Survey of network-based defense mechanisms countering the DoS and DDoS problems

By Tao Peng, C. Leckie, Kotagiri Ramamohanarao. CSUR, 2007

887 citations recorded by the source corpus.

Subfields: Artificial Intelligence, Computer Networks and Communications, Signal Processing

View Paper: https://www.semanticscholar.org/paper/b6d87c6fcaf01a8ad54fdb85725f02db30bde099

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Artificial Intelligence

In Computer Networks and Communications

In Signal Processing

Citations in the corpus

A survey of coordinated attacks and collaborative intrusion detection (2010, methodology): “…in detail machine learning based data mining methods for intrusion detection, DoS defense and network wide anomaly detection, which have been previously surveyed in (Brugger, 2004; Lee and Stolfo, 2000; Stolfo et al., 2001; Mirkovic and Reiher, 2004; Peng et al., 2006; Lakhina et al., 2004, 2005).”
DDoS Attack Detection and Mitigation Using SDN: Methods, Practices, and Solutions (2017, background): “DNS amplification Flooding attack [100] In domain name system (DNS) amplification flooding attack, the zombies generate small DNS queries with forged source IP address that generates large volume of network traffic directed toward the victim”
Trust mechanisms in wireless sensor networks: Attack analysis and countermeasures (2012, background): “A few existing surveys on trust and security issues can be found (FernándezGago et al., 2007; Chapin et al., 2008; Chen et al., 2009b; Sun et al., 2006; Peng et al., 2007; Hoffman et al., 2009).”
Network Anomaly Detection: Methods, Systems and Tools (2014, methodology): “Methods /NIDSs /Tools Topics covered [8] [10] [11] [6] [16] [17] [3] [7] [21] [26] [29] [31] [32] [33] [34] Our survey”
Software-Defined Networking (SDN) and Distributed Denial of Service (DDoS) Attacks in Cloud Computing Environments: A Survey, Some Research Issues, and Challenges (2016, background): “SAVE protocol enables routers to update the information of expected source IP addresses on each link and block any IP packet with an unexpected source IP address [57].”
DDoS Attack Protection in the Era of Cloud Computing and Software-Defined Networking (2014, background): “The surveys [21,22] have included most of these work.”
A Survey of Defense Mechanisms Against Distributed Denial of Service (DDoS) Flooding Attacks (2013, background): “[32], there are two main reasons that make the development of an effective DDoS defense mechanism even more challenging when attackers employ zombies to launch DDoS flooding attacks.”
DeepDefense: Identifying DDoS Attack via Deep Learning (2017, methodology): “DDoS attacks also take advantage of techniques like IP spoofing, network amplifier/reflector, the combination of attack methods to avoid detection and prompt their influence [7].”