NDLI: CICADAS: Congesting the Internet with Coordinated and Decentralized Pulsating Attacks

Please wait, while we are loading the content...

Statistical Detection of Online Drifting Twitter Spam: Invited Paper

ORIGEN: Automatic Extraction of Offset-Revealing Instructions for Cross-Version Memory Analysis

Enabling Ciphertext Deduplication for Secure Cloud Storage and Access Control

FSSR: Fine-Grained EHRs Sharing via Similarity-Based Recommendation in Cloud-Assisted eHealthcare System

R-Droid: Leveraging Android App Analysis with Static Slice Optimization

Credential Wrapping: From Anonymous Password Authentication to Anonymous Biometric Authentication

Recipient Revocable Identity-Based Broadcast Encryption: How to Revoke Some Recipients in IBBE without Knowledge of the Plaintext

SecHOG: Privacy-Preserving Outsourcing Computation of Histogram of Oriented Gradients in the Cloud

NFPS: Adding Undetectable Secure Deletion to Flash Translation Layer

Mystique: Evolving Android Malware for Auditing Anti-Malware Tools

Vehicle Self-Surveillance: Sensor-Enabled Automatic Driver Recognition

Binary Analysis for Autonomous Hacking: Invited Abstract

The Request for Better Measurement: A Comparative Evaluation of Two-Factor Authentication Schemes

Secure Dynamic SSE via Access Indistinguishable Storage

Efficient Authenticated Multi-Pattern Matching

Model-based Security Testing: An Empirical Study on OAuth 2.0 Implementations

CDRep: Automatic Repair of Cryptographic Misuses in Android Applications

MAXS: Scaling Malware Execution with Sequential Multi-Hypothesis Testing

Privacy and Utility of Inference Control Mechanisms for Social Computing Applications

Generic Construction of Publicly Verifiable Predicate Encryption

Juggling the Gadgets: Binary-level Code Randomization using Instruction Displacement

Privacy-Preserving Spectral Analysis of Large Graphs in Public Clouds

Publicly Verifiable Secure Cloud Storage for Dynamic Data Using Secure Network Coding

UC-secure Two-Server Password-Based Authentication Protocol and Its Applications

Dealerless Corporate Key Generation for Identity-Based Encryption Schemes

Practical and Efficient Attribute-Based Encryption with Constant-Size Ciphertexts in Outsourced Verifiable Computation

Preventing Page Faults from Telling Your Secrets

StormDroid: A Streaminglized Machine Learning-Based System for Detecting Android Malware

Automated Dynamic Firmware Analysis at Scale: A Case Study on Embedded Web Interfaces

Homomorphic Linear Authentication Schemes from (ε)-Authentication Codes

Building an Encrypted, Distributed, and Searchable Key-value Store

Efficient Verifiable Computation of Linear and Quadratic Functions over Encrypted Data

Discovering Malicious Domains through Passive DNS Data Graph Analysis

MobiPot: Understanding Mobile Telephony Threats with Honeycards

Real-Time Detection of Malware Downloads via Large-Scale URL->File->Machine Graph Mining

Privacy Preserving Disease Treatment & Complication Prediction System (PDTCPS)

Novel Constructions of Cramer-Shoup Like Cryptosystems Based on Index Exchangeable Family

No-Execute-After-Read: Preventing Code Disclosure in Commodity Software

Efficient Multi-Function Data Sharing and Searching Mechanism for Cloud-Based Encrypted Data

Efficient Techniques for Publicly Verifiable Delegation of Computation

Client-CASH: Protecting Master Passwords against Offline Attacks

Anonymous Identity-Based Broadcast Encryption with Constant Decryption Complexity and Strong Security

Efficient Secure Outsourcing of Large-scale Quadratic Programs

Identifying and Utilizing Dependencies Across Cloud Security Services

FLEX: A Flexible Code Authentication Framework for Delegating Mobile App Customization

Distributed Detection of Single-Stage Multipoint Cyber Attacks in a Water Treatment Plant

Forgery-Resistant Touch-based Authentication on Mobile Devices

Anonymous Role-Based Access Control on E-Health Records

Efficient Privacy-Preserving Matrix Factorization via Fully Homomorphic Encryption: Extended Abstract

