A Proactive Test Based Differentiation Technique to Mitigate Low Rate DoS Attacks

— Low rate DoS attacks are emerging threats to the TCP traffic, and the VoIP traffic in the Internet. They are hard to detect as they intelligently send attack traffic inside the network to evade current router based congestion control mechanisms. We propose a practical attack model in which botnets that can pose a serious threat to the Internet are considered. Under this model, an attacker can scatter bots across the Internet to launch the low rate DoS attack, thus essentially orchestrating the low rate DoS attack that uses random and continuous IP address spoofing, but with valid legitimate IP addresses. It is difficult to detect and mitigate such an attack. We propose a low rate DoS attack detection algorithm, which relies on the core characteristic of the low rate DoS attack in introducing high rate traffic for short periods, and then uses a proactive test based differentiation technique to filter the attack packets. The proactive test was originally proposed to defend DDoS attac...

• Type: Conference
• Year: 2007
• Where: ICCCN
• Authors: Amey Shevtekar, Nirwan Ansari
• Keywords: DoS Attack Detection, ICCCN 2007, Low Rate Dos, Rate Dos Attack