Combat model-based DDoS detection and defence using experimental testbed: a quantitative approach. (1st January 2011)

• Record Type: Journal Article
• Authors: Preetha, G.; Kiruthika Devi, B.S.; Mercy Shalinie, S.
• Is Part Of: International journal of intelligent engineering informatics. Volume 1: Number 3/4 (2011)
• Page Start: 261
• Page End: 279
• Publication Date: 2011-01-01
• Subjects: DDoS -- analytical model -- testbed; Artificial intelligence -- Engineering applications -- Periodicals; Engineering -- Computer programs -- Periodicals; Knowledge management -- Periodicals; 620.0028563
• DOI: 10.1504/IJIEI.2011.044097
• Languages: English
• ISSNs: 1758-8715

Abstract

Basic model for DDoS detection and prevention needs to be developed primarily to analyse the relationship between attacker and defender. Research in DDoS attacks is mainly focused on qualitative modes than quantitative analysis. The proposed work incorporates Lanchester combat model to quantify the attacker strength thereby giving a clear picture of how a DDoS defence system should be secure and what level of effectiveness is required to mitigate the attack. The work model is divided into online monitoring system (OMS) where network anomalies are monitored using the various performance metrics and offline training system (OTS) differentiates spoofed traffic from normal traffic using hop count filtering (HCF) defence algorithm. The proposed work opens a new platform for researchers to know apriori what defence strategy should be employed for what kind of DDoS attack. The implementation is carried out on a distributed testbed build up on GNU/Linux machines.