Automated immunization against denial-of-service attacks featuring stochastic packet inspection

Authors:
Jongho Kim;Jaeik Cho;Jongsub Moon
Affiliations:
Center for Information Security Technologies (CIST), Korea University;Center for Information Security Technologies (CIST), Korea University;Center for Information Security Technologies (CIST), Korea University
Venue:
GCC'05 Proceedings of the 4th international conference on Grid and Cooperative Computing
Year:
2005

Citing 3
Cited 0

Efficient packet marking for large-scale IP traceback

Proceedings of the 9th ACM conference on Computer and communications security
An Aggregation Technique for Traffic Monitoring

SAINT-W '02 Proceedings of the 2002 Symposium on Applications and the Internet (SAINT) Workshops
Hop-count filtering: an effective defense against spoofed DDoS traffic

Proceedings of the 10th ACM conference on Computer and communications security

Quantified Score

Hi-index	0.00

Visualization

Abstract

Denial of Service attacks are easy to implement, difficult to trace, and inflict serious damage on target networks in a short amount of time. This model eliminates attack packets from a router using probability packet inspection as an automated defense against DoS. The detection module begins with an initial probability for inspecting packets. As an attack commences and the occupied bandwidth of the channel increases, the detection module optimizes the inspection probability.