Detecting and reacting against distributed denial of service attacks - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2006

Detecting and reacting against distributed denial of service attacks

Résumé

Distributed denial of service attacks (DDoS) are becoming a big threat to the Internet. Recently, some DDoS attacks have infected more than 100, 000 vulnerable hosts over Internet within 10 minutes. Consequences of these attacks can be devastating toward many companies whose security policy against this kind of attacks relies only on reconfiguring firewalls. It is judicious to note that no computer network is immune from intrusions in general and distributed denial of service attacks in particular. Intrusion detection systems should be geographically distributed to detect distributed and cooperated attacks. In this paper, we use a cooperative approach, which uses the Intrusion Detection Message Exchange Format (IDMEF) defined by the IETF, that can detect coordinated attack scenarios through alert correlation of distributed IDSs. We present our experience in realizing this cooperative system and the different results obtained from its implementation in a real network.
Fichier principal
Vignette du fichier
icc06-1.pdf (164.28 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01923665 , version 1 (15-11-2018)

Identifiants

Citer

Yacine Bouzida, Frédéric Cuppens, Sylvain Gombault. Detecting and reacting against distributed denial of service attacks. ICC 2006: IEEE international Conference on Communications, Jun 2006, Istanbul, Turquie. ⟨10.1109/ICC.2006.255128⟩. ⟨hal-01923665⟩
24 Consultations
159 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More