Please use this identifier to cite or link to this item: http://hdl.handle.net/10397/20006
Title: Engineering of a global defense infrastructure for DDoS attacks
Authors: Wan, K
Chang, R 
Keywords: Internet
Digital simulation
Network topology
Performance evaluation
Security of data
Telecommunication security
Telecommunication traffic
Issue Date: 2002
Publisher: IEEE
Source: Conference Record of the 2005 Networks, 2002 : ICON 2002, August, 2002, p. 419-427 How to cite?
Abstract: Distributed denial-of-service (DDoS) attacks have emerged as a major threat to the stability of the Internet. By the very nature of the DDoS attacks, pure preventive and pure reactive approaches are not effective to defend against them. We propose a global defense infrastructure to detect-and-respond to the DDoS attacks. This infrastructure consists of a network of distributed local detection systems (LDSes), which detect attacks and respond to them cooperatively. Because of the current Internet topology, this infrastructure can be very effective even if only a small number of major backbone ISPs participate in this infrastructure by installing fully configured LDSes. Moreover, we propose to use traffic volume anomaly for DDoS attack detection. A fully configured LDS monitors the passing traffic for an abnormally high volume of traffic destined to an IP host. A DDoS attack is confirmed if multiple LDSes have detected such anomalies at the same time. Our simulation studies have demonstrated that the proposed detection algorithms are responsive and effective in curbing DDoS attacks.
URI: http://hdl.handle.net/10397/20006
ISBN: 0-7803-7533-5
DOI: 10.1109/ICON.2002.1033348
Appears in Collections:Conference Paper

Access
View full-text via PolyU eLinks SFX Query
Show full item record

SCOPUSTM   
Citations

24
Last Week
0
Last month
Citations as of Oct 17, 2017

WEB OF SCIENCETM
Citations

10
Last Week
0
Last month
0
Citations as of Oct 17, 2017

Page view(s)

48
Last Week
3
Last month
Checked on Oct 16, 2017

Google ScholarTM

Check

Altmetric



Items in DSpace are protected by copyright, with all rights reserved, unless otherwise indicated.