Abstract
Attentions are increasingly paid to reliable detection of intrusions as can be seen from [1, 2]. As a matter of fact, the challenge is to develop a system that detects close to 100 percent of attacks with minimal false positives. We are still far from achieving this goal [1, p. 28]. In this regard, our early work discusses a reliable approach regarding detection of signs of distributed denial-of-service (DDOS) attacks [3], where arrival time series of a protected site is specifically featured by autocorrelation function. As a supplementary to [3], this article specifically focuses on abstractly discussing probability principle involved in [3] such that the present probability principle of detection is flexible in practical applications. In addition to this, the selection of a threshold for a given detection probability is also given.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
Similar content being viewed by others
References
Kemmerer, R.A., Vigna, G.: Intrusion detection: a brief history and overview. Supplement to IEEE Computer (IEEE Security & Privacy) 35(4), 27–30 (2002)
Leach, J.: TBSE an engineering approach to the design of accurate and reliable security systems. Computer & Security 23(1), 22–28 (2004)
Li, M.: An approach to reliably identifying signs of DDOS flood attacks based on LRD traffic pattern recognition. Computer & Security 23(7), 549–558 (2004)
Wood, C.C.: Why information security is now multi-disciplinary, multi-departmental, and multi-organizational in nature. Computer Fraud & Security 2004(1), 16–17 (2004)
Li, M., et al.: Modeling autocorrelation function of self-similar teletraffic in communication networks based on optimal approximation in Hilbert space. Applied Mathematical Modelling 27(3), 155–168 (2003)
Li, M., Chi, C.-H.: A correlation based computational model for synthesizing long-range dependent data. Journal of the Franklin Institute 340(6/7), 503–514 (2003)
Li, M., et al.: Correlation form of timestamp increment sequences of self-similar traffic on Ethernet. Electronics Letters 36(19), 1168–1169 (2000)
Adas, A.: Traffic models in broadband networks. IEEE Communications Magazine 35(7), 82–89 (1997)
Michiel, H., Laevens, K.: Teletraffic engineering in a broad-band era. Proc. of IEEE 85(12), 2007–2033 (1997)
Willinger, W., Paxson, V.: Where mathematics meets the Internet. Notices of the American Mathematical Society 45(8), 961–970 (1998)
Levy-Vehel, J., Lutton, E., Tricot, C. (eds.): Fractals in Engineering. Springer, Heidelberg (1997)
Adler, R.J., Feldman, R.E., Taqqu, M.S.: A Practical Guide to Heavy Tails: Statistical Techniques and Applications. Birkhauser, Boston (1998)
Garber, L.: Denial-of-service attacks rip the Internet. IEEE Computer 33(4), 12–17 (2000)
Amoroso, E.G.: Intrusion Detection: An Introduction to Internet Surveillance, Correlation, Traps, Trace Back, and Response. Intrusion.Net Book (1999)
Raymond, J.: Traffic analysis: protocols, attacks, design issues and open problems. In: Federrath, H. (ed.) Designing Privacy Enhancing Technologies. LNCS, vol. 2009, pp. 10–29. Springer, Heidelberg (2001)
Griffel, D.H.: Applied Functional Analysis. Ellis Horwood, John Wiley & Sons (1981)
Bendat, J.S., Piersol, A.G.: Random Data: Analysis and Measurement Procedure, 3rd edn. John Wiley & Sons, Chichester (2000)
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2004 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Li, M., Liu, J., Long, D. (2004). Probability Principle of a Reliable Approach to Detect Signs of DDOS Flood Attacks. In: Liew, KM., Shen, H., See, S., Cai, W., Fan, P., Horiguchi, S. (eds) Parallel and Distributed Computing: Applications and Technologies. PDCAT 2004. Lecture Notes in Computer Science, vol 3320. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-540-30501-9_114
Download citation
DOI: https://doi.org/10.1007/978-3-540-30501-9_114
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-24013-6
Online ISBN: 978-3-540-30501-9
eBook Packages: Computer ScienceComputer Science (R0)