Timing Is Almost Everything: Realistic Evaluation Of The Very Short Intermittent Ddos Attacks

Keywords

DDoS; evaluation; time synchronization

Abstract

Distributed Denial-of-Service (DDoS) is a big threat to the security and stability of Internet-based services today. Among the recent advanced application-layer DDoS attacks, the Very Short Intermittent DDoS (VSI-DDoS) is the attack, which can bypass existing detection systems and significantly degrade the QoS experienced by users of web services. However, in order for the VSI-DDoS attack to work effectively, bots participating in the attack should be tightly synchronized, an assumption that is difficult to be met in reality. In this paper, we conducted a quantitative analysis to understand how a minimal deviation from perfect synchronization in botnets affects the performance and effectiveness of the VSI-DDoS attack. We found that VSI-DDoS became substantially less effective. That is, it lost 85.7% in terms of effectiveness under about 90ms synchronization inaccuracy, which is a very small inaccuracy under normal network conditions.

Publication Date

10-29-2018

Publication Title

2018 16th Annual Conference on Privacy, Security and Trust, PST 2018

Document Type

Article; Proceedings Paper

Personal Identifier

scopus

DOI Link

https://doi.org/10.1109/PST.2018.8514210

Socpus ID

85063433886 (Scopus)

Source API URL

https://api.elsevier.com/content/abstract/scopus_id/85063433886

This document is currently not available here.

Share

COinS