Cross-correlation Based Synchronization Mechanism of LDDoS Attacks

Abstract

A success Low-rate Distributed Denial of Service (LDDoS) attack is composed of many single sources of Lowrate Denial of Service (LDoS) attacks, which are wellorganized in time synchronization to aggregate the attack flow at the end of target router. This paper addresses time synchronization and flow aggregation in LDDoS attacks for the purpose of exploring the attack performance. A crosscorrelation algorithm is proposed to guarantee all networkwide distributed attack pulses aggregate at the victim end with a strict time limitation to form a powerful attack pulse. Experiments on the attack performance of LDoS and LDDoS attack are performed in NS-2 simulation platform. Experiment results show that the LDDoS attack effects can be improved significantly by using cross-correlation algorithm to coordinate attack pulses, which obtain better attack performance than many single dependent attack pulses.

TCP Low Rate DDoS Attack Detection

“…In recent research, researchers tend to investigate different aspects and results of LDDoS. Zhijun and et al [21] presents a new method for launching an LDDoS attack. Aggregation of distributed sources in appropriate time (which caused a effective damage impact to victim) is most important in DDoS specially in LDDoS attack.…”