Academic
Publications
Browsing behavior mimicking attacks on popular web sites for large botnets

Browsing behavior mimicking attacks on popular web sites for large botnets,10.1109/INFCOMW.2011.5928949,Shui Yu,Guofeng Zhao,Song Guo,Yang Xiang,Athan

Browsing behavior mimicking attacks on popular web sites for large botnets  
BibTex | RIS | RefWorks Download
With the significant growth of botnets, application layer DDoS attacks are much easier to launch using large botnet, and false negative is always a problem for intrusion detection sys- tems in real practice. In this paper, we propose a novel application layer DDoS attack tool, which mimics human browsing behavior following three statistical distributions, the Zipf-like distribution for web page popularity, the Pareto distribution for page request time interval for an individual browser, and the inverse Gaussian distribution for length of browsing path. A Markov model is established for individual bot to generate attack request traffic. Our experiments indicated that the attack traffic that generated by the proposed tool is pretty similar to the real traffic. As a result, the current statistics based detection algorithms will result high false negative rate in general. In order to counter this kind of attacks, we discussed a few preliminary solutions at the end of this paper. Index Terms—attack simulation; browsing behavior; botnet.
Cumulative Annual
View Publication
The following links allow you to view full publications. These links are maintained by other sources not affiliated with Microsoft Academic Search.