Evaluating security controls against HTTP-based DDoS attacks

IISA 2013 - 4th International Conference on Information, Intelligence, Systems and Applications

Volumn , Issue , 2013, Pages 165-170

  Moustis, Dimitrios ^a   Kotzanikolaou, Panayiotis ^b  

^a UNIVERSITY OF LONDON   (United Kingdom)

^b UNIVERSITY OF PIRAEUS   (Greece)

Author keywords

Botnet; Distributed denial of service; Http flooding

Indexed keywords

APACHE WEB SERVER; BOTNET; DISTRIBUTED DENIAL OF SERVICE; DISTRIBUTED DENIAL OF SERVICE ATTACK; INFECTED SYSTEMS; SECURITY CONTROLS; TEST ENVIRONMENT; WINDOWS-BASED SYSTEMS;

COMPUTER OPERATING SYSTEMS; FLOODS; HTTP; WORLD WIDE WEB;

NETWORK SECURITY;

EID: 84889069472     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/IISA.2013.6623707     Document Type: Conference Paper

References (14)

1. C. Douligeris and A. Mitrokotsa, "DDoS attacks and defense mechanisms: classification and state-of-the-art," Elsevier Computer Networks, vol. 44, no. 5, pp. 643-665, April 2004.
2. B. Saha and A. Gairola, "Botnet: an overview," CERT-In White Paper, Tech. Rep. 240, CIWP-2005-05.
3. "Slowloris http dos," http://ha.ckers.org/slowloris, Tech. Rep., accessed March 2013.
4. E. Damon, J. Dale, E. Laron, J. Mache, N. Land, and R. Weiss, "Hands-on denial of service lab exercises using slowloris and rudy," in Proceedings of the 2012 Information Security Curriculum Development Conference, ser. InfoSecCD '12. New York, NY, USA: ACM, 2012, pp. 21-29. [Online]. Available: http://doi.acm.org/10.1145/2390317.2390321
5. "core-apache http server," http://httpd.apache.org/docs/ current/mod/core.html, accessed March 2013.
6. "Bed against the wall: Slowloris and mitigations for apache," http://blog.macuyiko.com/2011/01/slowloris-and-mitigationsfor-apache.html, accessed March 2013.
7. "mod antiloris," http://sourceforge.net/projects/modantiloris/, accessed March 2013.
8. D. Jao, "mod limitipconn.c," http://dominia.org/djao/ limitipconn.html, accessed March 2013.
9. "Cert/cc blog: Mitigating slowloris," http://www.cert.org/ blogs/certcc/2009/07/slowloris vs your webserver.html, accessed March 2013.
10. "Slowloris dos mitigation guide," http://www.funtoo.org/wiki/ Slowloris DOS Mitigation Guide, accessed March 2013.
11. "The snort project," http://www.snort.org, accessed March 2013.
12. "Perl par packer," http://search.cpan.org/rschupp/PARPacker-1. 013/lib/pp.pm, accessed March 2013.
13. "The netfilter iptables project," http://www.netfilter.org/ projects/iptables/index.html, accessed March 2013.
14. "Snort :: snort-rules," http://www.snort.org/snort-rules/, accessed March 2013.