Protecting internet services from low-rate DoS attacks

Yajuan Tang; Xiapu Luo; Kow Chuen Chang

doi:10.1007/978-0-387-75462-8_18

Protecting internet services from low-rate DoS attacks

Yajuan Tang, Xiapu Luo, Kow Chuen Chang

Research output: Chapter in book / Conference proceeding › Conference article published in proceeding or book › Academic research › peer-review

4 Citations (Scopus)

Abstract

Feedback control is an important element in the engineering of stable 'Internet services. However, feedback channels are vulnerable to various Internet attacks. This paper shows analytically that the recently proposed low-rate denial-of-service (DoS) attacks can degrade Internet services by generating intermittent false feedback signals. The effectiveness of the attacks is evaluated using a control-theoretic approach for a general feedback control system and detailed analysis for a specific system. A nonparametric algorithm based on changes in traffic distribution is proposed for detecting attacks.

Original language	English
Title of host publication	Critical Infrastructure Protection
Pages	251-265
Number of pages	15
DOIs	https://doi.org/10.1007/978-0-387-75462-8_18
Publication status	Published - 22 Nov 2007

Publication series

Name	IFIP International Federation for Information Processing
Volume	253
ISSN (Print)	1571-5736

Keywords

Countermeasures
Detection
Feedback control
Low-rate DoS attacks

ASJC Scopus subject areas

Information Systems and Management

More information

10.1007/978-0-387-75462-8_18

Cite this

@inproceedings{e940cd32796844a8a00bbeb9e80cb2f1,

title = "Protecting internet services from low-rate DoS attacks",

abstract = "Feedback control is an important element in the engineering of stable 'Internet services. However, feedback channels are vulnerable to various Internet attacks. This paper shows analytically that the recently proposed low-rate denial-of-service (DoS) attacks can degrade Internet services by generating intermittent false feedback signals. The effectiveness of the attacks is evaluated using a control-theoretic approach for a general feedback control system and detailed analysis for a specific system. A nonparametric algorithm based on changes in traffic distribution is proposed for detecting attacks.",

keywords = "Countermeasures, Detection, Feedback control, Low-rate DoS attacks",

author = "Yajuan Tang and Xiapu Luo and Chang, {Kow Chuen}",

year = "2007",

month = nov,

day = "22",

doi = "10.1007/978-0-387-75462-8_18",

language = "English",

isbn = "038775461X",

series = "IFIP International Federation for Information Processing",

pages = "251--265",

booktitle = "Critical Infrastructure Protection",

}

Protecting internet services from low-rate DoS attacks. / Tang, Yajuan; Luo, Xiapu; Chang, Kow Chuen.

Critical Infrastructure Protection. 2007. p. 251-265 (IFIP International Federation for Information Processing; Vol. 253).

Research output: Chapter in book / Conference proceeding › Conference article published in proceeding or book › Academic research › peer-review

TY - GEN

T1 - Protecting internet services from low-rate DoS attacks

AU - Tang, Yajuan

AU - Luo, Xiapu

AU - Chang, Kow Chuen

PY - 2007/11/22

Y1 - 2007/11/22

N2 - Feedback control is an important element in the engineering of stable 'Internet services. However, feedback channels are vulnerable to various Internet attacks. This paper shows analytically that the recently proposed low-rate denial-of-service (DoS) attacks can degrade Internet services by generating intermittent false feedback signals. The effectiveness of the attacks is evaluated using a control-theoretic approach for a general feedback control system and detailed analysis for a specific system. A nonparametric algorithm based on changes in traffic distribution is proposed for detecting attacks.

AB - Feedback control is an important element in the engineering of stable 'Internet services. However, feedback channels are vulnerable to various Internet attacks. This paper shows analytically that the recently proposed low-rate denial-of-service (DoS) attacks can degrade Internet services by generating intermittent false feedback signals. The effectiveness of the attacks is evaluated using a control-theoretic approach for a general feedback control system and detailed analysis for a specific system. A nonparametric algorithm based on changes in traffic distribution is proposed for detecting attacks.

KW - Countermeasures

KW - Detection

KW - Feedback control

KW - Low-rate DoS attacks

UR - http://www.scopus.com/inward/record.url?scp=36248970694&partnerID=8YFLogxK

U2 - 10.1007/978-0-387-75462-8_18

DO - 10.1007/978-0-387-75462-8_18

M3 - Conference article published in proceeding or book

SN - 038775461X

SN - 9780387754611

T3 - IFIP International Federation for Information Processing

SP - 251

EP - 265

BT - Critical Infrastructure Protection

ER -

Protecting internet services from low-rate DoS attacks

Abstract

Publication series

Keywords

ASJC Scopus subject areas

More information

Other files and links

Fingerprint

Cite this