Net-Police: A network patrolling service for effective mitigation of volumetric DDoS attacks

Karapoola, Sareena; Vairam, Prasanna Karthik; Raman, Shankar; Kamakoti, V.

doi:10.1016/j.comcom.2019.11.034

Cited by 6 publications

(2 citation statements)

References 15 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Moreover, the attack consumes memory and processing during its execution. This resource consumption behavior has encouraged studies to design new DoS attack detection systems and damage reduction mechanisms [6].…”

Section: Introductionmentioning

confidence: 99%

SDToW: A Slowloris Detecting Tool for WMNs

et al. 2020

View full text Add to dashboard Cite

Denial of service (DoS) attacks play a significant role in contemporary cyberspace scenarios. A variety of different DoS attacks pollute networks by exploring various vulnerabilities. A group of DoS called application DoS attacks explore application vulnerabilities. This work presents a tool that detects and blocks an application DoS called Slowloris on wireless mesh networks (WMNs). Our tool, called SDToW, is designed to effectively use the structure of the WMNs to block the Slowloris attack. SDToW uses three different modules to detect and block the attack. Each module has its specific tasks and thus optimizes the overall detection and block efficiency. Our solution blocks the attacker on its first WMN hop, reducing the malicious traffic on the network and avoiding further attacks from the blocked user. The comparison results show that SDToW performs with 66.7% less processing consumption and 89.1% less memory consumption than Snort. Our solution does not limit the number of parallel connections per user. Hence, by avoiding this limitation, SDToW has a lower incidence of false positive errors than Snort.

show abstract

Section: Introductionmentioning

confidence: 99%

SDToW: A Slowloris Detecting Tool for WMNs

et al. 2020

View full text Add to dashboard Cite

show abstract

“…The scale of the answer packet in some protocols is larger than that of a message packet. By abusing this function, attackers may generate a large volume of traffic [25] from a relatively small traffic volume. Abused servers are called amplifiers from this function [26].…”

Section: Figure 4 An Illustration Of the Amplification Attackmentioning

confidence: 99%

Distributed reflection denial of service attack: A critical review

Nuiaa

Manickam

Alsaeedi

2021

IJECE

View full text Add to dashboard Cite

As the world becomes increasingly connected and the number of users grows exponentially and “things” go online, the prospect of cyberspace becoming a significant target for cybercriminals is a reality. Any host or device that is exposed on the internet is a prime target for cyberattacks. A denial-of-service (DoS) attack is accountable for the majority of these cyberattacks. Although various solutions have been proposed by researchers to mitigate this issue, cybercriminals always adapt their attack approach to circumvent countermeasures. One of the modified DoS attacks is known as distributed reflection denial-of-service attack (DRDoS). This type of attack is considered to be a more severe variant of the DoS attack and can be conducted in transmission control protocol (TCP) and user datagram protocol (UDP). However, this attack is not effective in the TCP protocol due to the three-way handshake approach that prevents this type of attack from passing through the network layer to the upper layers in the network stack. On the other hand, UDP is a connectionless protocol, so most of these DRDoS attacks pass through UDP. This study aims to examine and identify the differences between TCP-based and UDP-based DRDoS attacks.

show abstract