Title :
FVBA: A combined statistical approach for low rate degrading and high bandwidth disruptive DDoS attacks detection in ISP domain
Author :
Gupta, B.B. ; Misra, Manoj ; Joshi, R.C.
Author_Institution :
Dept. of Electron. & Comput. Eng., Indian Inst. of Technol., Roorkee, India
Abstract :
Distributed denial of service (DDoS) attack is one of the latest and most powerful threats that have appeared to the Internet. The main aim of such attacks is to prevent access to resources by legitimate users for which they have authorization. In this paper, a novel flow-volume based DDoS detection approach (FVBA) is proposed, which deals with detection of variety of DDoS attacks by monitoring the propagation of abrupt traffic changes inside ISP Domain. Two statistical measures namely volume and flow are used as parameters to detect DDoS attacks. NS-2 network simulator on Linux platform is used as simulation testbed. Different attack scenarios are implemented by varying total number of zombie machines and at different attack strengths to measure effectiveness of proposed approach. Our simulation results show that FVBA inflicts an extremely high detection rate with low false alarm rate.
Keywords :
Internet; security of data; statistical analysis; ISP domain; Internet; Linux platform; NS-2 network simulator; distributed denial of service attack; flow-volume based DDoS detection approach; high bandwidth disruptive DDoS attacks detection; low false alarm rate; propagation monitoring; statistical approach; zombie machines; Authorization; Bandwidth; Computer crime; Degradation; Fluid flow measurement; Monitoring; Telecommunication traffic; Traffic control; Volume measurement; Web and internet services; Distributed Denial-of-Service (DDoS); False Negatives; False Positives; Network Security;
Conference_Titel :
Networks, 2008. ICON 2008. 16th IEEE International Conference on
Conference_Location :
New Delhi
Print_ISBN :
978-1-4244-3805-1
DOI :
10.1109/ICON.2008.4772654
