標題: Detecting Amplification Attacks with Software Defined Networking
作者: Chen, Chih-Chieh
Chen, Yi-Ren
Lu, Wei-Chih
Tsai, Shi-Chun
Yang, Ming-Chuan
資訊工程學系
Department of Computer Science
公開日期: 1-Jan-2017
摘要: Distributed denial of service (DDoS) is an attack that attempts to disrupt network service for various malicious purposes. It makes use of public services as reflectors to amplify the traffic, and thus called distributed reflection denial of service attacks. This type of attack forges source IP address, and makes it hard to filter the problematic packets. With Software Defined Networking (SDN) and machine learning techniques, we implement a system to detect DRDoS packets and block the amplification attacks automatically. DNS and NTP amplifications are two typical attacks of DDoS. By analyzing the traffic features, although our classifier is trained only for the DNS amplification attack, our system can identify and then block both DNS and NTP amplification attacks with great accuracy.
URI: http://hdl.handle.net/11536/150825
期刊: 2017 IEEE CONFERENCE ON DEPENDABLE AND SECURE COMPUTING
起始頁: 195
結束頁: 201
Appears in Collections:Conferences Paper