A collaborative approach for a source based detection of botclouds

Hammi Badis; Guillaume Doyen; Rida Khatoun

doi:10.1109/INM.2015.7140406

A collaborative approach for a source based detection of botclouds

Hammi Badis
, Guillaume Doyen
, Rida Khatoun

GSM-LASMIS

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

Abstract

Since the last years, cloud computing is playing an important role in providing high quality of IT services. However, beyond a legitimate usage, the numerous advantages it presents are now exploited by attackers, and botnets supporting DDoS attacks are among the greatest beneficiaries of this malicious use. In this paper, we present an original approach that enables a collaborative egress detection of DDoS attacks leveraged by a botcloud. We provide an early evaluation of our approach using simulations that rely on real workload traces, showing our detection system effectiveness and low overhead, as well as its support for incremental deployment in real cloud infrastructures.

Original language	English
Title of host publication	Proceedings of the 2015 IFIP/IEEE International Symposium on Integrated Network Management, IM 2015
Editors	Remi Badonnel, Jin Xiao, Shingo Ata, Filip De Turck, Voicu Groza, Carlos Raniery P. dos Santos
Publisher	Institute of Electrical and Electronics Engineers Inc.
Pages	906-909
Number of pages	4
ISBN (Electronic)	9783901882760
DOIs	https://doi.org/10.1109/INM.2015.7140406
Publication status	Published - 29 Jun 2015
Event	14th IFIP/IEEE International Symposium on Integrated Network Management, IM 2015 - Ottawa, Canada Duration: 11 May 2015 → 15 May 2015

Publication series

Name	Proceedings of the 2015 IFIP/IEEE International Symposium on Integrated Network Management, IM 2015

Conference

Conference	14th IFIP/IEEE International Symposium on Integrated Network Management, IM 2015
Country/Territory	Canada
City	Ottawa
Period	11/05/15 → 15/05/15

Access to Document

10.1109/INM.2015.7140406

Cite this

Badis, H., Doyen, G., & Khatoun, R. (2015). A collaborative approach for a source based detection of botclouds. In R. Badonnel, J. Xiao, S. Ata, F. De Turck, V. Groza, & C. R. P. dos Santos (Eds.), Proceedings of the 2015 IFIP/IEEE International Symposium on Integrated Network Management, IM 2015 (pp. 906-909). Article 7140406 (Proceedings of the 2015 IFIP/IEEE International Symposium on Integrated Network Management, IM 2015). Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/INM.2015.7140406

Badis, Hammi ; Doyen, Guillaume ; Khatoun, Rida. / A collaborative approach for a source based detection of botclouds. Proceedings of the 2015 IFIP/IEEE International Symposium on Integrated Network Management, IM 2015. editor / Remi Badonnel ; Jin Xiao ; Shingo Ata ; Filip De Turck ; Voicu Groza ; Carlos Raniery P. dos Santos. Institute of Electrical and Electronics Engineers Inc., 2015. pp. 906-909 (Proceedings of the 2015 IFIP/IEEE International Symposium on Integrated Network Management, IM 2015).

@inproceedings{8e62b4d8500941ec8cd446ad0d385354,

title = "A collaborative approach for a source based detection of botclouds",

abstract = "Since the last years, cloud computing is playing an important role in providing high quality of IT services. However, beyond a legitimate usage, the numerous advantages it presents are now exploited by attackers, and botnets supporting DDoS attacks are among the greatest beneficiaries of this malicious use. In this paper, we present an original approach that enables a collaborative egress detection of DDoS attacks leveraged by a botcloud. We provide an early evaluation of our approach using simulations that rely on real workload traces, showing our detection system effectiveness and low overhead, as well as its support for incremental deployment in real cloud infrastructures.",

author = "Hammi Badis and Guillaume Doyen and Rida Khatoun",

note = "Publisher Copyright: {\textcopyright} 2015 IEEE.; 14th IFIP/IEEE International Symposium on Integrated Network Management, IM 2015 ; Conference date: 11-05-2015 Through 15-05-2015",

year = "2015",

month = jun,

day = "29",

doi = "10.1109/INM.2015.7140406",

language = "English",

series = "Proceedings of the 2015 IFIP/IEEE International Symposium on Integrated Network Management, IM 2015",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

pages = "906--909",

editor = "Remi Badonnel and Jin Xiao and Shingo Ata and \{De Turck\}, Filip and Voicu Groza and \{dos Santos\}, \{Carlos Raniery P.\}",

booktitle = "Proceedings of the 2015 IFIP/IEEE International Symposium on Integrated Network Management, IM 2015",

