International Journal of Network Security & Its Applications (IJNSA) - ERA, WJCI Indexed

International Journal of Network Security & Its Applications (IJNSA) - ERA, WJCI Indexed

ISSN: 0974 - 9330 (Online); 0975 - 2307 (Print)

Webpage URL: https://airccse.org/journal/ijnsa.html

A Resource-Efficient Collaborative System for DDOS Attack Detection and Victim Identification

Fei Wang, Zhenxing Li and Xiaofeng Wang, National University of Defense Technology, China

Abstract

Distributed Denial of Service (DDoS) attacks seriously threaten network security. Most countermeasures perceive attacks after the damage has been down. This paper thus focuses on the detection of DDoS attacks, and more importantly, victim identification as early as possible, so asto promote attack reaction in time. We present a resource-efficient collaborative DDoS detection system, called F-LOW. Profiting from bitwise-based hash function, split sketch, and lightweight IP reconstruction, F-LOW can defeat shortcomings of principle component analysis (PCA) and regular sketch. With a certain number of distributed detection nodes, F-LOW can detect DDoS attacks and identify victim IPs before the attack traffic arrives victim network. Outperforming previous work, our system fits all Four-LOW properties, low profile, low dimensional, low overhead and low transmission, of a promising DDoS countermeasure. Through simulation and theoretical analysis, we demonstrate such properties and remarkable efficacy of our approach in DDoS mitigation.

Keywords

DDoS detection, victim identification, principle component analysis, split sketch, bitwise-based hash

Abstract URL: http://aircconline.com/abstract/ijnsa/v14n6/14622ijnsa02.html

Original Source URL: https://aircconline.com/ijnsa/V14N6/14622ijnsa02.pdf

Volume URL: https://airccse.org/journal/jnsa22_current.html