An on-line intrusion detection approach to identify low-rate DoS attacks

This paper addresses the problem of detection of "Slow" Denial of Service attacks. The problem is particularly challenging in virtue of the reduced amount of bandwidth generated by the attacks. A novel detection method is presented, which analyzes specific spectral features of traffic over...

Full description

Saved in:
Bibliographic Details
Main Authors: Aiello, M., Cambiaso, E., Mongelli, M., Papaleo, G.
Format: Conference Proceeding
Language:English
Subjects:
anomaly detection
Computer crime
denial of service
Feature extraction
fourier transform
Measurement
Monitoring
Mutual information
Protocols
Servers
slow dos attack
Online Access:Request full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:This paper addresses the problem of detection of "Slow" Denial of Service attacks. The problem is particularly challenging in virtue of the reduced amount of bandwidth generated by the attacks. A novel detection method is presented, which analyzes specific spectral features of traffic over small time horizons. No packet inspection is required. Extrapolated data refer to real traffic traces, elaborated over the Local Area Network of our Institute. Different kinds of attacks have been considered as well. The results show how the proposed method is reliable and applicable in many other contexts.
ISSN:1071-6572
2153-0742
DOI:10.1109/CCST.2014.6987039