HAWK: Halting Anomalies with Weighted Choking to Rescue Well-Behaved TCP Sessions from Shrew DDoS Attacks

Kwok, Yue Kuen; Tripathi, Rohit; Chen, Yu; Hwang, Kai

doi:10.1007/11534310_46

Cited by 49 publications

(29 citation statements)

References 15 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…There is also significant past literature on attacks and defenses against quality of service (QoS) degradation, or RoQ attacks, that produce long-term degradation in network performance [23], [26], [41], [42], [44], [71], [76]. The focus of this work is on the transport layer rather than routing protocols, so these defenses are not applicable.…”

Section: Related Workmentioning

confidence: 99%

Vampire Attacks: Draining Life from Wireless Ad Hoc Sensor Networks

Vasserman

Hopper

2013

IEEE Trans. on Mobile Comput.

128

View full text Add to dashboard Cite

Abstract-Ad hoc low-power wireless networks are an exciting research direction in sensing and pervasive computing. Prior security work in this area has focused primarily on denial of communication at the routing or medium access control levels. This paper explores resource depletion attacks at the routing protocol layer, which permanently disable networks by quickly draining nodes' battery power. These "Vampire" attacks are not specific to any specific protocol, but rather rely on the properties of many popular classes of routing protocols. We find that all examined protocols are susceptible to Vampire attacks, which are devastating, difficult to detect, and are easy to carry out using as few as one malicious insider sending only protocol-compliant messages. In the worst case, a single Vampire can increase network-wide energy usage by a factor of OðNÞ, where N in the number of network nodes. We discuss methods to mitigate these types of attacks, including a new proof-of-concept protocol that provably bounds the damage caused by Vampires during the packet forwarding phase.

show abstract

Section: Related Workmentioning

confidence: 99%

Vampire Attacks: Draining Life from Wireless Ad Hoc Sensor Networks

Vasserman

Hopper

2013

IEEE Trans. on Mobile Comput.

128

View full text Add to dashboard Cite

show abstract

“…As vampire attacks depend on amplification, these solutions are not effective to justify a perfect solution. There are other researches as explore in [11], [12], [13], [14], [15], [16], [17] for attacks and defenses pertaining to QoS and network performance. Transport layer is the main focus of this research where vampires do not drop packets but they cause heavy consumption of energy.…”

Section: IImentioning

confidence: 99%

Detection and Prevention of Resource Depletion Attacks in Wireless Ad Hoc Sensor Networks

Na¹,

Nayak²

2014

International Journal of Advanced Research in Computer and Comm

View full text Add to dashboard Cite

Wireless Ad Hoc Sensor Networks are the networks with will collection of wireless devices. They meant for some kind of sensing tasks. There are many real world utilities of these kinds of network. For instance, they are used for environment monitoring, studying wildlife habitat besides a plethora of military and civilian applications. These sensor networks suffer from lack of resources. In other words, they do have fewer resources such as energy. Therefore they are subjected to numerous attacks. Resource depletion attack or vampire attack is one such attack where a compromised node involves in generating more network traffic which depletes energy of the nodes. The vampire node behaves as per the underlying protocol making the network difficult to detect such attack. This is the problem to be addressed. Recently Vasserman and Hopper proposed a method to prevent "vampire attacks" in Ad Hoc Sensor Networks. Their research reveled that vampire attacks are not specific to any protocol. However, they depend on many routing protocols. In this paper we implement a prototype application that simulates the Wireless Ad Hoc Sensor Network with number of nodes and sink with the resource depletion attack model. Our empirical results reveal that the prototype is able to provide encouraging results.

show abstract

“…Some researchers have focussed on the buffer of the router and queue management algorithms to detect low rate DoS attacks.Sandeep and Terz [7] suggested increase in the buffer size so that the attacker has to send packets at higher rates to fill up the target buffer which would then cease to be a low rate DoS Attack. In [6] two parameters are considered, one is packet percentage at the cache queue of a target router, and another is the threshold percentage which is calculated on the basis of the number of packets of client as well as the number of packets of the attacker. [5] Proposes a mechanism called HAWK (halting anomaly with weighted choking) which focusses is on dropping algorithms for detection of DoS flows and achieving fairness among adaptive and non adaptive flows.…”

Section: Related Workmentioning

confidence: 99%

Software based Low Rate DoS Attack Detection Mechanism

Mathew¹,

Katkar²

2011

IJCA

View full text Add to dashboard Cite

Existing DoS attack detection tools are unable to detect Low rate DoS (LDoS) attacks. Many researchers have proposed mechanisms to detect LdoS attack. But they require modifications to the existing infrastructure or protocols which is not practical. There should be a lightweight mechanism which could be integrated with existing Intrusion Detection Systems. This paper proposes a lightweight software-based approach for LdoS detection which could be integrated with existing Intrusion detection system and does not require any change in existing infrastructure and protocol.Experimental results are provided to support the effectiveness and efficiency of proposed mechanism.

show abstract

HAWK: Halting Anomalies with Weighted Choking to Rescue Well-Behaved TCP Sessions from Shrew DDoS Attacks

Abstract: Abstract-High

Cited by 49 publications

References 15 publications

Vampire Attacks: Draining Life from Wireless Ad Hoc Sensor Networks

Vampire Attacks: Draining Life from Wireless Ad Hoc Sensor Networks

Detection and Prevention of Resource Depletion Attacks in Wireless Ad Hoc Sensor Networks

Software based Low Rate DoS Attack Detection Mechanism

Contact Info

Product

Resources

About