A practical mechanism to counteract DNS amplification DDoS attacks

科研成果详情

题名	A practical mechanism to counteract DNS amplification DDoS attacks
作者	Ye, Xi1,2; Ye, Yiru1
发表日期	2013
发表期刊	Journal of Computational Information Systems 影响因子和分区
语种	英语
原始文献类型	Journal article (JA)
关键词	Amplification Attack Bandwidth consumption DDoS DDoS Attack DNS server Firewall rules IP addresss Network administrator Practical method Query message Real time Recursive UDP orresponding author
摘要	DNS amplification attacks utilize IP address spoofing and large numbers of open recursive DNS servers to perform the bandwidth consumption attack. This kind of attack takes advantage of the face that DNS response messages may be substantially larger than DNS query messages. In this paper, we present a simple and practical method that is able to distinguish between authentic and bogus DNS replies. The proposed scheme, acts proactively by monitoring in real time DNS traffic and alerting network administrators when necessary. Once the attack is confirmed, our approach is then activated to filter out all the illegitimate DNS responses by automatically updating firewall rules to ban bogus packets. Our analysis and the corresponding experimental results show that our approach is effective in both the detecting and filtering phases, when the specific attack unfolds. © 2013 Binary Information Press.
出版者	Binary Information Press, P.O. Box 162, Bethel, CT 06801-0162, United States
ISSN	1553-9105
卷号	9 期号:1 页码:265-272
页数	21
收录类别	EI ; SCOPUS
EI入藏号	20130515954110
EI主题词	Internet protocols
URL	查看原文
SCOPUSEID	2-s2.0-84872761790
通讯作者地址	[Ye, Yiru]Department of Computer Science,Wenzhou Medical College,China
Scopus学科分类	Information Systems;Computer Science Applications
文献类型	期刊论文
条目标识符	https://kms.wmu.edu.cn/handle/3ETUA0LF/34948
专题	第一临床医学院（信息与工程学院）、附属第一医院_计算机与信息管理系
通讯作者	Ye, Yiru
作者单位	1.Department of Computer Science,Wenzhou Medical College,China; 2.School of Software,Sun Yat-Sen University,China
第一作者单位	第一临床医学院（信息与工程学院）、附属第一医院_计算机与信息管理系
通讯作者单位	第一临床医学院（信息与工程学院）、附属第一医院_计算机与信息管理系
第一作者的第一单位	第一临床医学院（信息与工程学院）、附属第一医院_计算机与信息管理系
推荐引用方式 GB/T 7714	Ye, Xi,Ye, Yiru. A practical mechanism to counteract DNS amplification DDoS attacks[J]. Journal of Computational Information Systems,2013,9(1):265-272.
APA	Ye, Xi, & Ye, Yiru. (2013). A practical mechanism to counteract DNS amplification DDoS attacks. Journal of Computational Information Systems, 9(1), 265-272.
MLA	Ye, Xi,et al."A practical mechanism to counteract DNS amplification DDoS attacks".Journal of Computational Information Systems 9.1(2013):265-272.