Composite Dos Attack Model

Abstract

Preparation for potential threats is one of the most important phases ensuring system security. It allows evaluating possible losses, changes in the attack process, the effectiveness of used countermeasures, optimal system settings, etc. In cyberattack cases, executing real experiments can be difficult for many reasons. However, mathematical or programming models can be used instead of conducting experiments in a real environment. This work proposes a composite denial of service attack model that combines bandwidth exhaustion, filtering and memory depletion models for a more real representation of similar cyber-attacks. On the basis of the introduced model, different experiments were done. They showed the main dependencies of the influence of attacker and victim's properties on the success probability of denial of service attack. In the future, this model can be used for the denial of service attack or countermeasure optimization.

Vulnerability Bandwidth Depletion Attack on Distributed Cloud Computing Network: A QoS Perspective

“…In this case, the remaining part of traffic could be blocked by its filtering system. Other works on threats and attacks with emphasis on evaluation analysis of DoS traffic have been studied in [22], [23]. This paper observed that existing works in literature regarding cyber security vis-à-vis DoS and other schemes have not explored embedded Stateful Packet Inspection (SPI) based on OpenFlow Application Centric Infrastructure (OACI) for securing enterprise systems and their networks such as SGEMS architecture.…”

“…The properties of an attack as explained previously could be used to ascertain its effect on QoS. In [22], a good mathematical expression for calculating the success of DoS attack using the known data on the attacks, normal flow and other properties of the victim is described but this paper models the security QoS metrics for VBDDA using the SPI-OACI approach. In this case, when a DDoS/ DRDoS resource depletion attacks occurs, this will facilitate an attacker sending packets that misuse network protocol communications or sending malformed packets that tie up network resources so that none are left for legitimate users or the server backend at large.…”

“…Their goal was to allow communication between a confirmed user and a target. Similarly, the work in [22] proposed a composite DoS attack model that combines bandwidth exhaustion, filtering and memory depletion models for a more real representation of similar cyber-attacks. On the basis of their introduced model, different experiments were done.…”

Simulator for analysis cyber threats to RFID based system

“…; • network and application level simulators -they are designed to simulate sensor network and mainly to test routing algorithms; • cross level simulators -this category represents tools able to simulate devices and network at various levels of abstraction: routing algorithms, energy and resource consumption and simple applications. The last group contains the most all-purpose toolssome representative are as follows: COOJA [13], J-Sim and Sensor Network Package [14], CupCarbon [15]. The other group is made up of simulators which base upon COTS software (Commercial Off-The-Shelf Software), like NS2 or OMNET++.…”

“…To present "in action" the developed simulation software, an experiment regarding DoS attack was carried out. Similarly to [15] we considered a "denial of service" attack case in order to simultaneously simulate hybrid model composed of bandwidth exhaustion, filtering and memory depletion sub-models. The main target of the "denial of service" attack is RFID office system is order to ultimately reduce or finally block legitimate RFID devices (RFIDDevs) from accessing services of RFID tagged document flow management system (RFIDSys).…”