Ddos flood and destination service changing sensor

Fu Hau Hsu, Chia Hao Lee, Chun Yi Wang, Rui Yi Hung, Yungyu Zhuang

研究成果: 雜誌貢獻期刊論文同行評審

1 引文 斯高帕斯(Scopus)


In this paper, we aim to detect distributed denial of service (DDoS) attacks, and receive a notification of destination service, changing immediately, without the additional efforts of other mod-ules. We designed a kernel-based mechanism to build a new Transmission Control Protocol/Internet Protocol (TCP/IP) connection smartly by the host while the users or clients not knowing the location of the next host. Moreover, we built a lightweight flooding attack detection mechanism in the user mode of an operating system. Given that reinstalling a modified operating system on each client is not realistic, we managed to replace the entry of the system call table with a customized sys_connect. An effective defense depends on fine detection and defensive procedures. In according with our experiments, this novel mechanism can detect flooding DDoS successfully, including SYN flood and ICMP flood. Furthermore, through cooperating with a specific low cost network architecture, the mechanism can help to defend DDoS attacks effectively.

頁(從 - 到)1-17
期刊Sensors (Switzerland)
出版狀態已出版 - 2 3月 2021


深入研究「Ddos flood and destination service changing sensor」主題。共同形成了獨特的指紋。