Recent Analysis of Forged Request Headers Constituted by HTTP DDoS

Abstract

<jats:p>Application Layer Distributed Denial of Service (DDoS) attacks are very challenging to detect. The shortfall at the application layer allows formation of HTTP DDoS as the request headers are not compulsory to be attached in an HTTP request. Furthermore, the header is editable, thus providing an attacker with the advantage to execute HTTP DDoS as it contains almost similar request header that can emulate a genuine client request. To the best of the authors’ knowledge, there are no recent studies that provide forged request headers pattern with the execution of the current HTTP DDoS attack scripts. Besides that, the current dataset for HTTP DDoS is not publicly available which leads to complexity for researchers to disclose false headers, causing them to rely on old dataset rather than more current attack patterns. Hence, this study conducted an analysis to disclose forged request headers patterns created by HTTP DDoS. The results of this study successfully disclose eight forged request headers patterns constituted by HTTP DDoS. The analysis was executed by using actual machines and eight real attack scripts which are capable of overwhelming a web server in a minimal duration. The request headers patterns were explained supported by a critical analysis to provide the outcome of this paper.</jats:p>

Distributed Denial of Service Attack in HTTP/2: Review on Security Issues and Future Challenges

“…It is also because the request header is not mandatory to be given, which allowed network intruders to generate the forged headers as legitimate HTTP requests. Jaafar et al [13] also demonstrated this weaknesses by using used eight different types of attacks in which the results showed that, there are similarities and differences in the fake request headers in both internal and external networks, thus, this can make HTTP requests appear authentic when launching HTTP DDoS attacks. In fact, it was highlighted that the request header needs a major improvement in terms of security to prevent the request header from being easily manipulated by malicious attackers.…”

Identification of Distributed Denial of Services Anomalies by Using Combination of Entropy and Sequential Probabilities Ratio Test Methods

“…The detection of DDoS attacks is very challenging [ 2 ]. DDoS attacks are kind of cyber-attack that target a specific machine or server and lead them to stop providing their services to the devices that are connected to this machine.…”