Earticle

초록

영어

Distributed Denial-of-Service (DDoS) attacks pose a serious threat to Internet security. Traditional detection methods rely on passively detecting an attacking signature and are inaccurate in the early stages of an attack. In this paper, we propose a novel defense mechanism that makes use of the edge routers that connect end hosts to the Internet to store and detect whether the outgoing SYN, ACK or incoming SYN/ACK segment is valid. This is accomplished by maintaining a mapping table of the outgoing SYN segments and incoming SYN/ACK segments and establishing the destination and source IP address database. From the result of simulation, the approach presented in this paper yields accurate DDoS alarms at early stage.

목차

Abstract
 1. Introduction
 2. Related works
 3. TCP-based DDoS attack
 4. Defense mechanism
  4.1. Storage module
  4.2. Inspection module
  4.3. Main process
 5. Experiment
 6. Conclusion and future work
 7. Acknowledgements
 8. References

저자

• Yun Ling [ Zhejiang Gongshang University, Hangzhou, Zhejiang, P. R. China ]
• Ye Gu [ Zhejiang Gongshang University, Hangzhou, Zhejiang, P. R. China ]
• Guiyi Wei [ Zhejiang Gongshang University, Hangzhou, Zhejiang, P. R. China ]

참고문헌

발행기관

간행물

표지보기 관심저널 등록

• 간행물명

  International Journal of Security and Its Applications

• 간기

  격월간

• pISSN

  1738-9976

• 수록기간

  2008~2016

• 등재여부

  SCOPUS

• 십진분류

  KDC 505 DDC 605