Academic
Publications
Spectral Analysis of TCP Flows for Defense Against Reduction-of-Quality Attacks

Spectral Analysis of TCP Flows for Defense Against Reduction-of-Quality Attacks,10.1109/ICC.2007.204,Yu Chen,Kai Hwang

Spectral Analysis of TCP Flows for Defense Against Reduction-of-Quality Attacks   (Citations: 9)
BibTex | RIS | RefWorks Download
∗ Abstract - The RoQ (Reduction-of-Quality) attacks are low- rate DDoS attacks that degrade the QoS to end systems stealthily but not to deny the services completely. These attacks are more difficult to detect than the flooding DDoS attacks. This paper explores the energy distributions of Internet traffic flows in frequency domain. Normal TCP traffic flows present periodicity because of protocol behavior. Our results reveal that normal TCP flows can be segregated from malicious flows according to energy distribution properties. We discover the spectral shifting of attack flows from that of normal flows. Combining flow-level spectral analysis with sequential hypothesis testing, we propose a novel defense scheme against RoQ attacks. Our detection and filtering scheme can effectively rescue 99% legitimate TCP flows under the RoQ attacks.
Cumulative Annual
View Publication
The following links allow you to view full publications. These links are maintained by other sources not affiliated with Microsoft Academic Search.
Sort by: