A Model to Partly but Reliably Distinguish DDOS Flood Traffic from Aggregated One
Joint Authors
Source
Mathematical Problems in Engineering
Issue
Vol. 2012, Issue 2012 (31 Dec. 2012), pp.1-12, 12 p.
Publisher
Hindawi Publishing Corporation
Publication Date
2011-06-29
Country of Publication
Egypt
No. of Pages
12
Main Subjects
Abstract EN
Reliable distinguishing DDOS flood traffic from aggregated traffic is desperately desired by reliable prevention of DDOS attacks.
By reliable distinguishing, we mean that flood traffic can be distinguished from aggregated one for a predetermined probability.
The basis to reliably distinguish flood traffic from aggregated one is reliable detection of signs of DDOS flood attacks.
As is known, reliably distinguishing DDOS flood traffic from aggregated traffic becomes a tough task mainly due to the effects of flash-crowd traffic.
For this reason, this paper studies reliable detection in the underlying DiffServ network to use static-priority schedulers.
In this network environment, we present a method for reliable detection of signs of DDOS flood attacks for a given class with a given priority.
There are two assumptions introduced in this study.
One is that flash-crowd traffic does not have all priorities but some.
The other is that attack traffic has all priorities in all classes, otherwise an attacker cannot completely achieve its DDOS goal.
Further, we suppose that the protected site is equipped with a sensor that has a signature library of the legitimate traffic with the priorities flash-crowd traffic does not have.
Based on those, we are able to reliably distinguish attack traffic from aggregated traffic with the priorities that flash-crowd traffic does not have according to a given detection probability.
American Psychological Association (APA)
Li, Ming& Zhao, Wei. 2011. A Model to Partly but Reliably Distinguish DDOS Flood Traffic from Aggregated One. Mathematical Problems in Engineering،Vol. 2012, no. 2012, pp.1-12.
https://search.emarefa.net/detail/BIM-1002031
Modern Language Association (MLA)
Li, Ming& Zhao, Wei. A Model to Partly but Reliably Distinguish DDOS Flood Traffic from Aggregated One. Mathematical Problems in Engineering No. 2012 (2012), pp.1-12.
https://search.emarefa.net/detail/BIM-1002031
American Medical Association (AMA)
Li, Ming& Zhao, Wei. A Model to Partly but Reliably Distinguish DDOS Flood Traffic from Aggregated One. Mathematical Problems in Engineering. 2011. Vol. 2012, no. 2012, pp.1-12.
https://search.emarefa.net/detail/BIM-1002031
Data Type
Journal Articles
Language
English
Notes
Includes bibliographical references
Record ID
BIM-1002031