NDLI: Lightweight Detection of DoS Attacks

Content Provider	IEEE Xplore Digital Library
Author	Pukkawanna, S. Visoottiviseth, V. Pongpaibool, P.
Copyright Year	2007
Description	Author affiliation: Mahidol Univ., Bangkok (Pukkawanna, S.; Visoottiviseth, V.)
Abstract	Denial of service (DoS) attacks have continued to evolve and impact availability of the Internet infrastructure. Many researchers in the field of network security and system survivability have been developing mechanisms to detect DoS attacks. By doing so they hope to maximize accurate detections (true-positive) and minimize non-justified detections (false-positive). This research proposes a lightweight method to identify DoS attacks by analyzing host behaviors. Our method is based on the concept of BLINd Classification or BLINC: no access to packet payload, no knowledge of port numbers, and no additional information other than what current flow collectors provide. Rather than using pre-defined signatures or rules as in typical Intrusion Detection Systems, BLINC maps flows into graphlets of each attack pattern. In this work we create three types of graphlets for the following DoS attack patterns: SYN flood, ICMP flood, and host scan. Results show that our method can identify all occurrences and all hosts associated with attack activities, with a low percentage of false positive.
Starting Page	77
Ending Page	82
File Size	287529
Page Count	6
File Format	PDF
ISBN	9781424412297
ISSN	15566463
DOI	10.1109/ICON.2007.4444065
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2007-11-19
Publisher Place	Australia
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Computer crime Intrusion detection Floods Payloads Telecommunication traffic Availability Web and internet services Bandwidth Inspection Computer science
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

$LD^{2}:$ A system for lightweight detection of denial-of-service attacks

Change-point monitoring for the detection of DoS attacks

Practical techniques for defending against DDoS attacks

Proactive model for Mitigating Internet Denial-of-Service Attacks

Slimming Down Deep Packet Inspection Systems

Network Intrusion Detection: Using MDLcompress for deep packet inspection

An Entropy-Based Countermeasure against Intelligent DoS Attacks Targeting Firewalls

On the impact of DoS attacks on Internet traffic characteristics and QoS

VoIP Honeypot Architecture

Lightweight Detection of DoS Attacks

Similar Documents

$LD^{2}:$ A system for lightweight detection of denial-of-service attacks

Change-point monitoring for the detection of DoS attacks

Practical techniques for defending against DDoS attacks

Proactive model for Mitigating Internet Denial-of-Service Attacks

Slimming Down Deep Packet Inspection Systems

Network Intrusion Detection: Using MDLcompress for deep packet inspection

An Entropy-Based Countermeasure against Intelligent DoS Attacks Targeting Firewalls

On the impact of DoS attacks on Internet traffic characteristics and QoS

VoIP Honeypot Architecture

Lightweight Detection of DoS Attacks