Quantifying the Spectrum of Denial-of-Service Attacks through Internet Backscatter
Quantifying the Spectrum of Denial-of-Service Attacks through Internet Backscatter
复制标题
通过互联网反向散射量化拒绝服务攻击的范围
DOI：
--
复制
发表时间：
2017
期刊：
影响因子：
--
通讯作者：
C. Doerr
中科院分区：
文献类型：
--
作者：
Norbert Blenn;Vincent Ghiëtte;C. Doerr
拒绝服务攻击（DoS）是当前计算机网络，特别是Internet中可观察到的主要威胁。在这种攻击中，恶意方试图破坏服务器上运行的服务，或者耗尽受害者的容量或带宽，以阻碍客户有效地使用服务。最近的报告显示，分布式拒绝服务（DDoS）攻击的总数正在稳步增长，“巨型攻击”的峰值达到了数百千兆比特/秒（Gbps）。在本文中，我们将提供超出媒体报道的这些异常值的DDoS攻击的规模和持续时间的量化。我们发现这些大型攻击确实存在，但大部分攻击实际上只是这些频繁报告值的一小部分。我们进一步表明，使用令人惊讶的小型望远镜收集有意义的反向散射痕迹是可行的，从而使更广泛的受众能够进行攻击情报研究。
Denial of Service (DoS) attacks are a major threat currently observable in computer networks and especially the Internet. In such an attack a malicious party tries to either break a service, running on a server, or exhaust the capacity or bandwidth of the victim to hinder customers to effectively use the service. Recent reports show that the total number of Distributed Denial of Service (DDoS) attacks is steadily growing with "mega-attacks" peaking at hundreds of gigabit/s (Gbps). In this paper, we will provide a quantification of DDoS attacks in size and duration beyond these outliers reported in the media. We find that these mega attacks do exist, but the bulk of attacks is in practice only a fraction of these frequently reported values. We further show that it is feasible to collect meaningful backscatter traces using surprisingly small telescopes, thereby enabling a broader audience to perform attack intelligence research.