A Low-rate DDoS Strategy for Unknown Bottleneck Link Characteristics
A Low-rate DDoS Strategy for Unknown Bottleneck Link Characteristics
复制标题
DOI：
10.1109/percomworkshops51409.2021.9430992
复制
发表时间：
2021-03
期刊：
影响因子：
--
通讯作者：
Yuta Takahashi;H. Inamura;Yoshitaka Nakamura
中科院分区：
文献类型：
--
作者：
Yuta Takahashi;H. Inamura;Yoshitaka Nakamura
低速率分布式拒绝服务（LDDoS）攻击利用TCP/IP协议和路由队列管理机制中的漏洞，降低TCP链路的质量。在大多数经典的基于RTO的LDDoS攻击（又名：Shrew攻击）中，攻击脉冲的理想传输速率大于或等于目标瓶颈链路的带宽，并且假设攻击者能够设置适当大的传输速率。然而，在现实世界的攻击场景中，攻击者并不总是知道目标瓶颈链路的带宽。在本文中，我们提出了一种策略，执行低速率的泼妇DDoS攻击的瓶颈链路的未知带宽和缓冲区大小的情况下，针对住宅网络。所提出的攻击策略降低下游流量从一个特定的服务到目标网络所需的质量，同时保持攻击流量隐身探索性地增加脉冲率，同时估计攻击效果，通过建立僵尸网络中的住宅网络。
Low-rate Distributed Denial of Service (LDDoS) attacks degrade the quality of TCP links with low average traffic by exploiting vulnerabilities in the TCP/IP protocol and routing queue management mechanisms. The ideal transmission rate of the attack pulse in the most classical RTO-based LDDoS attacks (aka: Shrew attacks) is greater than or equal to the bandwidth of the target bottleneck link, and it is assumed that the attacker is able to set a suitably large transmission rate. However, the attacker does not always know the bandwidth of the target bottleneck link in real-world attack scenarios. In this paper, we propose a strategy for executing a low-rate shrew DDoS attack against a bottleneck link of unknown bandwidth and buffer size under a scenario targeting a residential network. The proposed attack strategy degrades downstream traffic from a specific service to the target network to the desired quality while keeping the attack traffic stealthy by exploratively increasing the pulse rate while estimating the attack effect by building bot nodes in the residential network.