The shrew or RoS attacks are low-rate DDoS attacks that degrade the QoS to end systems slowly but not to deny the services completely. These attacks are more difficult to detect than the flooding type of DDoS attacks. This paper explores the energy distributions of Internet traffic flows in frequency domain. Normal TCP traffic flows present some form of periodicity because of TCP protocol behavior. The results reveal that normal TCP flows can be segregated from malicious flows using some energy distribution properties. The paper discovers the spectral shifting of attack flows from that of normal flows. Combining flow-level spectral analysis with sequential hypothesis testing, a novel defense scheme against shrew DDoS or RoQ (reduction-of-service) attacks is proposed.
Did you find this white paper useful?
12 out of 23 users found this white paper useful
Related white papers
Introduction to TCP/IP
Microsoft Windows NT version 4.0 includes features and components for Transmission Control Protocol/Internet Protocol (TCP/IP)-based connectivity. TCP/IP is used on the worldwide Internet and is also widely deployed in private...
Integrated Trade Systems, Inc. Is Able to Track and Ensure Timely Purchase Order Delivery by Using Biscom Delivery Server to Send Files Securely
Integrated Trade Systems (ITS) provides procurement services for Mexican-owned PEtroleos MEXicanos (PEMEX), the sixth largest oil company in the world. ITS needed a fast, efficient way for PEMEX's buyers to...
Stewart Title Guaranty Company Reduces Courier and FTP Costs Using Biscom Delivery Server for Timely, Accurate, and Trackable Distribution of Software to Their Customers
Stewart delivers state-of-the-art real estate information services, software, and solutions to its clients. Since federal and state laws are in constant flux, Stewart's customers require regular software updates to stay...
Top 10 Questions to Ask When Choosing a File Transfer Solution
Transferring, securing, and collaborating on large files and documents in today's enterprise business environment has led users to demand better, more manageable file transfer methods than the traditional FTP, email,...
By Using Biscom Delivery Server to Send Large Files Both Internally and to Their Clients, John Wieland Homes and Neighborhoods Reduces Help Desk Calls, Eliminates Dependency on Email Attachments, and Secures Company Data
Since John Wieland (JW) Homes develops property, they have three groups that constantly need to access, share and edit large files. Since the company has a strict 10MB email attachment...
Large West Coast Law Firm Uses Biscom Delivery Server to Ensure Client Privacy and Save on Courier Costs
One of the largest law firms in the United States with more than 500 attorneys and nearly 50 offices in major metropolitan areas was primarily focused on ensuring privacy protection...
The Wake County Public School System Uses Biscom Delivery Server (BDS) To: Ensure Privacy of Student and Employee Files, Comply With the Family Educational Rights and Privacy Act and Eliminate Transmission of Unsecured Email Transmissions
The Wake County Public School System (WCPSS) is one of the twenty largest school districts in the nation. WCPSS's challenge primarily focused on ensuring privacy protection of confidential information. Despite...
