IP Traceback for Flooding attacks on Internet Threat Monitors (ITM) Using Honeypots

The Internet Threat Monitoring (ITM) is an efficient monitoring system used globally to measure, detect, characterize and track threats such as denial of service (DoS) and distributed Denial of Service (DDoS) attacks and worms. . To block the monitoring system in the internet the attackers are targe...

Full description

Saved in:
Bibliographic Details
Published in:arXiv.org 2012-02
Main Authors: Prasad, K Munivara, A Rama Mohan Reddy, Jyothsna, V
Format: Article
Language:English
Subjects:
Cybersecurity
Data structures
Denial of service attacks
Exhaust systems
Information theory
Internet
IP (Internet Protocol)
Malware
Monitoring
Monitors
Security management
Traffic information
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:The Internet Threat Monitoring (ITM) is an efficient monitoring system used globally to measure, detect, characterize and track threats such as denial of service (DoS) and distributed Denial of Service (DDoS) attacks and worms. . To block the monitoring system in the internet the attackers are targeted the ITM system. In this paper we address the flooding attack of DDoS against ITM monitors to exhaust the network resources, such as bandwidth, computing power, or operating system data structures by sending the malicious traffic. We propose an information-theoretic frame work that models the flooding attacks using Botnet on ITM. One possible way to counter DDoS attacks is to trace the attack sources and punish the perpetrators. we propose a novel traceback method for DDoS using Honeypots. IP tracing through honeypot is a single packet tracing method and is more efficient than commonly used packet marking techniques.
ISSN:2331-8422
DOI:10.48550/arxiv.1202.4530