DDoS detection based on traffic profiles

2006

Masteroppgave i informasjons- og kommunikasjonsteknologi 2006 - Høgskolen i Agder, Grimstad Distributed denial of service attacks has become a significant threat against Internet resources. These attacks aims at disrupting the victim’s service by commanding a massive number of compromised sources to send useless data towards the victim. The distributed nature of these attacks usually makes mitigation a time consuming process, and the risk of collateral damage is high. In this thesis I propose amethod for detecting and identifying the sources of DDoS attacks based on research in the field of network traffic measurement and source IP address monitoring. The method consists of two parts; a net…