Journal Article10.1016/J.COSE.2014.10.013
Deceiving entropy based DoS detection
Ilker Ozcelik,Richard R. Brooks +1 more
65
TL;DR: This paper explains the vulnerability of entropy based network monitoring systems and presents a proof of concept entropy spoofing attack and shows that by exploiting this vulnerability, the attacker can avoid detection or degrade detection performance to an unacceptable level.
read more
About: This article is published in Computers & Security. The article was published on 01 Feb 2015. The article focuses on the topics: Spoofing attack & Denial-of-service attack.
read more
Chat with Paper
AI Agents for this Paper
Find similar papers on Google Scholar, PubMed and Arxiv
Write a critical review of this paper
Analyze citations of this paper to find unaddressed research gaps
Citations
Fog-Assisted SDN Controlled Framework for Enduring Anomaly Detection in an IoT Network
TL;DR: A fog-assisted software defined networking (SDN) driven intrusion detection/prevention system (IDPS) for IoT networks is proposed for timely identification of various attack models in near real time for effective neutralization of threats using SDN control.
72
Trends in Validation of DDoS Research
Sunny Behal,Krishan Kumar +1 more
TL;DR: The validation techniques used for DDoS research are investigated comprehensively and it is proposed to extend them with the inclusion of new validation technique of analyzing real datasets.
58
Entropy based features distribution for anti-DDoS model in SDN
Raja Majid Ali Ujjan,Zeeshan Pervez,Keshav Dahal,Wajahat Ali Khan,Asad Masood Khattak,Bashir Hayat +5 more
TL;DR: This work proposed a fast and an effective entropy-based DDoS detection, and investigated the trade-off between SAE and CNN classifiers by using accuracy and false-positive results.
A DDoS attack detection and countermeasure scheme based on DWT and auto-encoder neural network for SDN
TL;DR: In this article , the authors proposed a DDoS attack detection and countermeasure scheme based on discrete wavelet transform (DWT) and auto-encoder neural network for SDN.
47
The GENI Book
Rick McGeer,Mark Berman,Chip Elliott,Robert Ricci +3 more
- 01 Sep 2016
TL;DR: This book, edited by four of the leaders of the National Science Foundations Global Environment and Network Innovations (GENI) project, gives the reader a tour of the history, architecture, future, and applications of GENI.
44
References
A mathematical theory of communication
TL;DR: This final installment of the paper considers the case where the signals or the messages or both are continuously variable, in contrast with the discrete nature assumed until now.
74.4K
OpenFlow: enabling innovation in campus networks
Nick McKeown,Thomas Anderson,Hari Balakrishnan,Guru Parulkar,Larry L. Peterson,Jennifer Rexford,Scott Shenker,Jonathan S. Turner +7 more
- 31 Mar 2008
TL;DR: This whitepaper proposes OpenFlow: a way for researchers to run experimental protocols in the networks they use every day, based on an Ethernet switch, with an internal flow-table, and a standardized interface to add and remove flow entries.
Information-theoretic measures for anomaly detection
Wenke Lee,Dong Xiang +1 more
- 14 May 2001
TL;DR: This work proposes to use several information-theoretic measures, namely, entropy, conditional entropy, relative conditional entropy; information gain, information gain; and information cost for anomaly detection for protection mechanisms against novel attacks.
668
GENI: A federated testbed for innovative network experiments
Mark Berman,Jeffrey S. Chase,Lawrence H. Landweber,Akihiro Nakao,Maximilian Ott,Dipankar Raychaudhuri,Robert Ricci,Ivan Seskar +7 more
TL;DR: The concurrent deployment of these technologies on regional and national R&E backbones will result in a revolutionary new national-scale distributed architecture, bringing to the entire network the shared, deeply programmable environment that the cloud has brought to the datacenter.
667
Statistical approaches to DDoS attack detection and response
L. Feinstein,D. Schnackenberg,R. Balupari,D. Kindred +3 more
- 22 Apr 2003
TL;DR: Methods to identify DDoS attacks by computing entropy and frequency-sorted distributions of selected packet attributes and how the detectors can be extended to make effective response decisions are presented.