DDoS avoidance strategy for service availability

Kang, Seung-Hoon; Park, Keun‐Young; Yoo, Sang Guun; Kim, Juho

doi:10.1007/s10586-011-0185-4

Cited by 12 publications

(2 citation statements)

References 8 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Numerous research papers have been published which review DDoS attacks and propose their detection & mitigation techniques. We find some comprehensive papers & articles to enrich our literature review on the topic [1][2][3][4][5][11][12][13][14][15][16][17][18][19][20][21][22][23][24][25][26][27][28][29]. Some reviewed methods have also been referred in tables of first author's previous work [30]; however this paper contains major changes as compared to the previous study.…”

Section: Ddos Detection and Mitigationmentioning

confidence: 99%

A Survey on DDoS Attack and Defense Strategies: From Traditional Schemes to Current Techniques

Aamir

Zaidi

2013

IIS

View full text Add to dashboard Cite

Distributed Denial of Service (DDoS) attacks exhaust victim's bandwidth or services. Traditional architecture of Internet is vulnerable to DDoS attacks and an ongoing cycle of attack & defense is observed. A recent attack report of year 2013 -'Quarter 1' from Prolexic Technologies identifies that 1.75 percent increase in total number of DDoS attacks has been recorded as compared to similar attacks of previous year's last quarter. In this paper, different types and techniques of DDoS attacks and their countermeasures are surveyed. The significance of this paper is the coverage of many aspects of countering DDoS attacks including new research on the topic. We survey different papers describing methods of defense against DDoS attacks based on entropy variations, traffic anomaly parameters, neural networks, device level defense, botnet flux identifications, application layer DDoS defense and countermeasures in wireless networks, CCN & cloud computing environments. We also discuss some traditional methods of defense such as traceback and packet filtering techniques, so that readers can identify major differences between traditional and current techniques of defense against DDoS attacks. We identify that application layer DDoS attacks possess the ability to produce greater impact on the victim as they are driven by legitimate-like traffic, making it quite difficult to identify and distinguish from legitimate requests. The need of improved defense against such attacks is therefore more demanding in research. The study conducted in this paper can be helpful for readers and researchers to recognize better techniques of defense in current times against DDoS attacks and contribute with more research on this topic in the light of future challenges identified in this paper.

show abstract

Section: Ddos Detection and Mitigationmentioning

confidence: 99%

A Survey on DDoS Attack and Defense Strategies: From Traditional Schemes to Current Techniques

Aamir

Zaidi

2013

IIS

View full text Add to dashboard Cite

show abstract

“…To counteract this type of attack, several detection mechanisms have been proposed, both at the network level [1]- [49] and at the application level [50]- [58]. The highest detection rate obtained to date is 99.4%, and has been achieved by implementing a network-level method [1].…”

Section: Introductionmentioning

confidence: 99%

New Features of User’s Behavior to Distributed Denial of Service Attacks Detection in Application Layer

Bravo

Mauricio

2018

Int. J. Onl. Eng.

View full text Add to dashboard Cite

Distributed Denial of Service (DDoS) attacks are a threat to the security of red. In recent years, these attacks have been directed especially towards the application layer. This phenomenon is mainly due to the large number of existing tools for the generation of this type of attack. The highest detection rate achieved by a method in the application capacity is 98.5%. Therefore, the problem of detecting DDoS attacks persists. In this work an alternative of detection based on the dynamism of the web user is proposed. To do this, evaluate the user's characteristics, mouse functions and right click. For the evaluation, a data set of 11055 requests was used, from which the characteristics were extracted and entered into a classification algorithm. To that end, it can be applied once in Java for the classification of real users and DDoS attacks. The results showed that the evaluated characteristics achieved an efficiency of 100%. Therefore, it is concluded that these characteristics show the dynamism of the user and can be used in a detection method of DDoS attacks.

show abstract

Embedding Dependability Attributes into Component-Based Software Development Using the Best Practice Method: A Guideline

Kahtan

Bakar

Nordin

2014

Journal of Applied Security Research

View full text Add to dashboard Cite

DDoS avoidance strategy for service availability

Cited by 12 publications

References 8 publications

A Survey on DDoS Attack and Defense Strategies: From Traditional Schemes to Current Techniques

A Survey on DDoS Attack and Defense Strategies: From Traditional Schemes to Current Techniques

New Features of User’s Behavior to Distributed Denial of Service Attacks Detection in Application Layer

Embedding Dependability Attributes into Component-Based Software Development Using the Best Practice Method: A Guideline

Contact Info

Product

Resources

About