Live Baiting for Service-Level DoS Attackers

Abstract. Denial-of-Service (DoS) attacks remain a challenging problem in the Internet. In a DoS attack the attacker is attempting to make a resource unavailable to its intended legitimate clients. Furthermore, in order to employ massive attack power, the attacker usually launches a distributed denial of service (DDoS) attack, in which several subordinate hosts attack the target in concert. Denial-of-service attacks can result in significant loss of time and money for many organizations, thus, many defense mechanisms have been proposed. In this paper we propose a novel approach for detecting DoS attackers, which we call live baiting. Live baiting leverages group-testing theory, which aims at discovering defective members in a population using the minimum number of “tests”, to detect attackers with the minimum state. We analyzed the coverage, effectiveness, in terms of false positive and false negative probabilities, and efficiency, in terms of memory, message overhead, and comput...

• Type: Conference
• Year: 2008
• Where: INFOCOM
• Authors: Sherif M. Khattab, Sameh Gobriel, Rami G. Melhem, Daniel Mossé
• Keywords: Communications, DoS Attackers, INFOCOM 2008, Live Baiting, Live Baiting Leverages