A study on efficient detection of network-based IP spoofing DDoS and malware-infected Systems
DC Field | Value | Language |
---|---|---|
dc.contributor.author | Seo, Jung Woo | - |
dc.contributor.author | Lee, Sang Jin | - |
dc.date.accessioned | 2021-09-03T18:06:30Z | - |
dc.date.available | 2021-09-03T18:06:30Z | - |
dc.date.created | 2021-06-16 | - |
dc.date.issued | 2016-10-26 | - |
dc.identifier.issn | 2193-1801 | - |
dc.identifier.uri | https://scholar.korea.ac.kr/handle/2021.sw.korea/87144 | - |
dc.description.abstract | Large-scale network environments require effective detection and response methods against DDoS attacks. Depending on the advancement of IT infrastructure such as the server or network equipment, DDoS attack traffic arising from a few malware-infected systems capable of crippling the organization's internal network has become a significant threat. This study calculates the frequency of network-based packet attributes and analyzes the anomalies of the attributes in order to detect IP-spoofed DDoS attacks. Also, a method is proposed for the effective detection of malware infection systems triggering IP-spoofed DDoS attacks on an edge network. Detection accuracy and performance of the collected real-time traffic on a core network is analyzed thru the use of the proposed algorithm, and a prototype was developed to evaluate the performance of the algorithm. As a result, DDoS attacks on the internal network were detected in real-time and whether or not IP addresses were spoofed was confirmed. Detecting hosts infected by malware in real-time allowed the execution of intrusion responses before stoppage of the internal network caused by large-scale attack traffic. | - |
dc.language | English | - |
dc.language.iso | en | - |
dc.publisher | SPRINGER INTERNATIONAL PUBLISHING AG | - |
dc.title | A study on efficient detection of network-based IP spoofing DDoS and malware-infected Systems | - |
dc.type | Article | - |
dc.contributor.affiliatedAuthor | Lee, Sang Jin | - |
dc.identifier.doi | 10.1186/s40064-016-3569-3 | - |
dc.identifier.scopusid | 2-s2.0-84994017748 | - |
dc.identifier.wosid | 000391813700007 | - |
dc.identifier.bibliographicCitation | SPRINGERPLUS, v.5 | - |
dc.relation.isPartOf | SPRINGERPLUS | - |
dc.citation.title | SPRINGERPLUS | - |
dc.citation.volume | 5 | - |
dc.type.rims | ART | - |
dc.type.docType | Article | - |
dc.description.journalClass | 1 | - |
dc.description.journalRegisteredClass | scie | - |
dc.description.journalRegisteredClass | scopus | - |
dc.relation.journalResearchArea | Science & Technology - Other Topics | - |
dc.relation.journalWebOfScienceCategory | Multidisciplinary Sciences | - |
Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.
(02841) 서울특별시 성북구 안암로 14502-3290-1114
COPYRIGHT © 2021 Korea University. All Rights Reserved.
Certain data included herein are derived from the © Web of Science of Clarivate Analytics. All rights reserved.
You may not copy or re-distribute this material in whole or in part without the prior written consent of Clarivate Analytics.