A behavior-based detection method for outbreaks of low-rate attacks

Yaokai Feng; Yoshiaki Hori; Kouichi Sakurai; Jun'Ichi Takeuchi

doi:10.1109/SAINT.2012.50

A behavior-based detection method for outbreaks of low-rate attacks

Yaokai Feng, Yoshiaki Hori, Kouichi Sakurai, Jun'Ichi Takeuchi

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

7 Citations (Scopus)

Abstract

Low-rate attacks can conceal their traffic because their packets are at very low rates, which make it easy to bury themselves into the normal traffic. Thus, although a number of volume-based detection techniques are able to identify anomalies that trigger significant changes in traffic volume, they are not applicable to detecting low-rate attacks. Because of this, the problem of low-rate attacks has been attracting many researchers in the community of network security. In this study, for the first time we propose a method based on the normal behavior mode of traffic to detect outbreaks of low-rate attacks. The experimental result indicates that our proposal is efficient.

Original language	English
Title of host publication	Proceedings - 2012 IEEE/IPSJ 12th International Symposium on Applications and the Internet, SAINT 2012
Pages	267-272
Number of pages	6
DOIs	https://doi.org/10.1109/SAINT.2012.50
Publication status	Published - 2012
Event	2012 IEEE/IPSJ 12th International Symposium on Applications and the Internet, SAINT 2012 - Izmir, Turkey Duration: Jul 16 2012 → Jul 20 2012

Publication series

Name	Proceedings - 2012 IEEE/IPSJ 12th International Symposium on Applications and the Internet, SAINT 2012

Other

Other	2012 IEEE/IPSJ 12th International Symposium on Applications and the Internet, SAINT 2012
Country/Territory	Turkey
City	Izmir
Period	7/16/12 → 7/20/12

All Science Journal Classification (ASJC) codes

Computer Networks and Communications

Access to Document

10.1109/SAINT.2012.50

Cite this

Feng, Y., Hori, Y., Sakurai, K., & Takeuchi, JI. (2012). A behavior-based detection method for outbreaks of low-rate attacks. In Proceedings - 2012 IEEE/IPSJ 12th International Symposium on Applications and the Internet, SAINT 2012 (pp. 267-272). Article 6305296 (Proceedings - 2012 IEEE/IPSJ 12th International Symposium on Applications and the Internet, SAINT 2012). https://doi.org/10.1109/SAINT.2012.50

A behavior-based detection method for outbreaks of low-rate attacks. / Feng, Yaokai; Hori, Yoshiaki; Sakurai, Kouichi et al.
Proceedings - 2012 IEEE/IPSJ 12th International Symposium on Applications and the Internet, SAINT 2012. 2012. p. 267-272 6305296 (Proceedings - 2012 IEEE/IPSJ 12th International Symposium on Applications and the Internet, SAINT 2012).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Feng, Y, Hori, Y, Sakurai, K & Takeuchi, JI 2012, A behavior-based detection method for outbreaks of low-rate attacks. in Proceedings - 2012 IEEE/IPSJ 12th International Symposium on Applications and the Internet, SAINT 2012., 6305296, Proceedings - 2012 IEEE/IPSJ 12th International Symposium on Applications and the Internet, SAINT 2012, pp. 267-272, 2012 IEEE/IPSJ 12th International Symposium on Applications and the Internet, SAINT 2012, Izmir, Turkey, 7/16/12. https://doi.org/10.1109/SAINT.2012.50

Feng Y, Hori Y, Sakurai K , Takeuchi JI. A behavior-based detection method for outbreaks of low-rate attacks. In Proceedings - 2012 IEEE/IPSJ 12th International Symposium on Applications and the Internet, SAINT 2012. 2012. p. 267-272. 6305296. (Proceedings - 2012 IEEE/IPSJ 12th International Symposium on Applications and the Internet, SAINT 2012). doi: 10.1109/SAINT.2012.50

@inproceedings{4f2c2698208c4b6ba1bb7e6cc5f5fdfd,

title = "A behavior-based detection method for outbreaks of low-rate attacks",

abstract = "Low-rate attacks can conceal their traffic because their packets are at very low rates, which make it easy to bury themselves into the normal traffic. Thus, although a number of volume-based detection techniques are able to identify anomalies that trigger significant changes in traffic volume, they are not applicable to detecting low-rate attacks. Because of this, the problem of low-rate attacks has been attracting many researchers in the community of network security. In this study, for the first time we propose a method based on the normal behavior mode of traffic to detect outbreaks of low-rate attacks. The experimental result indicates that our proposal is efficient.",

author = "Yaokai Feng and Yoshiaki Hori and Kouichi Sakurai and Jun'Ichi Takeuchi",

year = "2012",

doi = "10.1109/SAINT.2012.50",

language = "English",

isbn = "9780769547374",

series = "Proceedings - 2012 IEEE/IPSJ 12th International Symposium on Applications and the Internet, SAINT 2012",

pages = "267--272",

booktitle = "Proceedings - 2012 IEEE/IPSJ 12th International Symposium on Applications and the Internet, SAINT 2012",

note = "2012 IEEE/IPSJ 12th International Symposium on Applications and the Internet, SAINT 2012 ; Conference date: 16-07-2012 Through 20-07-2012",

}

TY - GEN

T1 - A behavior-based detection method for outbreaks of low-rate attacks

AU - Feng, Yaokai

AU - Hori, Yoshiaki

AU - Sakurai, Kouichi

AU - Takeuchi, Jun'Ichi

PY - 2012

Y1 - 2012

N2 - Low-rate attacks can conceal their traffic because their packets are at very low rates, which make it easy to bury themselves into the normal traffic. Thus, although a number of volume-based detection techniques are able to identify anomalies that trigger significant changes in traffic volume, they are not applicable to detecting low-rate attacks. Because of this, the problem of low-rate attacks has been attracting many researchers in the community of network security. In this study, for the first time we propose a method based on the normal behavior mode of traffic to detect outbreaks of low-rate attacks. The experimental result indicates that our proposal is efficient.

AB - Low-rate attacks can conceal their traffic because their packets are at very low rates, which make it easy to bury themselves into the normal traffic. Thus, although a number of volume-based detection techniques are able to identify anomalies that trigger significant changes in traffic volume, they are not applicable to detecting low-rate attacks. Because of this, the problem of low-rate attacks has been attracting many researchers in the community of network security. In this study, for the first time we propose a method based on the normal behavior mode of traffic to detect outbreaks of low-rate attacks. The experimental result indicates that our proposal is efficient.

UR - http://www.scopus.com/inward/record.url?scp=84867944943&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=84867944943&partnerID=8YFLogxK

U2 - 10.1109/SAINT.2012.50

DO - 10.1109/SAINT.2012.50

M3 - Conference contribution

AN - SCOPUS:84867944943

SN - 9780769547374

T3 - Proceedings - 2012 IEEE/IPSJ 12th International Symposium on Applications and the Internet, SAINT 2012

SP - 267

EP - 272

BT - Proceedings - 2012 IEEE/IPSJ 12th International Symposium on Applications and the Internet, SAINT 2012

T2 - 2012 IEEE/IPSJ 12th International Symposium on Applications and the Internet, SAINT 2012

Y2 - 16 July 2012 through 20 July 2012

ER -

A behavior-based detection method for outbreaks of low-rate attacks

Abstract

Publication series

Other

All Science Journal Classification (ASJC) codes

Access to Document

Other files and links

Fingerprint

Cite this