Protecting Internet services from low-rate DoS attacks

Yajuan Tang; Xiapu Luo; Kow Chuen Chang

Protecting Internet services from low-rate DoS attacks

Yajuan Tang, Xiapu Luo, Kow Chuen Chang

Research output: Chapter in book / Conference proceeding › Conference article published in proceeding or book › Academic research › peer-review

2 Citations (Scopus)

Abstract

Feedback control is an important element in the engineering of stable Internet services. However, feedback channels are vulnerable to various Internet attacks. This paper shows analytically that the recently proposed low-rate denial-of-service (DoS) attacks can degrade Internet services by generating intermittent false feedback signals. The effectiveness of the attacks is evaluated using a control-theoretic approach for a general feedback control system and detailed analysis for a specific system. A nonparametric algorithm based on changes in traffic distribution is proposed for detecting attacks.

Original language	English
Title of host publication	Critical Infrastructure Protection
Publisher	Springer New York LLC
Pages	251-265
Number of pages	15
ISBN (Print)	9780387754611
Publication status	Published - 1 Jan 2008
Event	1st Annual IFIP Working Group 11.10 International Conference on Critical Infrastructure Protection - Hanover, NH, United States Duration: 19 Mar 2007 → 21 Mar 2007

Publication series

Name	IFIP Advances in Information and Communication Technology
Volume	253
ISSN (Print)	1868-4238

Conference

Conference	1st Annual IFIP Working Group 11.10 International Conference on Critical Infrastructure Protection
Country/Territory	United States
City	Hanover, NH
Period	19/03/07 → 21/03/07

Keywords

Countermeasures
Detection
Feedback control
Low-rate DoS attacks

ASJC Scopus subject areas

Information Systems and Management

Cite this

@inproceedings{d4210918e7b0409c80577f725780c1ff,

title = "Protecting Internet services from low-rate DoS attacks",

abstract = "Feedback control is an important element in the engineering of stable Internet services. However, feedback channels are vulnerable to various Internet attacks. This paper shows analytically that the recently proposed low-rate denial-of-service (DoS) attacks can degrade Internet services by generating intermittent false feedback signals. The effectiveness of the attacks is evaluated using a control-theoretic approach for a general feedback control system and detailed analysis for a specific system. A nonparametric algorithm based on changes in traffic distribution is proposed for detecting attacks.",

keywords = "Countermeasures, Detection, Feedback control, Low-rate DoS attacks",

author = "Yajuan Tang and Xiapu Luo and Chang, {Kow Chuen}",

year = "2008",

month = jan,

day = "1",

language = "English",

isbn = "9780387754611",

series = "IFIP Advances in Information and Communication Technology",

publisher = "Springer New York LLC",

pages = "251--265",

booktitle = "Critical Infrastructure Protection",

address = "United States",

note = "1st Annual IFIP Working Group 11.10 International Conference on Critical Infrastructure Protection ; Conference date: 19-03-2007 Through 21-03-2007",

}

Tang, Y, Luo, X & Chang, KC 2008, Protecting Internet services from low-rate DoS attacks. in Critical Infrastructure Protection. IFIP Advances in Information and Communication Technology, vol. 253, Springer New York LLC, pp. 251-265, 1st Annual IFIP Working Group 11.10 International Conference on Critical Infrastructure Protection, Hanover, NH, United States, 19/03/07.

Protecting Internet services from low-rate DoS attacks. / Tang, Yajuan; Luo, Xiapu; Chang, Kow Chuen.
Critical Infrastructure Protection. Springer New York LLC, 2008. p. 251-265 (IFIP Advances in Information and Communication Technology; Vol. 253).

Research output: Chapter in book / Conference proceeding › Conference article published in proceeding or book › Academic research › peer-review

TY - GEN

T1 - Protecting Internet services from low-rate DoS attacks

AU - Tang, Yajuan

AU - Luo, Xiapu

AU - Chang, Kow Chuen

PY - 2008/1/1

Y1 - 2008/1/1

N2 - Feedback control is an important element in the engineering of stable Internet services. However, feedback channels are vulnerable to various Internet attacks. This paper shows analytically that the recently proposed low-rate denial-of-service (DoS) attacks can degrade Internet services by generating intermittent false feedback signals. The effectiveness of the attacks is evaluated using a control-theoretic approach for a general feedback control system and detailed analysis for a specific system. A nonparametric algorithm based on changes in traffic distribution is proposed for detecting attacks.

AB - Feedback control is an important element in the engineering of stable Internet services. However, feedback channels are vulnerable to various Internet attacks. This paper shows analytically that the recently proposed low-rate denial-of-service (DoS) attacks can degrade Internet services by generating intermittent false feedback signals. The effectiveness of the attacks is evaluated using a control-theoretic approach for a general feedback control system and detailed analysis for a specific system. A nonparametric algorithm based on changes in traffic distribution is proposed for detecting attacks.

KW - Countermeasures

KW - Detection

KW - Feedback control

KW - Low-rate DoS attacks

UR - http://www.scopus.com/inward/record.url?scp=84902304366&partnerID=8YFLogxK

M3 - Conference article published in proceeding or book

SN - 9780387754611

T3 - IFIP Advances in Information and Communication Technology

SP - 251

EP - 265

BT - Critical Infrastructure Protection

PB - Springer New York LLC

T2 - 1st Annual IFIP Working Group 11.10 International Conference on Critical Infrastructure Protection

Y2 - 19 March 2007 through 21 March 2007

ER -

Protecting Internet services from low-rate DoS attacks

Abstract

Publication series

Conference

Keywords

ASJC Scopus subject areas

Other files and links

Fingerprint

Cite this