A model to partly but reliably distinguish DDOS flood traffic from aggregated one
Summary: Reliable distinguishing DDOS flood traffic from aggregated traffic is desperately desired by reliable prevention of DDOS attacks. By reliable distinguishing, we mean that flood traffic can be distinguished from aggregated one for a predetermined probability. The basis to reliably distinguish flood traffic from aggregated one is reliable detection of signs of DDOS flood attacks. As is known, reliably distinguishing DDOS flood traffic from aggregated traffic becomes a tough task mainly due to the effects of flash-crowd traffic. For this reason, this paper studies reliable detection in the underlying DiffServ network to use static-priority schedulers. In this network environment, we present a method for reliable detection of signs of DDOS flood attacks for a given class with a given priority. There are two assumptions introduced in this study. One is that flash-crowd traffic does not have all priorities but some. The other is that attack traffic has all priorities in all classes, otherwise an attacker cannot completely achieve its DDOS goal. Further, we suppose that the protected site is equipped with a sensor that has a signature library of the legitimate traffic with the priorities flash-crowd traffic does not have. Based on those, we are able to reliably distinguish attack traffic from aggregated traffic with the priorities that flash-crowd traffic does not have according to a given detection probability.
- Detection of variations of local irregularity of traffic under DDOS flood attack
- Trawling traffic under attack overcoming DDoS attacks by target-controlled traffic filtering
- A new multistage approach to detect subtle DDoS attacks
- An autonomous defense against SYN flooding attacks: detect and throttle attacks at the victim side independently
- Detecting distributed denial of service attack based on multi-feature fusion
- A calculus for network delay. II. Network analysis
- A new adaptive local linear prediction method and its application in hydrological time series
- A novel approach to equipment health management based on auto-regressive hidden semi-Markov model (AR-HSMM)
- A numerical method for preserving curve edges in nonlinear anisotropic smoothing
- A reflected fBm limit for fluid models with ON/OFF sources under heavy traffic
- A tutorial on nonlinear time-series data mining in engineering asset health and reliability prediction: concepts, models, and algorithms
- An improved ARED algorithm for congestion control of network transmission
- Dynamical aspects of macroscopic and quantum transitions due to coherence function and time series events
- Enclosed Laplacian Operator of Nonlinear Anisotropic Diffusion to preserve singularities and delete isolated points in image smoothing
- Fractals and hidden symmetries in DNA
- scientific article; zbMATH DE number 5705550 (Why is no real title available?)
- scientific article; zbMATH DE number 2044562 (Why is no real title available?)
- scientific article; zbMATH DE number 847242 (Why is no real title available?)
- scientific article; zbMATH DE number 1404558 (Why is no real title available?)
- On deterministic traffic regulation and service guarantees: a systematic approach by filtering
- Random-order fractional differential equation models
- Self-tuning random early detection algorithm to improve performance of network transmission
- Synthesis of multifractional Gaussian noises based on variable-order fractional operators
- Variance-Constrained ${\cal H}_{\infty}$ Filtering for a Class of Nonlinear Time-Varying Systems With Multiple Missing Measurements: The Finite-Horizon Case
- Detection of variations of local irregularity of traffic under DDOS flood attack
- Applying semigroup property of enhanced Chebyshev polynomials to anonymous authentication protocol
- An efficient PageRank approach for urban traffic optimization
- Mitigating Network Denial-of-Service Through Diversity-Based Traffic Management
This page was built for publication: A model to partly but reliably distinguish DDOS flood traffic from aggregated one
Report a bug (only for logged in users!)Click here to report a bug for this page (MaRDI item Q1955286)
