A Link Flooding Attack Detection Method based on Non-Cooperative Active Measurement

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

Abstract

In recent years, a new type of DDoS attacks against backbone routing links have appeared. They paralyze the communication network of a large area by directly congesting the key routing links concerning the network accessibility of the area. This new type of DDoS attacks make it difficult for traditional countermeasures to take effect. This paper proposes and implements an attack detection method based on non-cooperative active measurement. Experiments show that our detection method can efficiently perceive changes of network link performance and assist in identifying such new DDoS attacks. In our testbed, the network anomaly detection accuracy can reach 93.7%.

Original languageEnglish
Title of host publicationProceedings - 2021 8th International Conference on Dependable Systems and Their Applications, DSA 2021
PublisherInstitute of Electrical and Electronics Engineers Inc.
Pages172-177
Number of pages6
ISBN (Electronic)9781665443913
DOIs
StatePublished - 2021
Event8th International Conference on Dependable Systems and Their Applications, DSA 2021 - Yinchuan, China
Duration: 11 Sep 202112 Sep 2021

Publication series

NameProceedings - 2021 8th International Conference on Dependable Systems and Their Applications, DSA 2021

Conference

Conference8th International Conference on Dependable Systems and Their Applications, DSA 2021
Country/TerritoryChina
CityYinchuan
Period11/09/2112/09/21

Keywords

  • attack detection
  • DDoS attack
  • network measurement
  • non-cooperative

Fingerprint

Dive into the research topics of 'A Link Flooding Attack Detection Method based on Non-Cooperative Active Measurement'. Together they form a unique fingerprint.

Cite this