Mitigation of HTTP-GET flood Attack
Journal Title: International Journal for Research in Applied Science and Engineering Technology (IJRASET) - Year 2014, Vol 2, Issue 11
Abstract
An HTTP GET flood is a volumetric attack that does not use malformed packets, spoofing or reflection techniques. HTTP flood attacks may be one of the most advanced non-vulnerability threats facing web servers today. It is very hard for network security devices to distinguish between legitimate HTTP traffic and malicious HTTP traffic, and if not handled correctly, it could cause a high number of false-positive detections. Rate-based detection engines are also not successful at detecting HTTP flood attacks, as the traffic volume of HTTP floods may be under detection thresholds. Because of this, it is necessary to use several parameters detection including rate-based and rate-invariant. Denial of Service attacks to web services is called HTTPGET flood attack and threats of them increase day by day. In this type of attacks, malicious clients send a large number of HTTP-GET requests to the target web server automatically. Since these HTTP-GET requests have legitimate formats and are sent via normal TCP connections, an intrusion detection system (IDS) cannot detect them. In this paper, we propose mitigation techniques of HTTP-GET flood based on log file.
Authors and Affiliations
Hally Khatri, Akanksha Gupta, Dheeraj Pal
Keywords
Related Articles
- EP ID EP19125
- DOI -
- Views 274
- Downloads 5
A Study of innovative ways to reward top performers in selective IT companies in India
The use of innovative reward methods can create a positive working environment. The objective of the study is to find out innovative ways – monetary or non monetary to reward top performers in IT industry. Initially and...
Thermal Performance of Modified V-Trough Solar Water Heater
There are various types of solar water heater system available in the commercial market to fulfil different customers’ demand, such as flat plate collector, concentrating collector, evacuated tube collector and integrat...
Design and Implementation of a Dual Axis Solar Tracking System
Population of the world is getting increased rapidly day by day and the demand for energy is increasing appropriately. During the recent decades, the main sources of energy such as the Oil and coal are expected to end u...
Embedded Based Automation for Energy Conservation in Restricted Areas
Wastage of electricity is one of the main problems which we are facing today. In homes, schools, colleges, industries etc, we see that lights are kept on even if there is no one inside the room. This happens due to negl...
Fuzzy Logic Controller Based Speed Analysis and Control of DC Shunt Motor
In this paper, various speed control techniques for a dc shunt motor namely conventional PID controller and fuzzy logic controller, using a PID controller and Fuzzy Logic Controller have been discussed and a comparative...