A Discrete Event Simulator for Extensive Defense Mechanism for Denial of Service Attacks Analysis

Tanha Tanha

doi:10.3844/ajassp.2012.909.916

Abstract

Problem statement: Seeking for defense mechanisms against low rate De nial of Service (DoS) attacks as a new generation of DoS attacks ha s received special attention during recent years. A s a decisive factor, evaluating the performance of th e offered mitigation techniques based on different metrics for determining the viability and ability o f these countermeasures requires more research. Approach: The development of a new generalized discrete event simulator has been deliberated in detail. The research conducted places high emphasis on the benefits of creating a customized discrete event simulator for the analysis of security and in particular the DoS attacks. The simulator possesse s a niche in terms of the small scale, low execution ti me, portability and ease of use. The attributes and mechanism of the developed simulator is complemented with the proposed framework. Results: The simulator has been extensively evaluated and has pr oven to provide an ideal tool for the analysis and exploration of DoS attacks. In-depth analysis is en abled by this simulator for creating multitudes of defense mechanisms against HTTP low rate DoS attacks. The acquired results from the simulation tool have been compared against a simulator from the same domain. Subsequently, it enables the validation of developed simulator utilizing selected performan ce metrics including mean in-system time, average delay and average buffer size. Conclusion: The proposed simulator serves as an efficient and scalable performance analysis tool for the analysis of HTTP low rate DoS attack defense mechanism. Future work can encompass the development of discrete event simulators for analysis of other security issues such as Intrusion Detection Systems.

Highlights

Denial of Service (DoS) attacks is considered as one of the most high-profile security threats to the network and communication systems
The proposed and developed simulator analysis on a queue-based scheme was proposed to in this research has embarked in providing precision reduce malicious packet flow of distributed DoS of results as those achieved by NS2, whilst striking an attacks
In this research we considered multiple attack threads that share information pertaining to connections to the server

Summary

INTRODUCTION

Denial of Service (DoS) attacks is considered as one of the most high-profile security threats to the network and communication systems. The completion of the tout, period, the established periodic and it is tough to observe and detect such connection will be terminated and seized its respective attacks in time domain They employed position in the HTTP service queue will be released to parameters such as channel utilization ratio, packet be consumed by other web users (Macia-Fernandez et loss ratio and average congestion window to study al., 2008). The proposed and developed simulator analysis on a queue-based scheme was proposed to in this research has embarked in providing precision reduce malicious packet flow of distributed DoS of results as those achieved by NS2, whilst striking an attacks In both of the former and latter cases, ideal balance of ease of use.

MATERIALS AND METHODS

RESULTS AND DISCUSSION

CONCLUSION