A Study on Low-Rate DDoS Attacks in Real Networks

Author

Jin-Seok Yang ; Min-Woo Park ; Tai-Myoung Chung

Author_Institution

Dept. of Electr. & Comput. Eng., Sungkyunkwan Univ., Suwon, South Korea

fYear

2013

fDate

24-26 June 2013

Firstpage

1

Lastpage

4

Abstract

DDoS attacks are becoming more advanced to attack with a small traffic that is difficult to detect. In this paper, we propose two DDoS attacks that send a small traffic. One named SQL Search attack that is modified DoS attack using SQL wildcards. The other named Mass Contents Request attack that request large files. We prove experimentally that they are possible for the real homepages to DDoS attack with 10Megabytes/sec to 1Gigabytes/sec traffic. Also, we prove that proposed DDoS attacks have a small traffic and no patterns that not only it is difficult to detect of threshold-based but also it is hardly possible to detect of pattern-based through an experiment.

Keywords

SQL; computer network security; telecommunication traffic; SQL search attack; SQL wildcards; homepages; large-file request; legitimate pattern-based detection; low-rate DDoS attacks; mass contents request attack; real network traffic; threshold-based attack detection; Bandwidth; Communication system security; Computer crime; Computers; IP networks; Servers; Wireless communication;

fLanguage

English

Publisher

ieee

Conference_Titel

Information Science and Applications (ICISA), 2013 International Conference on

Conference_Location

Suwon

Print_ISBN

978-1-4799-0602-4

Type

conf

DOI

10.1109/ICISA.2013.6579418

Filename

6579418