Towards mitigation of low and slow application DDoS attacks

Proceedings - 2014 IEEE International Conference on Cloud Engineering, IC2E 2014

Volumn , Issue , 2014, Pages 604-609

  Shtern, Mark ^a   Sandel, Roni ^a   Litoiu, Marin ^a   Bachalo, Chris ^b   Theodorou, Vasileios ^c  

^a YORK UNIVERSITY   (Canada)

^b JUNIPER NETWORKS   (United States)

^c UNIVERSITAT POLITÈCNICA DE CATALUNYA   (Spain)

Author keywords

Application Layer; Cloud; Low and Slow Distributed Denial of Service (LSDDoS); Software Defined Network

Indexed keywords

APPLICATION LAYER; APPLICATION PROGRAMS; CLOUDS; NETWORK ARCHITECTURE; NETWORK SECURITY; PERSONAL COMPUTING; SOFTWARE DEFINED NETWORKING;

APPLICATION CAPABILITY; CONCRETE ARCHITECTURE; DISTRIBUTED DENIAL OF SERVICE; DISTRIBUTED DENIAL OF SERVICE ATTACK; OFF-THE-SHELF COMPONENTS; PERFORMANCE MODEL; REFERENCE ARCHITECTURE; RESOURCE CONSUMPTION;

DENIAL-OF-SERVICE ATTACK;

EID: 84908583823     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/IC2E.2014.38     Document Type: Conference Paper

References (29)

1. "Worldwide Infrastructure Security Report," http: //www.arbornetworks.com/dmdocuments/ISR2010 EN.pdf, Arbor Networks, Tech. Rep.
2. J. Zhu, F. Fu, K. Yin, H. Li, and Y. Liu, "A novel ddos attack detection method," Journal of Computational Information Systems, vol. 9, no. 2, pp. 549-556, 2013.
3. Y. Xie and S.-Z. Yu, "Monitoring the application-layer ddos attacks for popular websites," Networking, IEEE/AcM Transactions on, vol. 17, no. 1, pp. 15-25, 2009.
4. "Prolexic attack report q1 2012." Prolexic, 2012.
5. "Prolexic quarterly global ddos attack report q3 2013." Prolexic, 2013.
6. P. Senthilmahesh, S. Hemalatha, P. Rodrigues, and A. Shanthakumari, "Ddos attacks defense system using information metrics," in Proceedings of the Third International Conference on Trends in Information, Telecommunication and Computing. Springer, 2013, pp. 25-30.
7. G. Maci-Fernndez, J. E. Daz-Verdejo, and P. Garca-Teodoro, "Evaluation of a low-rate dos attack against application servers," Computers and Security, vol. 27, no. 78, pp. 335-354, 2008.
8. A. Kuzmanovic and E. W. Knightly, "Low-rate tcp-targeted denial of service attacks (the shrew vs. the mice and elephants)," in IN PROCEEDINGS OF ACM SIGCOMM, 2003, pp. 75-86.
9. J.-S. Yang, M.-W. Park, and T.-M. Chung, "A study on lowrate ddos attacks in real networks," in Information Science and Applications (ICISA), 2013 International Conference on. IEEE, 2013, pp. 1-4.
10. N. McKeown, T. Anderson, H. Balakrishnan, G. Parulkar, L. Peterson, J. Rexford, S. Shenker, and J. Turner, "Openflow: enabling innovation in campus networks," ACM SIGCOMM Computer Communication Review, vol. 38, no. 2, pp. 69-74, 2008.
11. [Online]. Available: http://opencontrail.org/
12. "Decoding software defined networking," 2013. [Online]. Available: http://www.juniper.net/us/en/local/pdf/whitepapers/2000510-en.pdf
13. C. Barna, M. Shtern, M. Smit, V. Tzerpos, and M. Litoiu, "Model-based adaptive dos attack mitigation," in Software Engineering for Adaptive and Self-Managing Systems (SEAMS), 2012 ICSE Workshop on. IEEE, 2012, pp. 119-128.
14. R. Mathew and V. Katkar, "Survey of low rate dos attack detection mechanisms," in Proceedings of the International Conference & Workshop on Emerging Trends in Technology. ACM, 2011, pp. 955-958.
15. F. Kargl and J. Maier, "Protecting web servers from distributed denial of service attacks," 2001.
16. J. Mirkovic, "D-WARD: DDoS Network Attack Recognition and Defense," 2002.
17. M. Sachdeva, G. Singh, and K. Kumar, "Deployment of Distributed Defense against DDoS Attacks in ISP Domain," International Journal of Computer Applications, vol. 15, no. 2, pp. 25-31, February 2011, published by Foundation of Computer Science.
18. T. H. Nguyen, C. T. Doan, V. Q. Nguyen, T. H. T. Nguyen, and M. P. Doan, "Distributed defense of distributed DoS using pushback and communicate mechanism," in Proc. Int Advanced Technologies for Communications (ATC) Conf, 2011, pp. 178-182.
19. S. M. Khattab, C. Sangpachatanaruk, R. Melhem, D. l Mosse, and T. Znati, "Proactive server roaming for mitigating denialof-service attacks," in Proc. ITRE2003 Information Technology: Research and Education Int. Conf, 2003, pp. 286-290.
20. L. M., W. C.-H. J., J. Y. Hung, and I. J. D., "Mitigating performance degradation of network-based control systems under denial of service attacks," in Proc. 30th Annual Conf. of IEEE Industrial Electronics Society IECON 2004, vol. 3, 2004, pp. 2339-2342.
21. A. K. Pandey and C. Pandu Rangan, "Mitigating denial of service attack using proof of work and Token Bucket Algorithm," in Proc. IEEE Students' Technology Symp. (TechSym), 2011, pp. 43-47.
22. R. Braga, E. Mota, and A. Passito, "Lightweight ddos flooding attack detection using nox/openflow," in Local Computer Networks (LCN), 2010 IEEE 35th Conference on, 2010, pp. 408-415.
23. Y. Tang, "Countermeasures on application level low-rate denial-of-service attack," in Information and Communications Security. Springer, 2012, pp. 70-80.
24. M. Shtern, B. Simmons, M. Smit, and M. Litoiu, "An architecture for overlaying private clouds on public providers," in Network and Service Management (CNSM), 2012 8th International Conference on. IEEE, 2012, pp. 371-377.
25. -, "Navigating the clouds with a map," in Integrated Network Management (IM 2013), 2013 IFIP/IEEE International Symposium on, 2013, pp. 464-470.
26. C. Fehling, F. Leymann, J. Rutschlin, and D. Schumm, "Pattern-based development and management of cloud applications," Future Internet, vol. 4, no. 1, pp. 110-141, 2012.
27. H. Lu, M. Shtern, B. Simmons, M. Smit, and M. Litoiu, "Pattern-based deployment service for next generation clouds," in Services (SERVICES), 203 IEEE Ninth World Congress on, 2013, pp. 464-471.
28. H. Ghanbari, B. Simmons, M. Litoiu, and G. Iszlai, "Exploring alternative approaches to implement an elasticity policy," in IEEE CLOUD, 2011, pp. 716-723.
29. [Online]. Available: http://ganglia.sourceforge.net