SDN-Assisted Network-Based Mitigation of Slow DDoS Attacks

Article in Edited Volumes


Publication Details

Author(s): Lukaseder T, Maile L, Erb B, Kargl F
Editor(s): Beyah Raheem, Chang Bing, Li Yingjiu, Zhu Sencun
Title edited volumes: SecureComm 2018: Security and Privacy in Communication Networks
Publisher: Springer International Publishing
Publishing place: Cham
Publication year: 2018
Volume: abs/1804.06750
Pages range: 102--121
ISBN: 978-3-030-01704-0
Language: English


Abstract

Slow-running attacks against network applications are often not easy to detect, as the attackers behave according to the specification. The servers of many network applications are not prepared for such attacks, either due to missing countermeasures or because their default configurations ignores such attacks. The pressure to secure network services against such attacks is shifting more and more from the service operators to the network operators of the servers under attack. Recent technologies such as software-defined networking offer the flexibility and extensibility to analyze and influence network flows without the assistance of the target operator. Based on our previous work on a network-based mitigation, we have extended a framework to detect and mitigate slow-running DDoS attacks within the network infrastructure, but without requiring access to servers under attack. We developed and evaluated several identification schemes to identify attackers in the network solely based on network traffic information. We showed that by measuring the packet rate and the uniformity of the packet distances, a reliable identificator can be built, given a training period of the deployment network.


FAU Authors / FAU Editors

Maile, Lisa
Computer Science 7 (Computer Networks and Communication Systems)


External institutions
Universität Ulm


How to cite

APA:
Lukaseder, T., Maile, L., Erb, B., & Kargl, F. (2018). SDN-Assisted Network-Based Mitigation of Slow DDoS Attacks. In Beyah Raheem, Chang Bing, Li Yingjiu, Zhu Sencun (Eds.), SecureComm 2018: Security and Privacy in Communication Networks. (pp. 102--121). Cham: Springer International Publishing.

MLA:
Lukaseder, Thomas, et al. "SDN-Assisted Network-Based Mitigation of Slow DDoS Attacks." SecureComm 2018: Security and Privacy in Communication Networks. Ed. Beyah Raheem, Chang Bing, Li Yingjiu, Zhu Sencun, Cham: Springer International Publishing, 2018. 102--121.

BibTeX: 

Last updated on 2019-15-01 at 19:10