An Investigation into the Detection and Mitigation of Denial of Service (DoS) Attacks [electronic resource] : Critical Information Infrastructure Protection /
Raghavan, S.V.editor.
Dawson, E.editor.
The problem of Denial of Service is now so pervasive that virtually every computer connected to a network has the potential to be affected in some way. As things stand DoS and DDoS attacks present significant challenges to the continued use of the Internet for critical communications. The aim of this publication is to report on a collaborative research project into DoS and DDoS attacks undertaken jointly by a consortium of institutions from India and Australia. The publication offers insight into the complexity of the problem to be solved as well as the breadth of the research being conducted into the various facets of the DoS/DDoS problem. Some of the areas covered are: DDoS behavior understanding in real-time at high-packet rates, management of web services during DDoS, Creating conducive environments for DDoS prevention through provable authentication protocols, Identification of vulnerabilities specific to DDoS in emerging technologies, and the process of sustaining a legal, regulatory, and policy ambience with international cooperation.   Professor S V Raghavan is currently Scientific Secretary, Office of the Principal Scientific Advisor to Government of India. He is also a full Professor in the prestigious Indian Institute of technology Madras, Chennai. Professor Raghavan is the Chief Architect and the Chairman, Technical Advisory Committee to National Knowledge Network (NKN), a Government of India initiative to interconnect and integrate 1500 knowledge institutions in India and integrate NKN with global science through dedicated international linkages in a seamless manner. His current research interests are Technology, Health, and Education, where he has significant contributions in the recent years. Location technologies, Evolutionary addressing, Discovering Redundant multi-paths, IR Imaging for Breast Cancer, and pedagogy based adaptive and reusable learning modules are some of them. Professor Raghavan is the Project Director of the Indo-Australian Joint Project to understand Distributed Denial of Service Attacks on Critical Information Infrastructure.     Professor Ed Dawson is a Professor Emeritus in the Information Security Institute.  From 2005 until 2007, he was the Research Director of the Information Security Institute (ISI).  Prior to the formation of the ISI, he was the Director of the Information Security Research Centre (ISRC).  He has research interests in all aspects of cryptology especially related to the design and analysis of encryption algorithms and their application to e-commerce and secure communications.  He has published over 250 research papers.  Over the last five years, he has received over $7,000,000 in external funding.  Professor Dawson was the Vice-President of the International Association of Cryptology Research (2008 - 2010) and the node leader of the Information Security component of the Australian Research Council networks, Research Networks for a Security Australia.    .
Description based upon print version of record.
An Investigation into the Detection and Mitigation of Denial of Service (DoS) Attacks; Preface; List of Authors; Contents; List of Acronyms; Chapter 1: Introduction; References; Chapter 2: Background; 2.1 Denial of Service (DoS) and Distributed Denial of Service (DDoS); 2.2 Distributed Denial of Service Taxonomy; 2.2.1 Mode of Attack; 2.2.1.1 High-Rate Flooding Attack; 2.2.1.2 Semantic Attack; 2.2.2 Target of Attack; 2.2.2.1 Attacks Targeting Networks; 2.2.2.2 Attacks Targeting Cellular Telecommunication Network; 2.2.2.3 Attacks Targeting Operating Systems
2.2.2.4 Attacks Targeting Applications (Layer 7 Attacks)2.3 Botnet Architecture; 2.3.1 Agent-Handler Model; 2.3.2 IRC-Based Botnet Architecture; 2.3.3 Peer-to-Peer Based Botnet Architecture; 2.3.4 Advanced Hybrid Peer-to-Peer Botnet Architecture; 2.4 Detection Techniques; 2.4.1 Detecting High-Rate Flooding Attacks; 2.4.1.1 Botnet-Based Attack Detection; 2.4.2 Detecting Semantic Attacks; 2.5 Mitigation Techniques; 2.5.1 Mitigating High-Rate Flooding Attacks; 2.5.1.1 Deterrence; 2.5.1.2 Adoption and Rigorous Implementation of Good Security Practices; 2.5.2 Mitigating Semantic Attacks
2.6 Case Studies2.6.1 Case Study 1: Storm Botnet; 2.6.1.1 Analysis of the Storm Bot; 2.6.1.2 Detection; 2.6.1.3 Mitigation; 2.6.2 Case Study 2: Agobot Botnet; 2.6.2.1 Analysis of the Agobot; 2.6.2.2 Detection; 2.6.2.3 Mitigation; 2.6.3 Case Study 3: Operation Payback; 2.6.3.1 Analysis of Operation Payback; 2.6.3.2 Detection; 2.6.3.3 Mitigation; References; Chapter 3: Policy and Law: Denial of Service Threat; 3.1 Decades of Indecision: `Weapons of Mass Disruption'; 3.1.1 Introduction
