Abstract
Currently there is very few data that can describe the whole profile of a DDoS attack. In this paper, the active DDoS defense system deploys a number of sub-systems, such as Flexible Deterministic Packet Marking (FDPM) and Mark-Aided Distributed Filtering (MADF). In addition, two DDoS tools, TFN2K and Trinoo, are adopted and integrated into SSFNet to create virtual DDoS networks to simulate the attacks. Then, simulation experiments are used to evaluate the performance of the active DDoS defense system. At last, we set up a model to describe the interactions between DDoS attack and defense party, which allows us to have a deep insight of the interactions between the attack and defense parties. Experiment results shows that the model can precisely estimate the defense effectiveness of the system when it encounters attacks.
This work is supported partly by national natural science grant (50674077), Fujian natural science grant (A0410004), Guangdong natural science grant (06029667), NCETXMU 2004 program (0000-X07116), and Xiamen University research foundation (0630-E23011).
This is a preview of subscription content, log in via an institution to check access.
Preview
Unable to display preview. Download preview PDF.
Similar content being viewed by others
References
Mirkovic, J., Reiher, P.: A Source-End Defense against Flooding Denial-of-Service Attacks. IEEE Transactions on Dependable and Secure Computing 2(3), 216–232 (2005)
Keromytis, A.D., Misra, V., Rubenstein, D.: SOS: An Architecture for Mitigating DDoS Attacks. IEEE Journal on Selected Areas in Communications 22(1), 176–188 (2004)
Xiang, Y., Zhou, W., Chowdhury, M.: A Survey of Active and Passive Defence Mechanisms against DDoS Attacks, Technical Report, TR C04/02, School of Information Technology, Deakin University, Australia (2004)
SSFNet, Scalable Simulation Framework (2005), http://www.ssfnet.org
Chen, R.C., Shi, W., Zhou, W.: Simulation of Distributed Denial of ServiceAttacks (Technical Report). In: TR C04/09, School of Information Technology, Deakin University, Australia (2004)
Xiang, Y., Zhou, W.: Mark-Aided Distributed Filtering by Using Neural Network for DDoS Defense. In: IEEE Global Telecommunications Conference 2005 (IEEE GLOBECOM 2005), IEEE Computer Society Press, Los Alamitos (2005)
Dittrich, D.: Distributed Denial of Service (DDoS) Attacks/tools (2005), http://staff.washington.edu/dittrich/misc/ddos/
Skitter project, Cooperative Association for Internet Data Analysis (CAIDA), http://www.caida.org/tools/measurement/skitter/
Xiang, Y., Zhou, W., Rough, J.: Trace IP Packets by Flexible Deterministic Packet Marking (FDPM) In: Proceedings of IEEE International Workshop on IP Operations & Management IPOM, pp. 246–252 (2004)
Yaar, A., Perrig, A., Song, D.: Pi: A Path Identification Mechanism to Defend against DDoS Attacks. In: 2003 IEEE Symposium on Security and Privacy, pp. 93–107 (2003)
Sung, M., Xu, J.: IP Traceback-based Intelligent Packet Filtering: A Novel Technique for Defending Against Internet DDoS Attacks. IEEE Transactions on Parallel and Distributed Systems 14(9), 861–872 (2003)
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2007 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Li, Z., Xiang, Y., He, D. (2007). Simulation and Analysis of DDoS in Active Defense Environment. In: Wang, Y., Cheung, Ym., Liu, H. (eds) Computational Intelligence and Security. CIS 2006. Lecture Notes in Computer Science(), vol 4456. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-540-74377-4_92
Download citation
DOI: https://doi.org/10.1007/978-3-540-74377-4_92
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-74376-7
Online ISBN: 978-3-540-74377-4
eBook Packages: Computer ScienceComputer Science (R0)