Simulation and Analysis of DDoS in Active Defense Environment

Authors:
Zhongwen Li;Yang Xiang;Dongsheng He
Affiliations:
Information Science and Technology College, Xiamen University, Xiamen 361005, China;School of Management and Information Systems, Faculty of Business and Informatics Central, Queensland University, Rockhampton, Queensland 4702, Australia;School of Architecture Engineering, Southwest Petroleum University, Xindu 610500, China
Venue:
Computational Intelligence and Security
Year:
2007

Citing 4
Cited 1

Pi: A Path Identification Mechanism to Defend against DDoS Attacks

SP '03 Proceedings of the 2003 IEEE Symposium on Security and Privacy
D-WARD: A Source-End Defense against Flooding Denial-of-Service Attacks

IEEE Transactions on Dependable and Secure Computing
SOS: an architecture for mitigating DDoS attacks

IEEE Journal on Selected Areas in Communications
IP traceback-based intelligent packet filtering: a novel technique for defending against Internet DDoS attacks

IEEE Transactions on Parallel and Distributed Systems

Towards a bayesian network game framework for evaluating DDoS attacks and defense

Proceedings of the 2012 ACM conference on Computer and communications security

Quantified Score

Hi-index	0.00

Visualization

Abstract

Currently there is very few data that can describe the whole profile of a DDoS attack. In this paper, the active DDoS defense system deploys a number of sub-systems, such as Flexible Deterministic Packet Marking (FDPM) and Mark-Aided Distributed Filtering (MADF). In addition, two DDoS tools, TFN2K and Trinoo, are adopted and integrated into SSFNet to create virtual DDoS networks to simulate the attacks. Then, simulation experiments are used to evaluate the performance of the active DDoS defense system. At last, we set up a model to describe the interactions between DDoS attack and defense party, which allows us to have a deep insight of the interactions between the attack and defense parties. Experiment results shows that the model can precisely estimate the defense effectiveness of the system when it encounters attacks.