distributed denial of service attack; Traffic analysis; traffic modeling

Indexed keywords

ATTACK DETECTION; ATTACK RESPONSE; DISTRIBUTED DENIAL OF SERVICE ATTACK; TRAFFIC ANALYSIS; TRAFFIC MODELING;

HTTP;

INTERNET SERVICE PROVIDERS;

EID: 84878500827     PISSN: 10459219     EISSN: None     Source Type: Journal    
DOI: 10.1109/TPDS.2012.232     Document Type: Article

References (33)

1. S. Triukose, Z. Al-Qudah, and M. Rabinovich, "Content Delivery Networks: Protection or Threat?" Proc. 14th European Conf. Research in Computer Security (ESORICS), pp. 371-389, 2009.
2. Z.L.C. Zhonghua and W. Xiaoming, "Research on Detection Methods of CC Attack," Telecomm. Science, pp. 62-65, 2009.
3. P. Garcia-Teodoro, J. Diaz-Verdejo, G. Macia-Fernandez, and E. Vazquez, "Anomaly-Based Network Intrusion Detection: Techniques, Systems and Challenges," Computers and Security, vol. 28, nos. 1/2, pp. 18-28, 2009.
4. J. Ferguson, "Variable Duration Models for Speech," Proc. Symp. Application of Hidden Markov Models to Text and Speech, pp. 143-179, 1980.
5. S. Yu, "Hidden Semi-Markov Models," Artificial Intelligence, vol. 174, no. 2, pp. 215-243, 2010.
6. Y. Xie and S. Yu, "Measuring the Normality of Web Proxies Behavior Based on Locality Principles," Network and Parallel Computing, vol. 5245, pp. 61-73, 2008.
7. Y. Xiang, K. Li, and W. Zhou, "Low-Rate DDos Attacks Detection and Traceback by Using New Information Metrics," IEEE Trans. Information Forensics and Security, vol. 6, no. 2, pp. 426-437, June 2011.
8. Y. Yu, K. Li, W. Zhou, and P. Li, "Trust Mechanisms in Wireless Sensor Networks: Attack Analysis and Countermeasures," J. Network and Computer Applications, vol. 35, no. 3, pp. 867-880, 2012.
9. T. Peng, C. Leckie, and K. Ramamohanarao, "Survey of Network- Based Defense Mechanisms Countering the Dos and DDos Problems," ACM Computing Surveys, vol. 39, no. 1, p. 3, 2007.
10. J. Yu, C. Fang, L. Lu, and Z. Li, "Mitigating Application Layer Distributed Denial of Service Attacks via Effective Trust Management," IET Comm., vol. 4, no. 16, pp. 1952-1962, Nov. 2010.
11. X. Ye, W. Wen, Y. Ye, and Q. Cen, "An Otp-Based Mechanism for Defending Application Layer DDos Attacks," Applied Informatics and Comm., vol. 227, pp. 388-396, 2011.
12. S. Lee, G. Kim, and S. Kim, "Sequence-Order-Independent Network Profiling for Detecting Application Layer DDos Attacks," EURASIP J. Wireless Comm. and Networking, vol. 2011, no. 1, p. 50, 2011.
13. S. Yu, W. Zhou, W. Jia, S. Guo, Y. Xiang, and F. Tang, "Discriminating DDos Attacks from Flash Crowds Using Flow Correlation Coefficient," IEEE Trans. Parallel and Distributed Systems, vol. 23, no. 6, pp. 1073-1080, June 2012.
14. S. Yu, W. Zhou, R. Doss, and W. Jia, "Traceback of DDos Attacks Using Entropy Variations," IEEE Trans. Parallel and Distributed Systems, vol. 22, no. 3, pp. 412-425, Mar. 2011.
15. Y. Xie and S. Yu, "A Large-Scale Hidden Semi-Markov Model for Anomaly Detection on User Browsing Behaviors," IEEE/ACM Trans. Networking, vol. 17, no. 1, pp. 54-65, Feb. 2009.
16. Y. Xie and S.-Z. Yu, "Monitoring the Application-Layer DDoS Attacks for Popular Websites," IEEE/ACM Trans. Networking, vol. 17, no. 1, pp. 15-25, Feb. 2009.
17. S. Levinson, "Continuously Variable Duration Hidden Markov Models for Automatic Speech Recognition," Computer Speech and Language, vol. 1, no. 1, pp. 29-45, 1986. (Pubitemid 17552445)
18. S.-Z. Yu and H. Kobayashi, "An Efficient Forward-Backward Algorithm for an Explicit-Duration Hidden Markov Model," IEEE Signal Processing Letters, vol. 10, no. 1, pp. 11-14, Jan. 2003.
19. W. Bi, Q. Wu, and H. Ren, "A New Family of Eighth-Order Iterative Methods for Solving Nonlinear Equations," Applied Math. and Computation, vol. 214, no. 1, pp. 236-245, 2009.
20. P. Denning, "The Locality Principle," Comm. ACM, vol. 48, no. 7, pp. 19-24, 2005. (Pubitemid 40926361)
21. Y. Zhong, X. Shen, and C. Ding, "Program Locality Analysis Using Reuse Distance," ACM Trans. Programming Languages and Systems, vol. 31, no. 6, p. 20, 2009.
22. V. Almeida, A. Bestavros, M. Crovella, and A. de Oliveira, "Characterizing Reference Locality in the WWW," Proc. Fourth Int'l Conf. Parallel and Distributed Information Systems, pp. 92-103, 1996.
23. A. Mahanti, D. Eager, and C. Williamson, "Temporal Locality and Its Impact on Web Proxy Cache Performance," Performance Evaluation, vol. 42, nos. 2/3, pp. 187-203, 2000.
24. R. Mattson, J. Gecsei, D. Slutz, and I. Traiger, "Evaluation Techniques for Storage Hierarchies," IBM J. Research and Development, vol. 9, no. 2, pp. 78-117, 1970.
25. M. Kantardzie and A. SRIVASTAVA, "Data Mining: Concepts, Models, Methods, and Algorithms," J. Computing and Information Science in Eng., vol. 5, p. 394, 2005.
26. G. McLachlan and D. Peel, Finite Mixture Models. Wiley, 2000.
27. J. Devore, Probability and Statistics for Engineering and the Sciences. Cengage Learning, 2008.
28. J. Shao, Mathematical Statistics. Springer, 2003.
29. D. Dagon, C. Zou, and W. Lee, "Modeling Botnet Propagation Using Time Zones," Proc. 13th Ann. Network and Distributed System Security Symp., 2006.
30. Microsoft, "Battling Botnets for Control of Computers, "Microsoft Security Intelligence Report, vol. 9, 2010.
31. "DoSHTTP," http://www.socketsoft.net/, 2013.
32. L. Rabiner, "A Tutorial on Hidden Markov Models and Selected Applications in Speech Recognition," Proc. IEEE, vol. 77, no. 2, pp. 257-286, Feb. 1989.
33. S. Choi and R. Wette, "Maximum Likelihood Estimation of the Parameters of the Gamma Distribution and Their Bias," Technometrics, vol. 11, no. 4, pp. 683-690, 1969.