Distributed change-point detection of ddos attacks: Experimental results on DETER testbed

DETER Community Workshop on Cyber Security Experimentation and Test 2007, DETER 2007

Volumn , Issue , 2007, Pages

  Chen, Yu ^a   Hwang, Kai ^b   Ku, Wei Shinn ^c  

^a State University of New York   (United States)

^b University of Southern California   (United States)

^c AUBURN UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

FLOODS; NETWORK SECURITY; TESTBEDS;

ATTACK TRAFFIC; CHANGE POINT DETECTION; DEFENSE SYSTEM; DETECTION RATES; FLOODING ATTACKS; MULTIPLE NETWORKS; NETWORK DOMAINS; SPATIOTEMPORAL PATTERNS;

DENIAL-OF-SERVICE ATTACK;

EID: 84925338777     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (29)

1. H. Aljifri, “IP Traceback: A New Denial-of-Service Deterrent,” IEEE Security and Privacy, May/June 2003, pp. 24-31.
2. T. Anderson, et al, “Rocketfuel: An ISP Topology Mapping Engine,” http://www.cs.washington.edu/research/networking/rocketfuel/, 2006.
3. T. Benzel, et al, “Experience with DETER: A Testbed for Security Research”, Second IEEE Conf. on Testbeds and Research Infrastructures for the Development of Networks and Communities (TridentCom2006).
4. R. Blazek, et al, “A Novel Approach to Detection of DoS Attacks via Adaptive Sequential and Batch-sequential Change-Point Detection Methods,” Proc. of IEEE Workshop on Information Assurance and Security, June 2001.
5. G. Carl, G. Kesidis, R. Brooks, and S. Rai, “Denial-of-Service Attack Detection Techniques,” IEEE Internet Computing, January/February 2006.
6. S. Chen and Q. Song, “Perimeter-Based Defense against High Bandwidth DDoS Attacks,” IEEE Trans. on Parallel and Distributed Systems, Vol. 16, No. 6, June 2005.
7. Y. Chen, K. Hwang, and W.-S. Ku, “Collaborative Detection of DDoS Attacks over Multiple Network Networks”, IEEE Transaction on Parallel and Distributed Systems, accepted and to appear in 2007.
8. Y. Chen and K. Hwang, "Collaborative Detection and Filtering of Shrew DDoS Attacks using Spectral Analysis," Journal of Parallel and Distributed Computing, Special Issue on Security in Grids and Distributed Systems, Sept. 2006, pp.1137-1151.
9. D. Dittrich, “The 'Stacheldraft' Distributed Denial of Service Attack Tool,” http://staff.washington.edu/dittrich/, 2000.
10. T. Gil and M. Poletto, “MULTOPS: a Data-Structure for Bandwidth Attack Detection,” Proceedings of 10th USENIX Security Symposium, August 2001.
11. A. Hussain, J. Heidemann, and C. Papadopoulos, “Identification of Repeated Denial of Service Attacks,” IEEE INFOCOM 2006, Barcelona, Spain, April 23-29, 2006.
12. A. Hussian, S. Schwab, R. Thomas, S. Fahmy, and J. Mirkovic, “DDoS Experiment Methodology,” Proc. of 2006 DETER Community Workshop, June 15-16, 2006, Arlington, VA.
13. K. Hwang, M. Cai, Y. Chen, and M. Qin, “Hybrid Intrusion Detection with Weighted Signature Generation over Anomalous Internet Episodes”, IEEE Trans. on Dependable and Secure Computing, Vol.4, No.1, Jan-March, 2007, pp.41-55.
14. J. Ioannidis and S. M. Bellovin, “Implementing Pushback: Router-Based Defense against DDoS Attacks,” Network and Distributed System Security Symposium. (NDSS), San Diego, CA. Feb. 6-8, 2002.
15. Y. Kim, W. C. Lau, M. C. Chuah, and H. J. Chao, “PacketScore: Statistics-Based Overload Control Against Distributed Denial of-Service Attacks,” Proc. INFOCOM, 2004.
16. J. Mirkovic and P. Reiher, "D-WARD: A Source-End Defense Against Flooding DoS Attacks," IEEE Trans. on Dependable and Secure Computing, July 2005, pp. 216-232.
17. J. Mirkovic, M. Robinson, P. Reiher and G. Oikonomou, "Distributed Defense Against DDOS Attacks," Technical Report CIS-TR-2005-02, CIS Department, University of Delaware, 2005.
18. J. Mirkovic, E. Arikan, S. Wei, S. Fahmy, R. Thomas, and P. Reiher, “Benchmarks for DDoS Defense Evaluation,” Proc. of the Milcom 2006, October, 2006.
19. T. Monk and K. Claffy, “Cooperation in Internet Data Acquisition and Analysis,” Coordination and Administration of the Internet Workshop, Cambridge, MA., Sept. 8-10, 1996, (CAIDA Project), http://www.caida.org/.
20. D. Moore, G. Voelker, and S. Savage, “Inferring Internet Denial-of-Service Activity,” Proc. of the 10th USENIX Security Symposium, 2001.
21. P. Ning, S. Jajodia, and X. S. Wang, “Abstraction-based Intrusion Detection in Distributed Environment”, ACM Trans. On Information and System Security, Nov. 2001, pp. 407-452.
22. C. Papadopoulos, R. Lindell, J. Mehringer, A. Hussain, R. Govindan, "COSSACK: Coordinated Suppression of Simultaneous Attacks," Proc. of DISCEX III, 2003, pp. 2-13.
23. T. Peng, C. Leckie, and K. Ramamohanarao, "Detecting Distributed Denial of Service Attacks by Sharing Distributed Beliefs," The Eighth Australasian Conference on Information Security and Privacy (ACISP 2003), Australia, July 9-11, 2003.
24. S. Ranjan, R. Swaminathan, M. Uysal, and E. Knightly, “DDoS-resilient Scheduling to Counter Application Layer Attacks under Imperfect Detection,” IEEE INFOCOM 2006, Barcelona, April 23-29, 2006.
25. J. Sommers and P. Barford, “Self-Configuring Network Traffic Generation,” in Proc. of ACM Internet Measurement Conference, Taormina, Sicily, Italy, Oct. 25-27, 2004.
26. M. Walfish, M. Vutukuru, H. Balakrishnan, D. Karger, and S. Shenker "DDoS Defense by Offense," ACM SIGCOMM 2006, Pisa, Italy, September 2006.
27. H. Wang, D. Zhang, and K. Shin, “Change-Point Monitoring for the Detection of DoS Attacks,” IEEE Trans. on Dependable and Secure Computing, Vol. 1, Oct.-Dec., 2004.
28. X. Wang, S. Chellappan, P. Boyer, and D. Xuan, “On the Effectiveness of Secure Overlay Forwarding Systems under Intelligent Distributed DoS Attacks,” IEEE Trans. on Parallel and Distributed Systems, Vol. 17, July 2006.
29. B. Gibson, “TCP Limitations on File Transfer Performance Hamper the Global Internet,” white paper, Sept. 2006, http://www.niwotnetworks.com/gbx/TCPLimitsFastFileTransfer.htm