Characteristics of denial of service attacks on internet using AGURI

Abstract

Denial of Service attacks are divided into two types, one is logic attack and the another one is flooding attack. Logic attack exploits security hole of the software such as operating system and web server bugs, then causes system crash or degrade in the performance. Logic attack can be defended by upgrading software and/or filtering particular packet sequences. In this paper, characteristics of the flooding attacks is described. For the monitoring tools, AGURI, that we have developed, is used. Using the traffic pattern aggregation method, AGURI can monitor the flooding attacks in real network traffic for a long term. © Springer-Verlag Berlin Heidelberg 2003.