Detection and defense against DDoS attack with IP spoofing

Mopari, I.B.; Pukale, S. G.; Dhore, M. L.

doi:10.1109/icccnet.2008.4787693

Cited by 18 publications

(5 citation statements)

References 4 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Several studies have used the TTL values in different ways to detect IP spoofing attacks [16,17,26,23,24,12,25]. Beverly et al [26] have presented a forensic carving technique of network packets and associated data structures.…”

Section: Related Workmentioning

confidence: 99%

See 1 more Smart Citation

Enhanced EDoS-Shield for Mitigating EDoS Attacks Originating from Spoofed IP Addresses

Alhaidari

Sqalli

Salah

2012

2012 IEEE 11th International Conference on Trust, Security and Privacy in Computing and Communications

View full text Add to dashboard Cite

Cloud computing has become one of the fastest growing segments in IT industry. A cloud introduces resourcerich computing platforms, where adopters are charged based on the usage of the cloud's resources, known as "pay-as-youuse" or utility computing. With this model, a conventional DDoS attack targeting servers and network resources is transformed in a cloud environment to a new attack that targets the cloud adopter's economic resource, namely Economic Denial of Sustainability (EDoS) attack. In this paper, we advocate a novel solution as an enhancement to prior work, namely EDoS-Shield, to mitigate the EDoS attacks originating from spoofed IP addresses. We design a discrete event simulation experiment to evaluate its performance and the results show that it is a promising solution to mitigate the EDoS attacks originating from spoofed IP addresses. The enhanced EDoS-Shield technique also outperforms the original EDoS-Shield in terms of performance and cost metrics.

show abstract

Section: Related Workmentioning

confidence: 99%

“…And, it can be considered as the Hop-count value of a source and destination pair. In fact, calculating the Hop-count value is not a direct operation, since the initial values used in the TTL field are not fixed and vary based on the Operating Systems [15,16].…”

Section: Introductionmentioning

confidence: 99%

Enhanced EDoS-Shield for Mitigating EDoS Attacks Originating from Spoofed IP Addresses

Alhaidari

Sqalli

Salah

2012

2012 IEEE 11th International Conference on Trust, Security and Privacy in Computing and Communications

View full text Add to dashboard Cite

show abstract

“…Mopari et al [14] proposed a method for detecting a DDoS attack and defending against a particular type of attack, namely IP spoofing, by maintaining an IP-hop count table and analyzing it (a hop count filter) to detect malicious packets and drop them. Tupakula et al [15] discuss the effect of TCP SYN and reflection DDoS attacks by preventing the attacker traffic from passing through the ingress router that is nearest to the attack source.…”

Section: Related Workmentioning

confidence: 99%

An adaptive learning routing protocol for the prevention of distributed denial of service attacks in wireless mesh networks

Misra

Krishna

Abraham

et al. 2010

Computers & Mathematics with Applications

View full text Add to dashboard Cite

a b s t r a c tWireless Mesh Networks (WMNs) have potentially unlimited applications in the future. Therefore, establishing a viable and secure wireless network routing protocol for these networks is essential. Currently, these networks are being used in connecting large sections of cities by setting up wireless routers at strategic points all around the city. These networks can also support connecting remote areas of the country, instead of having to lay a cable all the way. The nature of applications mentioned above make these networks prone to different attacks. Thus, security of these networks is a serious concern. In this paper, we study the impact of Distributed Denial of Service (DDoS) attacks on WMNs. We base our work on the existing Optimized Link State Routing protocol (OLSR) and we weave in concepts of Learning Automata (LA) to protect the network from this kind of attack. The simulation results for the proposed scheme show that the proposed protocol is effective in the prevention of DDoS attacks in WMNs.

show abstract

“…In the paper (Mopari et al, 2008) DDOS attacks are classified into volume based attacks, protocol based attacks and application layer based attacks. In the following table detailed classification of DDOS attacks is shown.…”

Section: • Victimmentioning

confidence: 99%

“…In Mopari et al (2008) a mechanism which is focused on detection and rejection of false packets is shown. Packet authenticity is checked by the estimated number of jumps required for packet to reach its destination.…”

Section: • Victimmentioning

confidence: 99%

Overview of DOS attacks on wireless sensor networks and experimental results for simulation of interference attacks

Gavrić

Simić

2018

Ing. Inv.

View full text Add to dashboard Cite

Wireless sensor networks are now used in various fields. The information transmitted in the wireless sensor networks is very sensitive, so the security issue is very important. DOS (denial of service) attacks are a fundamental threat to the functioning of wireless sensor networks. This paper describes some of the most common DOS attacks and potential methods of protection against them. The case study shows one of the most frequent attacks on wireless sensor networks -the interference attack. In the introduction of this paper authors assume that the attack interference can cause significant obstruction of wireless sensor networks. This assumption has been proved in the case study through simulation scenario and simulation results. RESUMENLas redes de sensores inalámbricos se utilizan ahora en varios campos. La información transmitida en las redes de sensores inalámbricos es muy delicada, por lo que el tema de la seguridad es muy importante. Los ataques de DOS (Denegación de servicio) son una amenaza fundamental para el funcionamiento de las redes de sensores inalámbricos. Este documento describe algunos de los ataques DOS más comunes y los posibles métodos de protección contra ellos. El estudio de caso muestra uno de los ataques más frecuentes a las redes de sensores inalámbricos: el ataque de interferencia. En la introducción de este artículo, los autores suponen que la interferencia de ataque puede causar una obstrucción significativa de las redes de sensores inalámbricos. Esta suposición se ha demostrado en el estudio de caso a través de escenarios de simulación y los resultados de estas simulaciones.Palabras clave: Redes de sensores inalámbricos, detección de intrusión, comunicación inalámbrica, seguridad del sistema de comunicación, interferencia de radiofrecuencia.

show abstract

Detection and defense against DDoS attack with IP spoofing

Cited by 18 publications

References 4 publications

Enhanced EDoS-Shield for Mitigating EDoS Attacks Originating from Spoofed IP Addresses

Enhanced EDoS-Shield for Mitigating EDoS Attacks Originating from Spoofed IP Addresses

An adaptive learning routing protocol for the prevention of distributed denial of service attacks in wireless mesh networks

Overview of DOS attacks on wireless sensor networks and experimental results for simulation of interference attacks

Contact Info

Product

Resources

About