- 期刊
Increasing Accuracy and Reliability of IP Traceback for DDoS Attack Using Completion Condition
並列摘要
Probabilistic Packet Marking (PPM) is one of the most promising schemes for performing IP Traceback. PPM reconstructs the attack graph in order to trace back to the attackers. Finding the Completion Condition Number (i.e. precise number of packets required to complete the traceback) is very important. Without a proper completion-condition, we might reconstruct a wrong attack-graph and attackers can evade detection. One presently being used works only for a single attacker based DoS attack and has an accuracy of just around 70%. We propose a new Completion Condition Number which has an accuracy of 95% and it works even for the multiple attacker based DDoS attacks. We confirm the results using detailed theoretical analysis and extensive simulation work. To the best of our knowledge, we are the first to apply the concept of Completion Condition Number to increase the reliability of IP Traceback for the DDoS attacks.
被引用紀錄
延伸閱讀
- Chen, T. Y. (2006). An Effective Intrusion Prevention System to Protect Multi-Services against TCP SYN Flooding DDoS Attacks [master's thesis, National Tsing Hua University]. Airiti Library. https://doi.org/10.6843/NTHU.2006.00507
- Galyaev, V., Zykova, E., Repin, D., & Bokov, D. (2019). Recent Trends in Development of DDoS Attacks and Protection Systems Against Them. International Journal of Network Security, 21(4), 635-647. https://doi.org/10.6633/IJNS.201907_21(4).13
- Li, M., & Li, M. (2010). An Adaptive Approach for Defending against DDoS Attacks. Mathematical Problems in Engineering, 2010(), 571-585-136. https://doi.org/10.1155/2010/570940
- Suganthi, S., & Aramudhan, M. (2015). Secure Framework for DDoS Attack Detection and Defense in IEEE 802.11 WLAN. Research Journal of Applied Sciences, Engineering and Technology, 10(9), 1012-1020. https://www.airitilibrary.com/Article/Detail?DocID=20407467-201507-201509110021-201509110021-1012-1020
- Chan, Y. K. (2004). Investigation of a router-based approach to defense against Distributed Denial-of-Service (DDoS) attack [master's thesis, The University of Hong Kong]. Airiti Library. https://www.airitilibrary.com/Article/Detail?DocID=U0029-1812201200004547