Early Detection of LDoS Attack using SNMP MIBs

School of Computer Science and Engineering, Vellore Institute of Technology, Chennai, India

^* Corresponding author: gayathri.r@vit.ac.in

Abstract

Early detection of Denial of Service (DoS) attacks are given more emphasizing due to its adverse effects on disrupting the services of legitimate users. LDoS attack is one among the DoS category which floods the target at ideal rate to keep the connections open for longer duration. Traditional defense measures are inadequate to filter due to its less traffic volume. The current works focus on either empirical studies or signal processing models to capture the behavioural characteristics of LDoS based on TCP’s congestion control and timeout mechanism but none carries out detection at a faster timestamp. Early detection solutions are the main focus as it could scale up the revenue losses in today’s online application issues. Hence our model is based on Simple Network Management Protocol (SNMP), through which the early detection of LDoS attacks is carried out. The relevant detection metrics are identified through theoretical validation of SNMP MIBs and existing dataset analysis. Experimental simulations illustrate the LDoS detection efficiency and the same has been validated for theoretically.