A behavior-based method for detecting DNS amplification attacks

Longzhu Cai, Yaokai Feng, Junpei Kawamoto, Kouichi Sakurai

研究成果: Chapter in Book/Report/Conference proceedingConference contribution

6 被引用数 (Scopus)

抄録

DNS (Domain Name System) amplification attack has become a popular form of the attacks of the Distributed Denial of Service (DDoS) in recent years. In DNS amplification attacks, the attackers utilize spoofed source IP addresses and open recursive DNS servers to perform the bandwidth consumption attacks. A lot of responses are generated and they are sent to the targets after the attackers send only a little of DNS requests. Various methods have been proposed for detecting the DNS amplification attacks. However, almost of them have to determine parameters in advance, which is not easy for many cases. In this study, we utilized the detection pattern and combination of three features to distinguish normal and attack. It can solve the problem that limitation of detection in the case of high-frequency and low-amplification attack.

本文言語英語
ホスト出版物のタイトルProceedings - 2016 10th International Conference on Innovative Mobile and Internet Services in Ubiquitous Computing, IMIS 2016
編集者Fatos Xhafa, Leonard Barolli, Noriki Uchida
出版社Institute of Electrical and Electronics Engineers Inc.
ページ608-613
ページ数6
ISBN(電子版)9781509009848
DOI
出版ステータス出版済み - 12 21 2016
イベント10th International Conference on Innovative Mobile and Internet Services in Ubiquitous Computing, IMIS 2016 - Fukuoka, 日本
継続期間: 7 6 20167 8 2016

出版物シリーズ

名前Proceedings - 2016 10th International Conference on Innovative Mobile and Internet Services in Ubiquitous Computing, IMIS 2016

その他

その他10th International Conference on Innovative Mobile and Internet Services in Ubiquitous Computing, IMIS 2016
国/地域日本
CityFukuoka
Period7/6/167/8/16

All Science Journal Classification (ASJC) codes

  • コンピュータ ネットワークおよび通信
  • コンピュータ サイエンスの応用

フィンガープリント

「A behavior-based method for detecting DNS amplification attacks」の研究トピックを掘り下げます。これらがまとまってユニークなフィンガープリントを構成します。

引用スタイル