title: Application of stochastic discrete event system framework for detection of induced low rate TCP attack.
abstract: TCP is the most widely accepted transport layer protocol. The major emphasis during the development of TCP was its functionality and efficiency. However, not much consideration was given on studying the possibility of attackers exploiting the protocol, which has lead to several attacks on TCP. This paper deals with the induced low rate TCP attack. Since the attack is relatively new, only a few schemes have been proposed to mitigate it. However, the main issues with these schemes are scalability, change in TCP header, lack of formal frameworks, etc. In this paper, we have adapted the stochastic DES framework for detecting the attack, which addresses most of these issues. We have successfully deployed and tested the proposed DES based IDS on a test bed.
authors.affiliation: Department of Computer Science & Engineering, Indian Institute of Technology, Guwahati 781039, India. Electronic address: ferdousa@gmail.com.
authors.forename: F A
authors.initials: FA
authors.lastname: Barbhuiya
authors.affiliation: Department of Computer Science & Engineering, Indian Institute of Technology, Guwahati 781039, India. Electronic address: mayank.agl@iitg.ernet.in.
authors.forename: Mayank
authors.initials: M
authors.lastname: Agarwal
authors.affiliation: Department of Computer Science & Engineering, Indian Institute of Technology, Guwahati 781039, India. Electronic address: sankethpurwar@gmail.com.
authors.forename: Sanketh
authors.initials: S
authors.lastname: Purwar
authors.affiliation: Department of Computer Science & Engineering, Indian Institute of Technology, Guwahati 781039, India. Electronic address: santoshbiswas402@yahoo.com.
authors.forename: Santosh
authors.initials: S
authors.lastname: Biswas
authors.affiliation: Department of Computer Science & Engineering, Indian Institute of Technology, Guwahati 781039, India. Electronic address: sukumar@iitg.ernet.in.
authors.forename: Sukumar
authors.initials: S
authors.lastname: Nandi
keywords: Induced low rate TCP attack; Stochastic Discrete Event System; TCP congestion avoidance algorithm; Transmission Control Protocol (TCP)