IEEE International Symposium on Communications and Information Technology, 2004. ISCIT 2004.最新文献_第9页

Distributed denial of service detection using TCP/IP header and traffic measurement analysis 分布式拒绝服务检测使用TCP/IP头和流量测量分析

IEEE International Symposium on Communications and Information Technology, 2004. ISCIT 2004. Pub Date : 2004-10-26 DOI: 10.1109/ISCIT.2004.1412917

Lersak Limwiwatkul, Arnon Rungsawangr

{"title":"Distributed denial of service detection using TCP/IP header and traffic measurement analysis","authors":"Lersak Limwiwatkul, Arnon Rungsawangr","doi":"10.1109/ISCIT.2004.1412917","DOIUrl":"https://doi.org/10.1109/ISCIT.2004.1412917","url":null,"abstract":"Recently, the detection of distributed denial of service (DDoS) and the discovery of DDoS attacking signature used the mean of traffic measurement analysis at protocol level. This technique is not suited to find the signatures of DDoS attack, which is formless. Also, DDoS is in general the combination of different forms of denial of service (DoS). As a result, it is difficult to find the exact signature of attack. Moreover, it is very difficult to distinguish the difference between an unusual high traffic which is caused by the attack, and the flash crowds which normally occur when a huge number of users use the target machine at the same time. In fact, this difference should only be observed from analyzing the data in the packet header. In this paper, we propose to discover the DDoS attacking signature by analyzing the TCP/IP packet header against the well defined rules and conditions, and distinguish the difference between normal and abnormal traffic. We here observe three groups or delegates of DDoS attacking, i.e., ICMP flood, UDP flood and TCP SYN flood, and present convincing preliminary experiments.","PeriodicalId":237047,"journal":{"name":"IEEE International Symposium on Communications and Information Technology, 2004. ISCIT 2004.","volume":"3 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2004-10-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132669658","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 67

An efficient method for tuning kernel parameter of the support vector machine 一种优化支持向量机核参数的有效方法

IEEE International Symposium on Communications and Information Technology, 2004. ISCIT 2004. Pub Date : 2004-10-26 DOI: 10.1109/ISCIT.2004.1413874

R. Debnath, H. Takahashi

引用次数: 15

A novel scheme for symbol timing in OFDM WLAN systems OFDM无线局域网中一种新的符号定时方案

IEEE International Symposium on Communications and Information Technology, 2004. ISCIT 2004. Pub Date : 2004-10-26 DOI: 10.1109/ISCIT.2004.1413793

Wang Yong, G. Hua, A. Bo, L. Qiang

引用次数: 10

Monitoring of causal relationships on data stream using time segment characteristic 利用时间段特征监测数据流的因果关系

IEEE International Symposium on Communications and Information Technology, 2004. ISCIT 2004. Pub Date : 2004-10-26 DOI: 10.1109/ISCIT.2004.1413822

H. Yamahara, H. Shimakawa

引用次数: 1

Information-demanding question answering system 信息密集型问答系统

IEEE International Symposium on Communications and Information Technology, 2004. ISCIT 2004. Pub Date : 2004-10-26 DOI: 10.1109/ISCIT.2004.1413904

C. Montero, K. Araki

引用次数: 3

Addition of explicit congestion notification (ECN) to multipath transmission control protocol (M/TCP) 在多路径传输控制协议(M/TCP)中增加显式拥塞通知(ECN)

IEEE International Symposium on Communications and Information Technology, 2004. ISCIT 2004. Pub Date : 2004-10-26 DOI: 10.1109/ISCIT.2004.1413896

Kultida Rojvihoonchai, Toshihiro Tsukamoto, Hitoshi Aida

引用次数: 0

Optimum switching characteristic of nonlinear optical loop mirror and its application to inline all-optical repeater 非线性光环路镜的最优切换特性及其在直列全光中继器中的应用

IEEE International Symposium on Communications and Information Technology, 2004. ISCIT 2004. Pub Date : 2004-10-26 DOI: 10.1109/ISCIT.2004.1413845

P. Kaewplung, S. Phattarabunchong, P. Thipchatchawanwong

引用次数: 0

A design method for a low power equalization circuit by adaptive bitwidth control 一种基于自适应位宽控制的低功率均衡电路设计方法

IEEE International Symposium on Communications and Information Technology, 2004. ISCIT 2004. Pub Date : 2004-10-26 DOI: 10.1109/ISCIT.2004.1413806

K. Tarumi, Masanori Muroyama, S. Yamaguchi, H. Yasuura

引用次数: 9

Investigation of circulant matrices for reversible LDPC codes 可逆LDPC码的循环矩阵研究

IEEE International Symposium on Communications and Information Technology, 2004. ISCIT 2004. Pub Date : 2004-10-26 DOI: 10.1109/ISCIT.2004.1413866

Anchalee Puengnim

引用次数: 0

QPSK error vector magnitude demodulation with RBF neural network in Rayleigh fading channels 基于RBF神经网络的瑞利衰落信道QPSK误差矢量幅度解调

IEEE International Symposium on Communications and Information Technology, 2004. ISCIT 2004. Pub Date : 2004-10-26 DOI: 10.1109/ISCIT.2004.1413832

S. Lerkvaranyu, Y. Miyanaga

引用次数: 0