Computer Science – Networking and Internet Architecture
Scientific paper
2011-01-14
Computer Science
Networking and Internet Architecture
11 pages, 5 tables. In Proceedings of the First International Conference on Computer Science and Information Technology (CCSIT
Scientific paper
10.1007/978-3-642-17881-8_24
The increasing popularity of web-based applications has led to several critical services being provided over the Internet. This has made it imperative to monitor the network traffic so as to prevent malicious attackers from depleting the resources of the network and denying services to legitimate users. This paper has presented a mechanism for protecting a web-server against a distributed denial of service (DDoS) attack. Incoming traffic to the server is continuously monitored and any abnormal rise in the inbound traffic is immediately detected. The detection algorithm is based on a statistical analysis of the inbound traffic on the server and a robust hypothesis testing framework. While the detection process is on, the sessions from the legitimate sources are not disrupted and the load on the server is restored to the normal level by blocking the traffic from the attacking sources. To cater to different scenarios, the detection algorithm has various modules with varying level of computational and memory overheads for their execution. While the approximate modules are fast in detection and involve less overhead, they have lower detection accuracy. The accurate modules involve complex detection logic and hence involve more overhead for their execution, but they have very high detection accuracy. Simulations carried out on the proposed mechanism have produced results that demonstrate effectiveness of the scheme.
No associations
LandOfFree
A Novel Mechanism for Detection of Distributed Denial of Service Attacks does not yet have a rating. At this time, there are no reviews or comments for this scientific paper.
If you have personal experience with A Novel Mechanism for Detection of Distributed Denial of Service Attacks, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and A Novel Mechanism for Detection of Distributed Denial of Service Attacks will most certainly appreciate the feedback.
Profile ID: LFWR-SCP-O-78446