Half-Baked Cookies: Hardening Cookie-Based Authentication for the Modern Web

Checking Intent-based Communication in Android with Intent Space Analysis

Smartwatch-Based Keystroke Inference Attacks and Context-Aware Protection Mechanisms

Data Exfiltration in the Face of CSP

Efficient Construction of Completely Non-Malleable CCA Secure Public Key Encryption

ROPMEMU: A Framework for the Analysis of Complex Code-Reuse Attacks

Device-Enhanced Password Protocols with Optimal Online-Offline Protection

Password-Controlled Encryption with Accountable Break-Glass Access

Verifiable Outsourcing Algorithms for Modular Exponentiations with Improved Checkability

Hardening OpenStack Cloud Platforms against Compute Node Compromises

DroidDisintegrator: Intra-Application Information Flow Control in Android Apps

Smart Locks: Lessons for Securing Commodity Internet of Things Devices

Practical "Signatures with Efficient Protocols" from Simple Assumptions

Gait-Based Wi-Fi Signatures for Privacy-Preserving

Privacy Breach by Exploiting postMessage in HTML5: Identification, Evaluation, and Countermeasure

Attestation Transparency: Building secure Internet services for legacy clients

revDroid: Code Analysis of the Side Effects after Dynamic Permission Revocation of Android Apps

Leakage Fingerprints: A Non-negligible Vulnerability in Side-Channel Analysis

StemJail: Dynamic Role Compartmentalization

(Deterministic) Hierarchical Identity-based Encryption from Learning with Rounding over Small Modulus

Friend or Foe?: Your Wearable Devices Reveal Your Personal PIN

Anonymous Identity-Based Broadcast Encryption with Chosen-Ciphertext Security

Cross Processor Cache Attacks

Why MAC Address Randomization is not Enough: An Analysis of Wi-Fi Network Discovery Mechanisms

Bilateral-secure Signature by Key Evolving

Anonymous Identification for Ad Hoc Group

Fault Attacks on Efficient Pairing Implementations

CICADAS: Congesting the Internet with Coordinated and Decentralized Pulsating Attacks

Attacks and Defence on Android Free Floating Windows

Error Tolerance based Single Interesting Point Side Channel CPA Distinguisher

SkypeLine: Robust Hidden Data Transmission for VoIP

Generally Hybrid Proxy Re-Encryption: A Secure Data Sharing among Cryptographic Clouds

RamCrypt: Kernel-based Address Space Encryption for User-mode Processes

Your Credentials Are Compromised, Do Not Panic: You Can Be Well Protected

Inside Attack Filtering for Robust Sensor Localization

CICADAS: Congesting the Internet with Coordinated and Decentralized Pulsating Attacks

Content Provider	ACM Digital Library
Author	Hsiao, Hsu-Chun Chen, Chih-Wei Ke, Yu-Ming Perrig, Adrian Sekar, Vyas
Abstract	This study stems from the premise that we need to break away from the "reactive" cycle of developing defenses against new DDoS attacks (e.g., amplification) by proactively investigating the potential for new types of DDoS attacks. Our specific focus is on pulsating attacks, a particularly debilitating type that has been hypothesized in the literature. In a pulsating attack, bots coordinate to generate intermittent pulses at target links to significantly reduce the throughput of TCP connections traversing the target. With pulsating attacks, attackers can cause significantly greater damage to legitimate users than traditional link flooding attacks. To date, however, pulsating attacks have been either deemed ineffective or easily defendable for two reasons: (1) they require a central coordinator and can thus be tracked; and (2) they require tight synchronization of pulses, which is difficult even in normal non-congestion scenarios. This paper argues that, in fact, the perceived drawbacks of pulsating attacks are in fact not fundamental. We develop a practical pulsating attack called CICADAS using two key ideas: using both (1) congestion as an implicit signal for decentralized implementation, and (2) a Kalman-filter-based approach to achieve tight synchronization. We validate CICADAS using simulations and wide-area experiments. We also discuss possible countermeasures against this attack.
Starting Page	699
Ending Page	710
Page Count	12
File Format	PDF
ISBN	9781450342339
DOI	10.1145/2897845.2897866
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2016-05-30
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Pulsating attack Kalman filter Ddos attack Distributed and decentralized coordination
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in