MULTOPS: A Data-Structure for Bandwidth Attack Detection

By Thomer M. Gil, Massimiliano Poletto. USENIX Security Symposium, 2001

504 citations recorded by the source corpus.

Subfields: Artificial Intelligence, Computer Networks and Communications, Hardware and Architecture

View Paper: https://www.semanticscholar.org/paper/2edb1f13022b7b44d405c8f4fd97f7babbb07d1a

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Artificial Intelligence

In Computer Networks and Communications

In Hardware and Architecture

Citations in the corpus

A novel approach to detection of intrusions in computer networks via adaptive sequential and batch-sequential change-point detection methods (2006, background): “In fact, DOS flooding attacks remain the subject of intensive research, as can be seen in [11], [13], [19], [20], [22], and [37].”
Sonata: query-driven streaming network telemetry (2018, methodology): “Autofocus [13], ProgME [57], and DREAM [29], SCREAM [30], MULTOPS [15], and HHH [23] all iteratively zoom in on traffic of interest.”
Change-point monitoring for the detection of DoS attacks (2004, methodology): “In the design of MULTOPS [17], a tree of nodes is built to keep packet-rate statistics for subnets at different aggregation levels.”
Botz-4-sale: surviving organized DDoS attacks that mimic flash crowds (2005, methodology): “Gil et al [22] detect a bandwidth flood attack against a Web server by comparing the n umber of packets from client to server with those from server to cli ent.”
Attacking DDoS at the source (2002, methodology): “MULTOPS [9] proposes a heuristic and a data-structure that network devices can use to detect DDoS attacks.”
Hop-count filtering: an effective defense against spoofed DDoS traffic (2003, background): “Therefore, victim-based .ltering, which detects and discards spoofed traf.c without any router support, is essential to protecting victims against DDoS attacks.”
DDoS attacks and defense mechanisms: classification and state-of-the-art (2004, background): “Examples of these mechanisms are proposed in [54,101,53].”
Finding Hierarchical Heavy Hitters in Data Streams (2003, background): “The need for maintaining multilevel heavy hitters on variablelength IP address prefixes was articulated in [10, 18].”
A taxonomy of DDoS attack and DDoS defense mechanisms (2004, methodology): “[32, 23, 52, 51] provide examples of source-network defenses.”
A Survey of Defense Mechanisms Against Distributed Denial of Service (DDoS) Flooding Attacks (2013, methodology): “One major drawback of MULTOPS is that it uses a dynamic tree structure for monitoring packet rates for each IP address which makes it a vulnerable target of a memory exhaustion attack [60].”