3.1.2 Background: Dimensions in Policy and Law Research in Security and Resilience of National and Global Information Infrastructures3.1.2.1 Politically Motivated Denial of Service Attacks; 3.1.2.2 Monetary Gain; 3.1.2.3 Personal Achievement; 3.1.2.4 Information Warfare; 3.1.2.5 Overall Research Activity - `Evidence Based Policy'; 3.2 Concepts in Policy and Legal Aspects of the DoS/DDoS Threat; 3.2.1 Cyber Warfare and `Weapons of Mass Disruption'; 3.2.2 Entities in Cyber/Information Warfare; 3.2.3 Ultimate DoS/EMP Weapons; 3.2.4 Status of the Attacking Entity
3.2.5 Nature of the Attack Itself3.2.6 Status of the Entity under Attack; 3.2.7 Status of the Entities of Concern; 3.2.8 Dimension in DoS/DDoS Threat; 3.2.9 Dimensions in the Attack Scenario; 3.2.9.1 Vulnerability; 3.2.9.2 Threat; 3.2.9.3 Accident; 3.2.9.4 Observation; 3.2.9.5 Attack; 3.2.9.6 Penetration; 3.2.9.7 Compromise; 3.2.9.8 Damage; 3.2.10 Defence and Response Status; 3.2.11 Due-Care by ISPs and Websites; 3.2.11.1 Standardisation of Security and Risk Assessment; 3.2.11.2 Policies; 3.2.11.3 Data Back-Up; 3.3 International Perspectives
3.3.1 ITU/UN: The International Telecommunications Union and the United Nations
Includes bibliographical references and index.
The problem of Denial of Service is now so pervasive that virtually every computer connected to a network has the potential to be affected in some way. As things stand DoS and DDoS attacks present significant challenges to the continued use of the Internet for critical communications. The aim of this publication is to report on a collaborative research project into DoS and DDoS attacks undertaken jointly by a consortium of institutions from India and Australia. The publication offers insight into the complexity of the problem to be solved as well as the breadth of the research being conducted into the various facets of the DoS/DDoS problem. Some of the areas covered are: DDoS behavior understanding in real-time at high-packet rates, management of web services during DDoS, Creating conducive environments for DDoS prevention through provable authentication protocols, Identification of vulnerabilities specific to DDoS in emerging technologies, and the process of sustaining a legal, regulatory, and policy ambience with international cooperation.   Professor S V Raghavan is currently Scientific Secretary, Office of the Principal Scientific Advisor to Government of India. He is also a full Professor in the prestigious Indian Institute of technology Madras, Chennai. Professor Raghavan is the Chief Architect and the Chairman, Technical Advisory Committee to National Knowledge Network (NKN), a Government of India initiative to interconnect and integrate 1500 knowledge institutions in India and integrate NKN with global science through dedicated international linkages in a seamless manner. His current research interests are Technology, Health, and Education, where he has significant contributions in the recent years. Location technologies, Evolutionary addressing, Discovering Redundant multi-paths, IR Imaging for Breast Cancer, and pedagogy based adaptive and reusable learning modules are some of them. Professor Raghavan is the Project Director of the Indo-Australian Joint Project to understand Distributed Denial of Service Attacks on Critical Information Infrastructure.     Professor Ed Dawson is a Professor Emeritus in the Information Security Institute.  From 2005 until 2007, he was the Research Director of the Information Security Institute (ISI).  Prior to the formation of the ISI, he was the Director of the Information Security Research Centre (ISRC).  He has research interests in all aspects of cryptology especially related to the design and analysis of encryption algorithms and their application to e-commerce and secure communications.  He has published over 250 research papers.  Over the last five years, he has received over $7,000,000 in external funding.  Professor Dawson was the Vice-President of the International Association of Cryptology Research (2008 - 2010) and the node leader of the Information Security component of the Australian Research Council networks, Research Networks for a Security Australia.    .
Input-output equipment (Computers).
Computer security.
Microprogramming .
Input/Output and Data Communications.
Systems and Data Security.
Control Structures and Microprogramming.