Design and Implementation of an SNMP-Based Traffic Flooding Attack Detection System

摘要：

Recently,as traffic flooding attacks such as DoS/DDoS and Internet Worm have posed devastating threats to network services,rapid detection and proper response mechanisms are the major concern for secure and reliable network services.However,most of the current Intrusion Detection Systems (IDSs) focus on detail analysis of packet data,which results in late detection and a high system burden to cope with high-speed network traffic.In this paper we propose an SNMP-based lightweight and fast detection algorithm for traffic flooding attacks,which minimizes the processing and network overhead of the detection system,minimizes the detection time,and provides high detection rate.

关键词： Traffic Flooding Attack DoS/DDoS SNMP MIB Detection Algorithm Detection Time Detection System.

作者: Jun-Sang Park Myung-Sup Kim

作者单位: Dept.of Computer and Information Science,Korea University,Korea

会议类型: 国际会议

会议名称: 11th Asia-Pacific Network Operations and Management Symposium(APNOMS 2008)(第十一届亚太网络运行和管理国际研讨会)

会议地点: 北京

会议语种:英文

页码: 380-389

在线出版日期: 2008-10-22（万方平台首次上网日期，不代表论文的发表时间）