Characterizing the Impacts of Application Layer DDoS Attacks

2017 ◽  
Author(s):  
Muhui Jiang ◽  
Chenxu Wang ◽  
Xiapu Luo ◽  
MiuTung Miu ◽  
Ting Chen
Keyword(s):  
Ddos Attacks ◽  
Application Layer

HULK and DDoS Attacks in Web Applications with Detection Mechanism

2018 ◽  
Vol 6 (6) ◽  
pp. 192
Author(s):  
Amit Sharma
Keyword(s):  
Web Applications ◽  
Denial Of Service ◽  
Single Server ◽  
Distributed Denial Of Service ◽  
Ddos Attacks ◽  
Application Layer ◽  
Detection Mechanism ◽  
Plan Execution ◽  
Social Affair ◽  
Server Application

Distributed Denial of Service attacks are significant dangers these days over web applications and web administrations. These assaults pushing ahead towards application layer to procure furthermore, squander most extreme CPU cycles. By asking for assets from web benefits in gigantic sum utilizing quick fire of solicitations, assailant robotized programs use all the capacity of handling of single server application or circulated environment application. The periods of the plan execution is client conduct checking and identification. In to beginning with stage by social affair the data of client conduct and computing individual user’s trust score will happen and Entropy of a similar client will be ascertained. HTTP Unbearable Load King (HULK) attacks are also evaluated. In light of first stage, in recognition stage, variety in entropy will be watched and malevolent clients will be recognized. Rate limiter is additionally acquainted with stop or downsize serving the noxious clients. This paper introduces the FAÇADE layer for discovery also, hindering the unapproved client from assaulting the framework.

A Deep Learning Approach for Detection of Application Layer Attacks in Internet

2020 ◽  
pp. 175-188
Author(s):  
V. Punitha ◽  
C. Mala
Keyword(s):  
Deep Learning ◽  
Transport Layer ◽  
Classification Model ◽  
Learning Approach ◽  
Ddos Attacks ◽  
Application Layer ◽  
Learning Models ◽  
Technological Transformation ◽  
Application Deployment ◽  
Machine Learning Models

The recent technological transformation in application deployment, with the enriched availability of applications, induces the attackers to shift the target of the attack to the services provided by the application layer. Application layer DoS or DDoS attacks are launched only after establishing the connection to the server. They are stealthier than network or transport layer attacks. The existing defence mechanisms are unproductive in detecting application layer DoS or DDoS attacks. Hence, this chapter proposes a novel deep learning classification model using an autoencoder to detect application layer DDoS attacks by measuring the deviations in the incoming network traffic. The experimental results show that the proposed deep autoencoder model detects application layer attacks in HTTP traffic more proficiently than existing machine learning models.

Study on Auto Detecting Defence Mechanisms against Application Layer Ddos Attacks in SIP Server

2015 ◽  
Vol 10 (6) ◽  
Author(s):  
Muhammad Morshed Alam ◽  
Muhammad Yeasir Arafat ◽  
Feroz Ahmed
Keyword(s):  
Ddos Attacks ◽  
Application Layer ◽  
Defence Mechanisms ◽  
Sip Server

User Activity Based Application-Layer DoS/DDoS Attack Defense Algorithm

2015 ◽  
Vol 742 ◽  
pp. 693-697
Author(s):  
Yu Lei Tsien ◽  
Rong Li Gai
Keyword(s):  
Intrusion Detection ◽  
System Performance ◽  
Intrusion Detection Systems ◽  
Ddos Attacks ◽  
Application Layer ◽  
Network Layer ◽  
Detection Systems ◽  
Ddos Attack ◽  
User Activity ◽  
Bottleneck Resources

In application-layer DoS/DDoS attacks, malicious users attack the victim server by sending lots of legitimate requesting packages, which overwhelm the server bottleneck resources. Normal user’s request thus may not be satisfied. The traditional intrusion detection systems for network-layer cannot effectively identify this attack, and recent researches on this kind of attack are mainly for Web servers. This paper proposed a new defense algorithm based on user activity for topic-based Pub/Sub communication servers in mobile push notification systems. Users consuming system bottleneck resources the most can get high scores and thus are considered overactive. With some resource retaken strategy, overactive users’ connections will be dropped according to system performance level. Therefore, the system can get rid of latent threatens. Experiments indicated that this algorithm can identify normal and abnormal users well.

scholarly journals Performance Analysis of an Effective Approach to Protect Cloud Systems against Application Layer Based Attacks

2019 ◽  
Vol 15 (03) ◽  
pp. 82
Author(s):  
Hosam F. El-Sofany ◽  
Samir Abou El-Seoud
Keyword(s):  
Cloud Computing ◽  
Web Applications ◽  
Complexity Analysis ◽  
Denial Of Service ◽  
Ddos Attacks ◽  
Application Layer ◽  
Analysis Model ◽  
New Paradigm ◽  
Dos Attacks ◽  
Web Based

Cloud computing is a new paradigm for hosting hardware and software resources and provides a web-based services to organizations and consumers. It also provides an easy to use and on-demand access to cloud based computing resources that can be published by easy, minimal administration and with a great efficiency. Services of cloud computing are accessing and sharing through internet connection thus it is open for attacker to attack on its security. Application layer based attacks is one of Distributed Denial of Service attacks (DDoS) that can cause a big problem in cloud security. The main objective of DDoS attacks is to infect computer resources (e.g., software applications, network, CPU, etc.) and make them not working properly for the authorized users. In DDoS, the attacker tries to overload the web-based service with traffic. HTTP and XML-based DDoS attacks are founded under the application layer based category of DoS attacks. This category of attack is focused on particular web applications. The main objective of this research paper is to introduce an effective approach to protect cloud-based systems against application layer based attacks. Complexity analysis, effectiveness and performance evaluations of the presented approach are presented.  The feedbacks of the experimental results were highly promising, for protecting cloud computing systems against both DoS and DDoS attacks. Correlation analysis model is also used to validate the efficiency of the proposed approach.

Sign in / Sign up

Export Citation Format

Share Document