Booter list generation: The basis for investigating DDoS‐for‐hire websites

Santanna, José Jair Cardoso de; Vries, J. de; Schmidt, Ricardo de O.; Tuncer, Daphné; Granville, Lisandro Zambenedetti; Pras, Aiko

doi:10.1002/nem.2008

Cited by 8 publications

(11 citation statements)

References 22 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Distributed Denial-of-service (DDoS) is a denial-of-service attack where attackers keep users from accessing a networked system, service, website, application, or other resource [29,30]. A DDoS attack works by using all available network bandwidth or resources on a target network.…”

Section: Overview Ddos Phishing and Ransomwarementioning

confidence: 99%

COORDINATE: A model to analyse the benefits and costs of coordinating cybercrime

Meurs¹

2022

JISIS

View full text Add to dashboard Cite

Recent leaks (such as Conti) have provided greater insights on the working of cybercriminal organisations. Just like any other business, these malicious actors strategically manage their processes in order to maximise their revenues. Coordinating different types of cybercrimes as part of a single attack campaign provides another opportunity to these criminal groups to improve the efficiency of their attacks. To investigate the promise of this “coordination” between cybercrimes in improving the financial gains realised by cybercriminals, we take a two-step approach. First, we perform a bibliometric analysis of past scientific literature discussing the concept of “coordination” w.r.t to cybercrime. Second, as a case study, analysing the attack chains of DDoS, phishing and ransomware attacks, we identify vantage points for potential coordination from an attacker’s perspective. Based on our findings, we propose a model (COORDINATE) to identify the types of potential cybercrime “coordinations”. COORDINATE considers three relevant types of coordination: direct collaborated coordination, indirect collaborated coordination, and opportunistic coordination. Given the advantages of coordinated attacks, our results suggest that one crime may provide opportunities for the next one. Coordinated attacks will become more prevalent, and that we may witness the development of a dynamic that leads to more online crime.

show abstract

Section: Overview Ddos Phishing and Ransomwarementioning

confidence: 99%

COORDINATE: A model to analyse the benefits and costs of coordinating cybercrime

Meurs¹

2022

JISIS

View full text Add to dashboard Cite

show abstract

“…Where the odds ratio was used for performing the risk analysis to assess if particular user characteristics and demographics increase the odds of malware attack or not [30]. In [31] the odds ratio is used to find the characteristics that are more likely to be related to booters than to other websites, so generate a booter blacklist.…”

Section: A Odds Ratiomentioning

confidence: 99%

Detection of Distributed Denial of Service Flooding Attack Using Odds Ratio

Nashat¹,

Hussain²,

Jiang³

2021

J-NaNA

View full text Add to dashboard Cite

Computer networks are vulnerable to many types of attacks while the Distributed Denial of Service attack (DDoS) serves as one of the top concerns for security professionals. The DDoS flooding attack denies the services by consuming the server resources to prevent the legitimate users from using their desired services. The hardness of detecting this attack lies in sending a stream of packets to the server with spoofed IP addresses, so that the internet routing infrastructure cannot distinguish the spoofed packets. Based on the odds ratio (OR) statistical measurement, in this work we propose a new detection method for the DDoS flooding attacks. By exploring the odds ratio to determine the risk factor of any incoming traffic to the server, the legitimate and attack traffic packets can be easily differentiated. Experimental results demonstrate the efficiency of the presented detection method in terms of its detection probability and detection time.

show abstract

“…It might come to be simpler to initiate DDoS attacks even for beginners. Therefore, the development of security solutions (i.e., deep learning-based) solutions to detect and prevent this kind of attack is of great importance either in academia or industry [14]. The alleviation of DDoS attacks applied utilizing DDoS-for-hire service is costly since extra resources are necessary to thwart the attacks.…”

Section: Instantaneous Cumulative Analysis Of Traffic Flowsmentioning

confidence: 99%