Skip to main content

Dynamic Detection and Prevention of Denial of Service and Peer Attacks with IP Address Processing and Scrutinizing

  • Conference paper
  • First Online:
Recent Findings in Intelligent Computing Techniques

Part of the book series: Advances in Intelligent Systems and Computing ((AISC,volume 707))

  • 833 Accesses

Abstract

Security has undeniably been a major concern for people in all aspects and implementations of computer science. Be it a website, database, or any other software, every application needs security to prevent any possible attack on them. One of the many popular attacks is Denial of Service (DoS), which is widely used to slow down, and even stop, many applications from processing any request. In this paper, we present a method, an algorithm, which can essentially prevent DoS and peer attacks like Distributed Denial of Service (DDoS). We use storage Data Structures like tries and process IP Addresses as they make any new request to the server. In multiple stages of IP processing and IP scrutinizing, any possible malicious request made by potential DoS attackers will be detected and, essentially, all normal requests will be separated, allowing them normal access, whereas, the attackers will be denied access to the application.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 129.00
Price excludes VAT (USA)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 169.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

References

  1. Wang, X., Reiter, M.K.: Mitigating bandwidth-exhaustion attacks using congestion puzzles. In: Proceedings of the 11th ACM Conference on Computer and Communications Security (CCS), pp. 257–267 (2004)

    Google Scholar 

  2. Kumar, M., Kumar, N.: Detection and prevention of ddos attack in manet’s using disable ip broadcast technique. Int. J. Appl. Innov. Eng. Manag. 2(7), 29–36 (2013)

    Google Scholar 

  3. Kalra, P., Pandey, K., Varshney, A.: Comparative analysis of SYN flooding attacks on TCP connections. Int. J. Inf. Comput. Technol. 4(3), 279–284 (2014)

    Google Scholar 

  4. Wang, H., Zhang, D., Shin, K.G.: Detecting SYN flooding attacks. In: Proceedings of the 21st Annual Joint Conference of the IEEE Computer and Communications Societies (2002)

    Google Scholar 

  5. Kavisankar L., Chellappan C.: A mitigation model for TCP SYN flooding with IP spoofing. Proceedings of the 2011 IEEE International Conference on Recent Trends in Information Technology (2011)

    Google Scholar 

  6. Specht, S.M., Lee, R.B.: Distributed denial of service: taxonomies of attacks, tools, and countermeasures. In: Proceedings of the ICSA 17th International Conference on Parallel and Distributed Computing Systems (PDCS 2004), 2004 International Workshop on Security in Parallel and Distributed Systems, pp. 543–550 (2004)

    Google Scholar 

  7. Askitis, N., Sinha, R.: HAT-trie: A Cache-conscious trie-based data Structure for strings. In: Proceedings of the 30th Australasian Conference on Computer, vol. 62, pp. 97–105 (2007)

    Google Scholar 

  8. Rao, J., Ross, K.A..: Making b + -trees cache conscious in main memory. In: Proceedings of 2000 ACM SIGMOD International Conference on Management of Data, vol. 29, no. 2, pp. 475–486 (2000)

    Article  Google Scholar 

  9. Akiwate, B., Desai, M., Surpurmath, S., Khot, R., Power, D.: Detection and prevention of DoS attack. Int. J. Adv. Res. Comput. Sci. Softw. Eng. 6(5), 639–642 (2016)

    Google Scholar 

  10. Bhuyan, M.H., Kashyap, H.J., Bhattacharyya, D.K., Kalita, J.K.: Detecting Distributed Denial of Service Attacks: Methods. Tools Future Dir. Comput. J. 57(4), 537–556 (2014)

    Google Scholar 

  11. Bodon, F.: A Trie-based APRIORI implementation for mining frequent item sequences. In: Proceedings of the 1st International Workshop on Open Source Data Mining: Frequent Pattern Mining Implementations, pp. 56–65 (2005)

    Google Scholar 

Download references

Author information

Authors and Affiliations

Authors

Corresponding author

Correspondence to Aditya Vikram Agarwal .

Editor information

Editors and Affiliations

Rights and permissions

Reprints and permissions

Copyright information

© 2019 Springer Nature Singapore Pte Ltd.

About this paper

Check for updates. Verify currency and authenticity via CrossMark

Cite this paper

Agarwal, A.V., Verma, N., Saha, S., Kumar, S. (2019). Dynamic Detection and Prevention of Denial of Service and Peer Attacks with IP Address Processing and Scrutinizing. In: Sa, P., Bakshi, S., Hatzilygeroudis, I., Sahoo, M. (eds) Recent Findings in Intelligent Computing Techniques . Advances in Intelligent Systems and Computing, vol 707. Springer, Singapore. https://doi.org/10.1007/978-981-10-8639-7_15

Download citation

Publish with us

Policies and ethics