We propose a methodology for utilizing network management systems for the early detection of distributed denial of service (DDoS) attacks. Although there are quite a large number of events that are prior to an attack ...
详细信息
ISBN:
(纸本)0780367197
We propose a methodology for utilizing network management systems for the early detection of distributed denial of service (DDoS) attacks. Although there are quite a large number of events that are prior to an attack (e.g. suspicious log-ons, start of processes, addition of new files, sudden shifts in traffic, etc.), in this work we depend solely on information from MIB (management information base) traffic variables collected from the systems participating in the attack. Three types of DDoS attacks were effected on a research test bed, and MIB variables were recorded. Using these datasets, we show how there are indeed MIB-based precursors of DDoS attacks that render it possible to detect them before the target is shut down. Most importantly, we describe how the relevant MIB variables at the attacker can be extracted automatically using statistical tests for causality. It is shown that statistical tests applied in the time series of MIB traffic at the target and the attacker are effective in extracting the correct variables for monitoring in the attacker machine. Following the extraction of these key variables at the attacker, it is shown that an anomaly detection scheme, based on a simple model of the normal rate of change of the key MIBs can be used to determine statistical signatures of attacking behavior. These observations suggest the possibility of an entirely automated procedure centered on network management systems for detecting precursors of distributed denial of service attacks, and responding to them.
Due to the recent growth of digital multimedia transmissions on the Internet, the need for the intellectual property rights protection of multimedia information, like images, music and videos, has become more and more...
详细信息
Collaborative services and applications are becoming increasingly important and complex, and have requirements for real-time multimedia support, high bandwidth availability and low delays. The collaborative applicatio...
详细信息
Collaborative services and applications are becoming increasingly important and complex, and have requirements for real-time multimedia support, high bandwidth availability and low delays. The collaborative application view of QoS encompasses the transport network and the end systems, as well as computational requirements. Therefore, how to coordinate and integrate collaboration management and network resource sharing efficiently and effectively is becoming more complex: a higher-level functionality is required in parallel with a satisfying performance. The functionality should satisfy the requirements of different levels of collaboration and respect a hierarchy of priorities among users and tasks. The performance, depending on the application or the network, should be sufficient for real-time information exchange, which is quite often a "heavy data exchange". We have developed a management framework to satisfy the complex functionality requirements that arise in the development of collaborative applications and services. The emphasis in designing such a framework is given on several levels of design that affect the performance of collaboration environments, the connection management, the replication management, the data management and the effective and interoperable usage of resources. Based on the proposed framework, we present a Java-based application for mission planning.
The future Internet is expected to support multicast applications with quality of service (QoS) requirements. To facilitate this, QoS multicast routing protocols are pivotal in enabling new receivers to join a multica...
详细信息
The future Internet is expected to support multicast applications with quality of service (QoS) requirements. To facilitate this, QoS multicast routing protocols are pivotal in enabling new receivers to join a multicast group. However, current routing protocols are either too restrictive in their search for a feasible path between a new receiver and the multicast tree, or burden the network with excessive overhead. We propose QMRP, a new Qos-aware multicast routing protocol. QMRP achieves scalability by significantly reducing the communication overhead in constructing a multicast tree, yet it retains a high chance of success. This is achieved by switching between single-path routing and multiple-path routing according to the current network conditions. The high-level design of QMRP makes it operable on top of any unicast routing algorithm both intra-domain and inter-domain. Its responsiveness is improved by using a termination mechanism which detects the failure as well as the success of routing without the use of timeout. In addition, QMRP always constructs loop-free multicast trees.
The Alexandria Digital Library (ADL) is one of the six digital library projects funded by NSF, DARPA, and NASA. ADL's collection and services focus on information containing georeferences: maps, images, data sets,...
The Alexandria Digital Library (ADL) is one of the six digital library projects funded by NSF, DARPA, and NASA. ADL's collection and services focus on information containing georeferences: maps, images, data sets, text, and other information sources with links to geographic locations. During this study period, three different user interfaces were developed and tested by user groups. User feedback was collected through various formal and informal approaches and the results fed back into the design and implementation cycle. This article describes the evolution of the ADL system and the effect of user evaluation on that evolution. ADL is an ongoing project; user feedback and evaluation plans for the remainder of the project are described.
It has been proved that incomplete binary trees can not be embedded onto incomplete hypercubes with both expansion-1 and dilation-1. In this paper we propose an optimal embedding algorithm to embed this issue with exp...
详细信息
It has been proved that incomplete binary trees can not be embedded onto incomplete hypercubes with both expansion-1 and dilation-1. In this paper we propose an optimal embedding algorithm to embed this issue with expansion-1, dilation-2. Our algorithm is a linear time algorithm, which is optimal in terms of time complexity. Furthermore, the embedding scheme is as desirable to be simple such that the implementation is quite easy.
An Internet-based environmentally conscious decision support tool (EcoDS) has been developed for product life cycle management. EcoDS, which is currently implemented in customized forms by various Fortune 100 companie...
详细信息
An Internet-based environmentally conscious decision support tool (EcoDS) has been developed for product life cycle management. EcoDS, which is currently implemented in customized forms by various Fortune 100 companies, involves an initial vertical streamlining step, where the significant life cycle stages and impacts are selected. Since the streamlining is performed prior to the inventory, the approach expedites data collection. Comparisons between alternative product designs or manufacturing processes are based on two metrics-financial risk (or cost) and "residual" risk-permitting organizations to retain financial data in their analyses while not having to cost uncertain estimates. For purposes of evaluation these two indicators are individually aggregated using a user- or organization-specified value system. A salient feature of EcoDS is that this output can be condensed into a single summary matrix akin to a hybrid pro forma income statement or "environmental balance sheet". The clear delineation between the tradeoffs involved in each alternative facilitates decision making by upper management. EcoDS' output also identifies key econometrics for future monitoring. A case study on painting alternatives is presented to illustrate the methodology.
The success of distance learning programs is highly dependent on the organizational environment in which they are implemented. This paper discusses how one large organization implemented and evolved a global distance ...
详细信息
The success of distance learning programs is highly dependent on the organizational environment in which they are implemented. This paper discusses how one large organization implemented and evolved a global distance learning program. The primary focus of this paper is the extraction of the perceived benefits and lessons learned during the development and use of this distance learning program. The lessons learned are generalizable and can be transferred to other organizations with appropriate attention to organizational context and environment.
暂无评论