Change-Point Detection for Voice over IP Denial of Service Attacks
Konferenz: KiVS 2007 - Kommunikation in Verteilten Systemen - 15. ITG/GI-Fachtagung
26.02.2007 - 02.03.2007 in Bern, Schweiz
Tagungsband: KiVS 2007
Seiten: 7Sprache: EnglischTyp: PDF
Persönliche VDE-Mitglieder erhalten auf diesen Artikel 10% Rabatt
Autoren:
Rebahi, Yacine (Fraunhofer Institut, Kaiserin Augusta Allee 31, 10589 Berlin, Germany)
Sisalem, Dorgham (Tekelec, Borsigturm 11, 13507 Berlin, Germany)
Inhalt:
This paper describes the use of the nonparametric Cumulative Sums (CUSUM) algorithm for detecting flooding attacks against SIP infrastructures. The efficiency of this detection mechanism is validated using trace-driven simulations. Using an appropriate function, the nonparametric CUSUM equations are transformed to some parametric CUSUM equations for a Poisson model. This allowed us to verify the accuracy of the results provided by the experiments.