Launching Low-Rate DoS Attacks with Cache-Enabled WiFi Offloading

Low-rate denial of service (LDoS) attacks reduce the quality of network service by sending periodical packet bursts to the bottleneck routers. It is difficult to detect by counter-DoS mechanisms due to its stealthy and low average attack traffic behavior. In this paper, we propose an anomaly detection method based on adaptive fusion of multiple features (MAF-ADM) for LDoS attacks. This study is based on the fact that the time-frequency joint distribution of the legitimate transmission control protocol (TCP) traffic would be changed under LDoS attacks. Several statistical metrics of the time-frequency joint distribution are chosen to generate isolation trees, which can simultaneously reflect the anomalies in time domain and frequency domain. Then we calculate anomaly score by fusing the results of all isolation trees according to their ability to isolate samples containing LDoS attacks. Finally, the anomaly score is smoothed by weighted moving average algorithm to avoid errors caused by noise in the network. Experimental results of Network Simulator 2 (NS2), testbed, and public datasets (WIDE2018 and LBNL) demonstrate that this method does detect LDoS attacks effectively with lower false negative rate.

Download Full-text

Low-Rate DoS Attacks, Detection, Defense, and Challenges: A Survey

IEEE Access ◽

10.1109/access.2020.2976609 ◽

2020 ◽

Vol 8 ◽

pp. 43920-43943 ◽

Cited By ~ 3

Author(s):

Wu Zhijun ◽

Li Wenjing ◽

Liu Liang ◽

Yue Meng

Keyword(s):

Dos Attacks ◽

Low Rate

Download Full-text

A Proactive Test Based Differentiation Technique to Mitigate Low Rate DoS Attacks

2007 16th International Conference on Computer Communications and Networks ◽

10.1109/icccn.2007.4317889 ◽

2007 ◽

Cited By ~ 4

Author(s):

Amey Shevtekar ◽

Nirwan Ansari

Keyword(s):

Dos Attacks ◽

Low Rate ◽

Differentiation Technique

Download Full-text

A Survey Paper on an On-Line Intrusion Detection Approach to Identify Low-Rate Dos Attacks

International Journal of Science and Research (IJSR) ◽

10.21275/v5i1.nov152616 ◽

2016 ◽

Vol 5 (1) ◽

pp. 163-165

Keyword(s):

Intrusion Detection ◽

Dos Attacks ◽

Survey Paper ◽

Detection Approach ◽

On Line ◽

Low Rate

Download Full-text

Modeling and Simulation of Low Rate of Denial of Service Attacks

Applied Mechanics and Materials ◽

10.4028/www.scientific.net/amm.484-485.1063 ◽

2014 ◽

Vol 484-485 ◽

pp. 1063-1066

Author(s):

Kui Liang Xia

Keyword(s):

High Efficiency ◽

Denial Of Service ◽

Research Work ◽

Attack Detection ◽

Detection Methods ◽

Dos Attacks ◽

Denial Of Service Attack ◽

Service Attack ◽

User Data ◽

Low Rate

The low-rate denial of service attack is more applicable to the network in recent years as a means of attack, which is different from the traditional field type DoS attacks at the network end system or network using adaptive mechanisms exist loopholes flow through the low-rate periodic attacks on the implementation of high-efficiency attacked by an intruder and not be found, resulting in loss of user data or a computer deadlock. LDos attack since there has been extensive attention of researchers, the attack signature analysis and detection methods to prevent network security have become an important research topic. Some have been proposed for the current attacks were classified LDoS describe and model, and then in NS-2 platform for experimental verification, and then LDoS attack detection to prevent difficulties are discussed and summarized for the future such attacks detection method research work to provide a reference.

Download Full-text

Do Low Rate DoS Attacks Affect QoS Sensitive VoIP Traffic?

10.1109/icc.2006.255089 ◽

2006 ◽

Cited By ~ 5

Author(s):

Amey Shevtekar ◽

Nirwan Ansari

Keyword(s):

Dos Attacks ◽

Low Rate

Download Full-text

A Mathematical Model for Randomly-Occurring Low-Rate Denial of Service Attacks

International Journal of Computer and Communication Technology ◽

10.47893/ijcct.2014.1215 ◽

2014 ◽

pp. 27-31

Author(s):

Nahush Chaturvedi ◽

Hrushikesha Mohanty

Keyword(s):

Mathematical Model ◽

Continuous Time ◽

Transmission Control Protocol ◽

Denial Of Service ◽

Denial Of Service Attacks ◽

Continuous Time Markov Chain ◽

Dos Attacks ◽

Transmission Control ◽

Abnormal State ◽

Low Rate

Low rate attacks, or Denial-of-Service (DoS) attacks of the occasional misbehaviour, can throttle the throughput of robust timed-protocols, like the Transmission Control Protocol(TCP), by creating either periodic or exponentially distributed outages, or transmission disruptions. Such attacks are as effective as full-fledged DoS with high undetectability of the misbehaving network entity. In this paper, we present a mathematical model of Low-Rate. randomly occurring, Denial-of-Service attacks. By viewing the process as a twostate Continuous-Time Markov Chain(CTMC), we have successfully computed the transition and state probabilities of a compromised network entity that can behave normally, while in the normal state. and abnormally, when in the abnormal state.

Download Full-text