Roaming Honeypots for Mitigating Service-Level Denial-of-Service Attacks

Authors:
Sherif M. Khattab;Chatree Sangpachatanaruk;Daniel Moss;Rami Melhem;Taieb Znati
Affiliations:
-;-;-;-;-
Venue:
ICDCS '04 Proceedings of the 24th International Conference on Distributed Computing Systems (ICDCS'04)
Year:
2004

Citing 0
Cited 13

Design and Analysis of an Adaptive, Global Strategy for Detecting and Mitigating Distributed DoS Attacks in GRID Environments

ANSS '06 Proceedings of the 39th annual Symposium on Simulation
Honeypot back-propagation for mitigating spoofing distributed Denial-of-Service attacks

Journal of Parallel and Distributed Computing - Special issue: Security in grid and distributed systems
Empirical study of tolerating denial-of-service attacks with a proxy network

SSYM'05 Proceedings of the 14th conference on USENIX Security Symposium - Volume 14
On the Design and Performance of an Adaptive, Global Strategy for Detecting and Mitigating Distributed DoS Attacks in GRID and Collaborative Workflow Environments

Simulation
Information Assurance: Dependability and Security in Networked Systems

Information Assurance: Dependability and Security in Networked Systems
Network Security: Know It All: Know It All

Network Security: Know It All: Know It All
An auto-responsive honeypot architecture for dynamic resource allocation and QoS adaptation in DDoS attacked networks

Computer Communications
Use of Deception to Improve Client Honeypot Detection of Drive-by-Download Attacks

FAC '09 Proceedings of the 5th International Conference on Foundations of Augmented Cognition. Neuroergonomics and Operational Neuroscience: Held as Part of HCI International 2009
A2M: Access-Assured Mobile Desktop Computing

ISC '09 Proceedings of the 12th International Conference on Information Security
Securing Bluetooth-based payment system using honeypot

IIT'09 Proceedings of the 6th international conference on Innovations in information technology
Honeypot back-propagation for mitigating spoofing distributed denial-of-service attacks

IPDPS'06 Proceedings of the 20th international conference on Parallel and distributed processing
Thwarting DDoS attacks in grid using information divergence

Future Generation Computer Systems
Dynamic Binary User-Splits to Protect Cloud Servers from DDoS Attacks

Proceedings of the Second International Conference on Innovative Computing and Cloud Computing

Quantified Score

Hi-index	0.00

Visualization

Abstract

Honeypots have been proposed to act as traps for malicious attackers. However, because of their deployment at fixed (thus detectable) locations and on machines other thanthe ones they are supposed to protect, honeypots can be avoided by sophisticated attacks. We propose roaming honeypots, a mechanism that allows the locations of honeypots to be unpredictable, continuously changing, and disguised within a server pool. A (continuously changing) subset of the servers is active and providing service, while the rest of the server pool is idle and acting as honeypots.We utilize our roaming honeypots scheme to mitigate the effects of service-level DoS attacks, in which many attack machines acquire service from a victim server at a high rate, against back-end servers of private services. The roaming honeypots scheme detects and filters attack traffic from outside a firewall (external attacks), and also mitigates attacks from behind a firewall (internal attacks) by dropping all connections when a server switches from acting as a honeypot into being active. Through ns-2 simulations, we show the effectiveness of our roaming honeypots scheme. In particular, against external attacks, our roaming honeypots scheme provides service response time that is independent of attack load for a fixed number of attack machines.