Witnessing distributed denial-of-service traffic from an attacker's network
- Title
- Witnessing distributed denial-of-service traffic from an attacker's network
- Author
- 원영준
- Keywords
- Traffic Analysis; DDoS; Monitoring
- Issue Date
- 2011-10
- Publisher
- Institute of Electrical and Electronics Engineers
- Citation
- Network and Service Management (CNSM), 2011 7th International Conference on 2011 Oct,2011년, pp.1 - 7
- Abstract
- In July 2009, surprising large-scale Distributed Denial-of-Service (DDoS) attacks simultaneously targeted US and South Korean government, military, and commercial websites. Initial speculation was that this was well-designed cyber warfare from North Korea, but the truth is still unknown. What was even more surprising was how these critical infrastructures were still vulnerable after a decade of research on DDoS attacks. These particular incidents, the so-called 7.7 (July 7th) DDoS attacks, were highlighted not just because of their success but also because of their well-coordinated strategy. The 3.3 (March 3rd, 2011) DDoS attacks had similar characteristics to the 7.7 DDoS attacks, but they were not as successful because of the rapid vaccination of the zombie hosts. In this paper, we suggest that it is worthwhile to take a step back from the target side of the DDoS attacks and look at the problem in terms of network traffic from the attacker's side. We collected a unique large-scale sample of DDoS attack traffic from the two real-world incidents (not simulated), and we provide an analysis of traffic patterns from the perspective of the attacker's hosting network.
- URI
- https://ieeexplore.ieee.org/document/6103957/https://repository.hanyang.ac.kr/handle/20.500.11754/72940
- ISBN
- 978-3-901882-44-9; 978-1-4577-1588-4
- ISSN
- 2165-9605; 2165-963X
- Appears in Collections:
- COLLEGE OF ENGINEERING[S](공과대학) > INFORMATION SYSTEMS(정보시스템학과) > Articles
- Files in This Item:
There are no files associated with this item.
- Export
- RIS (EndNote)
- XLS (Excel)
- XML