}

Badis, H, Doyen, G & Khatoun, R 2015, A collaborative approach for a source based detection of botclouds. in R Badonnel, J Xiao, S Ata, F De Turck, V Groza & CRP dos Santos (eds), Proceedings of the 2015 IFIP/IEEE International Symposium on Integrated Network Management, IM 2015., 7140406, Proceedings of the 2015 IFIP/IEEE International Symposium on Integrated Network Management, IM 2015, Institute of Electrical and Electronics Engineers Inc., pp. 906-909, 14th IFIP/IEEE International Symposium on Integrated Network Management, IM 2015, Ottawa, Canada, 11/05/15. https://doi.org/10.1109/INM.2015.7140406

A collaborative approach for a source based detection of botclouds. / Badis, Hammi; Doyen, Guillaume; Khatoun, Rida.
Proceedings of the 2015 IFIP/IEEE International Symposium on Integrated Network Management, IM 2015. ed. / Remi Badonnel; Jin Xiao; Shingo Ata; Filip De Turck; Voicu Groza; Carlos Raniery P. dos Santos. Institute of Electrical and Electronics Engineers Inc., 2015. p. 906-909 7140406 (Proceedings of the 2015 IFIP/IEEE International Symposium on Integrated Network Management, IM 2015).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - A collaborative approach for a source based detection of botclouds

AU - Badis, Hammi

AU - Doyen, Guillaume

AU - Khatoun, Rida

PY - 2015/6/29

Y1 - 2015/6/29

N2 - Since the last years, cloud computing is playing an important role in providing high quality of IT services. However, beyond a legitimate usage, the numerous advantages it presents are now exploited by attackers, and botnets supporting DDoS attacks are among the greatest beneficiaries of this malicious use. In this paper, we present an original approach that enables a collaborative egress detection of DDoS attacks leveraged by a botcloud. We provide an early evaluation of our approach using simulations that rely on real workload traces, showing our detection system effectiveness and low overhead, as well as its support for incremental deployment in real cloud infrastructures.

AB - Since the last years, cloud computing is playing an important role in providing high quality of IT services. However, beyond a legitimate usage, the numerous advantages it presents are now exploited by attackers, and botnets supporting DDoS attacks are among the greatest beneficiaries of this malicious use. In this paper, we present an original approach that enables a collaborative egress detection of DDoS attacks leveraged by a botcloud. We provide an early evaluation of our approach using simulations that rely on real workload traces, showing our detection system effectiveness and low overhead, as well as its support for incremental deployment in real cloud infrastructures.

U2 - 10.1109/INM.2015.7140406

DO - 10.1109/INM.2015.7140406

M3 - Conference contribution

AN - SCOPUS:84942645338

T3 - Proceedings of the 2015 IFIP/IEEE International Symposium on Integrated Network Management, IM 2015

SP - 906

EP - 909

BT - Proceedings of the 2015 IFIP/IEEE International Symposium on Integrated Network Management, IM 2015

A2 - Badonnel, Remi

A2 - Xiao, Jin

A2 - Ata, Shingo

A2 - De Turck, Filip

A2 - Groza, Voicu

A2 - dos Santos, Carlos Raniery P.

PB - Institute of Electrical and Electronics Engineers Inc.

T2 - 14th IFIP/IEEE International Symposium on Integrated Network Management, IM 2015

Y2 - 11 May 2015 through 15 May 2015

ER -

Badis H, Doyen G, Khatoun R. A collaborative approach for a source based detection of botclouds. In Badonnel R, Xiao J, Ata S, De Turck F, Groza V, dos Santos CRP, editors, Proceedings of the 2015 IFIP/IEEE International Symposium on Integrated Network Management, IM 2015. Institute of Electrical and Electronics Engineers Inc. 2015. p. 906-909. 7140406. (Proceedings of the 2015 IFIP/IEEE International Symposium on Integrated Network Management, IM 2015). doi: 10.1109/INM.2015.7140406

A collaborative approach for a source based detection of botclouds

Abstract

Publication series

Conference

Access to Document

Fingerprint

Cite this