NDLI: DDoS Detection using host-network based metrics and mitigation in experimental testbed

Content Provider	IEEE Xplore Digital Library
Author	Devi, B.S.K. Preetha, G. Shalinie, S.M.
Copyright Year	2012
Description	Author affiliation: Department of Computer Science and Engineering, Thiagarajar College of Engineering, Affiliated to Anna University, Thiruparankundram, Madurai, Tamilnadu, India, 625 015 (Devi, B.S.K.; Preetha, G.; Shalinie, S.M.)
Abstract	Distributed Denial of Service (DDoS) attacks is very recent and popular devastating attack in the field of cyber society. Flooding DDoS attacks produce adverse effects for critical infrastructure availability, integrity and confidentiality. Current defense approaches cannot efficiently detect and filter out the attack traffic in real time. Online analysis of real time attack traffic and their impact and degradation of host and network based performance metrics becomes very essential. So, online measurement of these network performance metrics itself acts as an Intrusion detection system. The anomalies are the inference for network security analyst to suspect whether the network is under attack or not. Based on the assumption that the attacker flows are very aggressive than the legitimate users the proposed work provides sufficient bandwidth to genuine users during flooding DDoS attack. The Interface Based Rate Limiting (IBRL) algorithm proposed in this paper is used to mitigate the identified DDoS attacks. The implementation is carried out on an experimental testbed build up on Linux machines and Virtual routers. The experimental results show that there is considerable increase in the host and network based performance metrics for legitimate users even under DoS and DDoS attacks.
Starting Page	423
Ending Page	427
File Size	281481
Page Count	5
File Format	PDF
ISBN	9781467315999
e-ISBN	9781467316019
DOI	10.1109/ICRTIT.2012.6206744
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2012-04-19
Publisher Place	India
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Measurement Distributed Denial of Service attack Limiting Virtual router Host and network based performance metrics Bandwidth Throughput Internet Rate limiting Computer crime Monitoring
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

A rate limiting mechanism for defending against flooding based distributed denial of service attack

Global Detection of Flooding-Based DDoS Attacks Using a Cooperative Overlay Network

Pushback: router-based defense against ddos attacks (2001).

Distributed Denial of Service (DDoS) Mitigation Using Blockchain—A Comprehensive Insight

A source router approach to ddos defense.

A coordinated detection and response scheme for distributed Denial-of-Service attacks (2006)

Low-Rate DDoS Attacks Detection and Traceback by Using New Information Metrics

Telecommunications network security defending against flooding-based distributed denial-of-service attacks: a.

Denying Denial-of-Service Attacks: A Router Based Solution (2003)

DDoS Detection using host-network based metrics and mitigation in experimental testbed

Similar Documents

A rate limiting mechanism for defending against flooding based distributed denial of service attack

Global Detection of Flooding-Based DDoS Attacks Using a Cooperative Overlay Network

Pushback: router-based defense against ddos attacks (2001).

Distributed Denial of Service (DDoS) Mitigation Using Blockchain—A Comprehensive Insight

A source router approach to ddos defense.

A coordinated detection and response scheme for distributed Denial-of-Service attacks (2006)

Low-Rate DDoS Attacks Detection and Traceback by Using New Information Metrics

Telecommunications network security defending against flooding-based distributed denial-of-service attacks: a.

Denying Denial-of-Service Attacks: A Router Based Solution (2003)

DDoS Detection using host-network based metrics and mitigation in experimental testbed