Please use this identifier to cite or link to this item: http://hdl.handle.net/10397/20006
Title: Engineering of a global defense infrastructure for DDoS attacks
Authors: Wan, K
Chang, R 
Issue Date: 2002
Source: Conference Record of the 2005 Networks, 2002 : ICON 2002, August, 2002, p. 419-427
Abstract: Distributed denial-of-service (DDoS) attacks have emerged as a major threat to the stability of the Internet. By the very nature of the DDoS attacks, pure preventive and pure reactive approaches are not effective to defend against them. We propose a global defense infrastructure to detect-and-respond to the DDoS attacks. This infrastructure consists of a network of distributed local detection systems (LDSes), which detect attacks and respond to them cooperatively. Because of the current Internet topology, this infrastructure can be very effective even if only a small number of major backbone ISPs participate in this infrastructure by installing fully configured LDSes. Moreover, we propose to use traffic volume anomaly for DDoS attack detection. A fully configured LDS monitors the passing traffic for an abnormally high volume of traffic destined to an IP host. A DDoS attack is confirmed if multiple LDSes have detected such anomalies at the same time. Our simulation studies have demonstrated that the proposed detection algorithms are responsive and effective in curbing DDoS attacks.
Keywords: Internet
Digital simulation
Network topology
Performance evaluation
Security of data
Telecommunication security
Telecommunication traffic
Publisher: IEEE
ISBN: 0-7803-7533-5
DOI: 10.1109/ICON.2002.1033348
Appears in Collections:Conference Paper

Access
View full-text via PolyU eLinks SFX Query
Show full item record

SCOPUSTM   
Citations

27
Last Week
0
Last month
Citations as of Aug 21, 2020

WEB OF SCIENCETM
Citations

12
Last Week
0
Last month
0
Citations as of Sep 20, 2020

Page view(s)

141
Last Week
6
Last month
Citations as of Sep 20, 2020

Google ScholarTM

Check

Altmetric


Items in DSpace are protected by copyright, with all rights reserved, unless otherwise indicated.