An Adaptive Approach for Defending against DDoS Attacks
Authors:
Open Access
- 1 January 2010
- journal article
- research article
- Published by Wiley in Mathematical Problems in Engineering
- Vol. 2010 (1)
Abstract
In various network attacks, the Distributed Denial‐of‐Service (DDoS) attack is a severe threat. In order to deal with this kind of attack in time, it is necessary to establish a special type of defense system to change strategy dynamically against attacks. In this paper, we introduce an adaptive approach, which is used for defending against DDoS attacks, based on normal traffic analysis. The approach can check DDoS attacks and adaptively adjust its configurations according to the network condition and attack severity. In order to insure the common users to visit the victim server that is being attacked, we provide a nonlinear traffic control formula for the system. Our simulation test indicates that the nonlinear control approach can prevent the malicious attack packets effectively while making legitimate traffic flows arrive at the victim.Keywords
Funding Information
- National Natural Science Foundation of China (60573125, 60873264, 60703112, J07WJ29, 2009053)
- National Natural Science Foundation of China (60573125, 60873264, 60703112, J07WJ29, 2009053)
- National Natural Science Foundation of China (60573125, 60873264, 60703112, J07WJ29, 2009053)
- Shandong Provincial Education Department (60573125, 60873264, 60703112, J07WJ29, 2009053)
- East China Normal University (60573125, 60873264, 60703112, J07WJ29, 2009053)
This publication has 39 references indexed in Scilit:
- Generation of teletraffic of generalized Cauchy typePhysica Scripta, 2010
- Modeling autocorrelation functions of long-range dependent teletraffic series based on optimal approximation in Hilbert space—A further studyApplied Mathematical Modelling, 2007
- Wavelet based Denial-of-Service detectionComputers & Security, 2006
- PacketScore: A Statistics-Based Packet Filtering Scheme against Distributed Denial-of-Service AttacksIEEE Transactions on Dependable and Secure Computing, 2006
- Change trend of averaged Hurst parameter of traffic under DDOS flood attacksComputers & Security, 2006
- Inferring Internet denial-of-service activityACM Transactions on Computer Systems, 2006
- A generalized Cauchy process and its application to relaxation phenomenaJournal of Physics A: General Physics, 2006
- An approach to reliably identifying signs of DDOS flood attacks based on LRD traffic pattern recognitionComputers & Security, 2004
- A taxonomy of DDoS attack and DDoS defense mechanismsACM SIGCOMM Computer Communication Review, 2004
- Practical network support for IP tracebackACM SIGCOMM Computer Communication Review, 2000