Efficient Bloom Filter Based Destination Address Monitoring Scheme for DDoS Attack Detection 


Vol. 33,  No. 3, pp. 152-158, Mar.  2008


PDF
  Abstract

Recently, DDoS (Distributed Denial of Service) attack has emerged as one of the major threats and it's main characteristic is to send flood of data packets toward a specific victim. Thus, several attack detection schemes which monitor the destination IP address of packets have been suggested. The existing Bloom Filter based attack detection scheme is simple and can support real-time monitoring. However, since this scheme monitors the separate fields of destination IP address independently, wrong detection is comparatively high. In this paper, in order to solve this drawback, an efficient Bloom Filter based destination address monitoring scheme is proposed, which monitors not only separate fields but also relationship among separate fields. In the results of simulation, the proposed monitoring scheme outperforms the existing Bloom Filter based detection scheme. Also, to improve the correctness of detection, multi-layerd structure is proposed and the correctness of result is improved according to the number of layers and extra tables.

  Statistics
Cumulative Counts from November, 2022
Multiple requests among the same browser session are counted as one view. If you mouse over a chart, the values of data points will be shown.


  Cite this article

[IEEE Style]

K. Yoo, S. Sim, K. Han, W. So, Y. Kim, Y. Kim, "Efficient Bloom Filter Based Destination Address Monitoring Scheme for DDoS Attack Detection," The Journal of Korean Institute of Communications and Information Sciences, vol. 33, no. 3, pp. 152-158, 2008. DOI: .

[ACM Style]

Kyoung-Min Yoo, Sang-Heon Sim, Kyeong-Eun Han, Won-Ho So, Young-Sun Kim, and Young-Chon Kim. 2008. Efficient Bloom Filter Based Destination Address Monitoring Scheme for DDoS Attack Detection. The Journal of Korean Institute of Communications and Information Sciences, 33, 3, (2008), 152-158. DOI: .

[KICS Style]

Kyoung-Min Yoo, Sang-Heon Sim, Kyeong-Eun Han, Won-Ho So, Young-Sun Kim, Young-Chon Kim, "Efficient Bloom Filter Based Destination Address Monitoring Scheme for DDoS Attack Detection," The Journal of Korean Institute of Communications and Information Sciences, vol. 33, no. 3, pp. 152-158, 3. 2008.