Detecting reflector attacks by sharing beliefs

Author

Peng, Tao ; Leckie, Christopher ; Ramamohanarao, Kotagiri

Author_Institution

Dept. of Electr. & Electron. Eng., Melbourne Univ., Parkville, Vic., Australia

Volume

3

fYear

2003

fDate

1-5 Dec. 2003

Firstpage

1358

Abstract

In this paper, we present a distributed approach to detecting a type of distributed denial of service attack known as reflector attacks. In our approach, every potential reflector monitors the incoming packets and broadcasts a warning message to other potential reflectors if any abnormal traffic is observed. The warning message contains a description of the abnormal traffic it has observed. A detection decision can be made based on the information from multiple potential reflectors. We present a learning algorithm to decide when to broadcast the warning message.

Keywords

IP networks; packet switching; telecommunication security; telecommunication traffic; transport protocols; abnormal traffic; distributed denial of service attack; incoming packets; learning algorithm; potential reflector; reflector attacks detection; sharing beliefs; warning message; Authentication; Bandwidth; Broadcasting; Computer crime; Information filtering; Information filters; Information security; Internet; Telecommunication traffic; Terrorism;

fLanguage

English

Publisher

ieee

Conference_Titel

Global Telecommunications Conference, 2003. GLOBECOM '03. IEEE

Print_ISBN

0-7803-7974-8

Type

conf

DOI

10.1109/GLOCOM.2003.1258460

Filename

1258460