Detection on application layer DDoS using random walk model

2014 IEEE International Conference on Communications, ICC 2014

Volumn , Issue , 2014, Pages 707-712

  Xu, Chuan ^a   Zhao, Guofeng ^a   Xie, Gaogang ^b   Yu, Shui ^c  

^a CHONGQING UNIVERSITY OF POSTS AND TELECOMMUNICATIONS   (China)

^b INSTITUTE OF COMPUTING TECHNOLOGY   (China)

^c DEAKIN UNIVERSITY   (Australia)

Author keywords

anomaly detection; Asymmetric application layer DDoS attack; random walk model; similarity

Indexed keywords

BEHAVIORAL RESEARCH; INTERNET PROTOCOLS; MALWARE; NETWORK SECURITY; RANDOM PROCESSES; UBIQUITOUS COMPUTING;

ANOMALY DETECTION; APPLICATION LAYERS; BEHAVIOR-BASED METHODS; DDOS ATTACK; DISTRIBUTED DENIAL OF SERVICE; RANDOM WALK MODELING; SIMILARITY; USER BROWSING BEHAVIORS;

DENIAL-OF-SERVICE ATTACK;

EID: 84906992014     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICC.2014.6883402     Document Type: Conference Paper

References (14)

1. S. Ranjan, R. Swaminathan, M. Uysal and E. Knightly, "DDoS-Shield: DDOS-Resilient Scheduling to Counter Application Layer Attacks," IEEE/ACM Transactions on Networking, vol. 17, no.1, pp. 26-39, Feb. 2009.
2. Arbor Networks. Network Infrastructure Security Report, http://pages.arbornetworks.com/rs/arbor/images/WISR2012-EN.pdf.
3. A. Scherrer, N. Larrieu, P. Owezarski, P. Borgnat, and P. Abry, "Non-Gaussian and Long Memory Statistical Characterizations for Internet Traffic with Anomalies," IEEE Trans. Dependable Secure Computing, vol. 4, no. 1, pp. 56-70, Mar. 2007.
4. S. Yu, G. Zhao, S. Guo, X. Yang, V. Athanasios, "Browsing behavior mimicking attacks on popular web sites for large botnets," IEEE INFOCOM Wksps, pp. 947-951, April. 2011.
5. T. Peng, C. Leckie, and K. Ramamohanarao, "Survey of Network-Based Defense Mechanisms Countering the DoS and DdoS Problems," ACM Computing Survey, vol. 39, no. 1, pp. 123-128, 2007.
6. M. Walfish, M. Vutukuru, H. Balakrishnan, D. Karger and S. Shenker, "DDoS defense by offense,". ACM SIGCOMM Computer Communication Review, pp. 303-314, Oct. 2006.
7. J. Stanek, L. Kencl, "SIP Protector: Defense architecture mitigating DDoS flood attacks against SIP servers," Communications (ICC), 2012 IEEE International Conference on. IEEE, pp. 6733-6738, June. 2012.
8. M. Srivatsa, A. Iyengar, J. Yin, et al, "Mitigating application-level denial of service attacks on Web servers: A client-transparent approach," ACM Transactions on the Web, vol. 3, no. 2, 15, 2008.
9. S. Yu, W. Zhou, W. Jia, S. Guo, X. Yang, F. Tang, "Discriminating DDoS Attacks from Flash Crowds Using Flow Correlation Coefficient," IEEE Transactions on Parallel and Distributed Systems, vol. 23, no. 6, pp. 1073-1080, June. 2012.
10. X. Ying, S. Incheol, MT. Thai, Z. Taieb, "Detecting Application Denial-of-Service Attacks: A Group-Testing-Based Approach," IEEE Transactions on Parallel and Distributied System, vol. 21, no. 8, pp. 1203-1216, Aug. 2010.
11. Y. Xie, SZ. Yu, "A large-scale hidden semi-Markov model for anomaly detection on user browsing behaviors," IEEE/ACM Transactions on Networking, vol. 1, no. 17, pp. 54-65, Feb. 2009.
12. C. Xu, C. Du, G. Zhao, S. Yu, "A novel model for user clicks identification based on hidden semi-Markov," Journal of Network and Computer Applications, vol. 36, no. 2, pp. 791-798, Mar. 2013.
13. L. Zhang, J. Wu, Y. Zhuang, et al, "Review-oriented metadata enrichment: A case study," Proceedings of the 9th ACM/IEEE-CS joint conference on Digital libraries, pp. 173-182, 2009.
14. G. Salton, "Automatic Text Processing: The Transformation, Analysis, and Retrieval of," Addison-Wesley, 1989.