NDLI: Botz-4-sale: surviving organized DDoS attacks that mimic flash crowds

Please wait, while we are loading the content...

Finding a needle in a haystack: pinpointing significant BGP routing changes in an IP network

Design and implementation of a routing control platform

Negotiation-based routing between neighboring ISPs

Detecting BGP configuration faults with static analysis

IP fault localization via risk modeling

Performance modeling and system management for multi-component online services

Debunking some myths about structured and unstructured overlays

Bandwidth-efficient management of DHT routing tables

Improving web availability for clients with MONET

Shark: scaling file servers via cooperative caching

Glacier: highly durable, decentralized storage despite massive correlated failures

Quorum: flexible quality of service for internet services

Trickles: a stateless network stack for improved scalability, resilience, and flexibility

Designing extensible IP router software

Using emulation to understand and improve wireless networks and applications

Geographic routing made practical

Sustaining cooperation in multi-hop wireless networks

ACMS: the Akamai configuration management system

The collective: a cache-based system management architecture

Live migration of virtual machines

Botz-4-sale: surviving organized DDoS attacks that mimic flash crowds

Cashmere: resilient anonymous routing

Decentralized, adaptive resource allocation for sensor networks

Beacon vector routing: scalable point-to-point routing in wireless sensornets

Active sensor networks

Botz-4-sale: surviving organized DDoS attacks that mimic flash crowds

Content Provider	ACM Digital Library
Author	Berger, Arthur Kandula, Srikanth Jacob, Matthias Katabi, Dina
Abstract	Recent denial of service attacks are mounted by professionals using Botnets of tens of thousands of compromised machines. To circumvent detection, attackers are increasingly moving away from bandwidth floods to attacks that mimic the Web browsing behavior of a large number of clients, and target expensive higher-layer resources such as CPU, database and disk bandwidth. The resulting attacks are hard to defend against using standard techniques, as the malicious requests differ from the legitimate ones in intent but not in content. We present the design and implementation of Kill-Bots, a kernel extension to protect Web servers against DDoS attacks that masquerade as flash crowds. Kill-Bots provides authentication using graphical tests but is different from other systems that use graphical tests. First, Kill-Bots uses an intermediate stage to identify the IP addresses that ignore the test, and persistently bombard the server with requests despite repeated failures at solving the tests. These machines are bots because their intent is to congest the server. Once these machines are identified, Kill-Bots blocks their requests, turns the graphical tests off, and allows access to legitimate users who are unable or unwilling to solve graphical tests. Second, Kill-Bots sends a test and checks the client's answer without allowing unauthenticated clients access to sockets, TCBs, and worker processes. Thus, it protects the authentication mechanism from being DDoSed. Third, Kill-Bots combines authentication with admission control. As a result, it improves performance, regardless of whether the server overload is caused by DDoS or a true Flash Crowd.
Starting Page	287
Ending Page	300
Page Count	14
File Format	PDF
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2005-05-02
Access Restriction	Subscribed
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Botz-4-sale: Surviving organized ddos attacks that mimic flash crowds (2005)

Botz-4-Sale: Surviving Organized DDoS Attacks That Mimic Flash Crowds (2005)

Botz-4-sale: Surviving organized ddos attacks that mimic flash crowds (2004)

CALD: Surviving Various Application-Layer DDoS Attacks That Mimic Flash Crowd

[9] srikanth kandula et al., “botz-4-sale: surviving.

Discriminating ddos attacks from flash crowds using flow correlation coefficient.

Discriminating DDoS Attacks from Flash Crowds Using Flow Correlation Coefficient

Detection of spoofed and non-spoofed DDoS attacks and discriminating them from flash crowds

KadCache : Employing Kad to Mitigate Flash Crowds and Application Layer DDoS Attacks Against Web Servers

Botz-4-sale: surviving organized DDoS attacks that mimic flash crowds

Similar Documents

Botz-4-sale: Surviving organized ddos attacks that mimic flash crowds (2005)

Botz-4-Sale: Surviving Organized DDoS Attacks That Mimic Flash Crowds (2005)

Botz-4-sale: Surviving organized ddos attacks that mimic flash crowds (2004)

CALD: Surviving Various Application-Layer DDoS Attacks That Mimic Flash Crowd

[9] srikanth kandula et al., “botz-4-sale: surviving.

Discriminating ddos attacks from flash crowds using flow correlation coefficient.

Discriminating DDoS Attacks from Flash Crowds Using Flow Correlation Coefficient

Detection of spoofed and non-spoofed DDoS attacks and discriminating them from flash crowds

KadCache : Employing Kad to Mitigate Flash Crowds and Application Layer DDoS Attacks Against Web Servers

Botz-4-sale: surviving organized DDoS attacks that mimic flash crowds