Application layer DDoS detection using clustering analysis

Proceedings of 2nd International Conference on Computer Science and Network Technology, ICCSNT 2012

Volumn , Issue , 2012, Pages 1038-1041

  Ye, Chengxu ^a,b   Zheng, Kesong ^b   She, Chuyu ^b  

^a QINGHAI NORMAL UNIVERSITY   (China)

^b SUN YAT SEN UNIVERSITY   (China)

Author keywords

application; browsing behavior; cluster; ddos

Indexed keywords

BROWSING BEHAVIOR; CLUSTER; CLUSTERING ANALYSIS; DDOS; DISTRIBUTED DENIAL OF SERVICE; DISTRIBUTED DENIAL OF SERVICE ATTACK; TRANSITION PROBABILITIES; USER BROWSING BEHAVIORS;

APPLICATIONS; COMPUTER SCIENCE;

COMPUTER SIMULATION;

EID: 84880226113     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICCSNT.2012.6526103     Document Type: Conference Paper

References (15)

1. MyDoom virus. [Online]. Available: http://www. uscert. gov/cas/techalerts/TA04-028A. html
2. T. Peng, K. R. mohanarao, and C. Leckie, "Protection from distributed denial of service attacks using history-based IP filtering, " in Proc. IEEE Int. Conf. Communications, May 2003, vol. 1, pp. 482-486.
3. S. Ranjan, R. Swaminathan, M. Uysal, and E. Knightly, "DDoSresilient scheduling to counter application layer attacks under imperfect detection, " in Proc. IEEE INFOCOM, Apr. 2006
4. Jung J, Krishnamurthy B, Rabinovich M. "Flash crowds and denial of service attacks: Characterization and implications for CDNs and web sites" //Proceedings of the 11th IEEE International World Wide Web Conference. Honolulu, Hawaii, USA, ACM, 2002: 252-262
5. Yi Xie, Shun-Zheng Yu, "A Large-Scale Hidden Semi-Markov Model for Anomaly Detection on User Browsing Behaviors, " in IEEE/ACM TRANSACTIONS ON NETWORKING, VOL. 17, NO. 1, FEBRUARY 2009
6. Oikonomou G, Mirkovic J. "Modeling human behavior of defene against flash-crowd attacks" // Proceedings of the 3rd International Conference on Communications. Dresden, Germany, 2009: 14-18
7. L. von Ahn, M. Blum, and J. Langford, "Telling Humans and Computers Apart Automatically, " Communications of the ACM, vol. 47, no. 2, pp. 57-60, February 2004.
8. Park K, Pai V, Lee K, Calo S. "Securing Web service by automatic robot detection" // Proceedings of the Annual Conference on USENIX 06 Annual Technical Conference. Boston, USA, 2006:23-28
9. http://ita. ee. lbl. gov/html/contrib/EPA-HTTP. html
10. Anukool Lakhina et al, "Mining Anomalies Using Traffic Feature Distributions", SIGCOMM'05, August 21-26, 2005, Philadelphia, Pennsylvania, USA
11. J. Mirkovic, G. Prier, and P. Reiher, "Attacking DDoS at the source, " in Proc. Int. Conf. Network Protocols , 2002, pp. 312-321.
12. L. Limwiwatkul and A. Rungsawangr, "Distributed denial of service detection using TCP/IP header and traffic measurement analysis, " in Proc. Int. Symp. Commun. Inf. Technol. , Sappoo, Japan, Oct. 26-29, 2004, pp. 605-610.
13. C. Jin, H. Wang, and K. G. Shin. "Hop-count filtering: An effective defense against spoofed traffic, " in Proceedings of the ACM conference on Computer and Communications Security . 2003. pp. 30-41.
14. M. Kantardzic, Data Mining Concepts, Models, Methods And Algorithm. New York: IEEE Press, 2002.
15. Stephen P. Borgatti, "How to Explain Hierarchical Clustering", 1994 INSNA, 17(2):78-80, University of South Carolina.