On measuring the impact of DDoS botnets

作者: Arne Welzel , Christian Rossow , Herbert Bos

DOI: 10.1145/2592791.2592794

关键词: Denial-of-service attackBotnetComputer networkComputer securityApplication layer DDoS attackTrinooComputer scienceServer

摘要: Miscreants use DDoS botnets to attack a victim via large number of malware-infected hosts, combining the bandwidth individual PCs. Such have thus high potential render targeted services unavailable. However, actual impact attacks by has never been evaluated. In this paper, we monitor C&C servers 14 DirtJumper and Yoddos record targets these networks. We then aim evaluate availability victims, using variety measurements such as TCP response times analyzing HTTP content. show that more than 65% victims are severely affected attacks, while also few likely failed.

参考文章(4)
Armin Büscher, Thorsten Holz, Tracking DDoS attacks: insights into the business of disrupting the web usenix conference on large scale exploits and emergent threats. pp. 8- 8 ,(2012)
Christian Rossow, Christian J. Dietrich, Herbert Bos, Lorenzo Cavallaro, Maarten van Steen, Felix C. Freiling, Norbert Pohlmann, Sandnet: network traffic analysis of malicious software european conference on computer systems. pp. 78- 88 ,(2011) , 10.1145/1978672.1978682
Jelena Mirkovic, Peter Reiher, A taxonomy of DDoS attack and DDoS defense mechanisms acm special interest group on data communication. ,vol. 34, pp. 39- 53 ,(2004) , 10.1145/997150.997156
Stephen M. Specht, Ruby B. Lee, Distributed Denial of Service: Taxonomies of Attacks, Tools and Countermeasures ISCA PDCS. pp. 543- 550 ,(2004)