The Experts below are selected from a list of 1584 Experts worldwide ranked by ideXlab platform
Shahram Jamali - One of the best experts on this subject based on the ideXlab platform.
-
Defense against SYN flooding attacks: A particle swarm optimization approach
Computers & Electrical Engineering, 2014Co-Authors: Shahram Jamali, Vahid ShakerAbstract:SYN flooding attack is a threat that has been designed based on vulnerabilities of the Connection establishment phase of the TCP protocol. In this attack some sources send a large number of TCP SYN segments, without completing the third handshake step to quickly Exhaust Connection resources of the victim server. Hence, a main part of the server's buffer space is allocated to the attack half open Connections and incoming new Connection requests will be blocked. This paper proposes a novel framework, in which, the defense issue is formulated as an optimization problem. Then it employs the particle swarm optimization (PSO) algorithm to solve this optimization problem. Our theoretical analysis and packet-level simulations in ns-2 environment show that the proposed defense strategy called PSO_SYN decreases the number of blocked TCP Connection requests and cuts down share of attack Connections from the buffer space.
-
PSO-SFDD: Defense against SYN flooding DoS attacks by employing PSO algorithm
Computers & Mathematics With Applications, 2011Co-Authors: Shahram Jamali, Gholam ShakerAbstract:A DoS attack can be regarded as an attempt of attackers to prevent legal users from gaining a normal network service. The TCP Connection management protocol sets a position for a classic DoS attack, namely, the SYN flood attack. In this attack some sources send a large number of TCP SYN segments, without completing the third handshake step to quickly Exhaust Connection resources of the under attack system. This paper models the under attack server by using the queuing theory in which attack requests are recognized based on their long service time. Then it proposes a framework in which the defense issue is formulated as an optimization problem and employs the particle swarm optimization (PSO) algorithm to optimally solve this problem. PSO tries to direct the server to an optimum defense point by dynamically setting two TCP parameters, namely, maximum number of Connections and maximum duration of a half-open Connection. The simulation results show that the proposed defense strategy improves the performance of the under attack system in terms of rejection probability of Connection requests and efficient consumption of buffer space.
Jamali Shahram - One of the best experts on this subject based on the ideXlab platform.
-
PROPOSING A NEW FILTER TO REMOVE IMPULSE NOISE AND ITS COMPOSITION WITH PSO ALGORITHM TO DETECT AND DEFENSE AGAINST SYN FLOODING ATTACKS
2016Co-Authors: Momeny Mohammad, Jamali Shahram, Agha Sarram Mehdi, Shaker Vahid, Nooshyar MehdiAbstract:In a DoS attack can be regarded as an attempt of attackers to prevent legal users from gaining a normal network service. The TCP Connection management protocol sets a position for a classic DoS attack, namely, the SYN flood attack. In this attack some sources send a large number of TCP SYN segments, without completing the third handshake step to quickly Exhaust Connection resources of the under attack system. This paper models the under attack server by using the queuing theory in which attack requests are recognized based on their long service time. Then it proposes a framework in which the defense issue is formulated as an optimization problem and employs combination of the particle swarm optimization (PSO) algorithm and proposed filter for reduction degradation caused by impulsive noise to optimally solve this problem. The goal is to direct the server to an optimum defense point by dynamically setting of two TCP parameters, namely, maximum number of Connections and maximum duration of a half-open Connection. The simulation results show that the proposed defense strategy improves the performance of the under attack system in terms of rejection probability of Connection requests and efficient consumption of buffer space.
-
DEFENSE AGAINST SYN FLOODING ATTACKS: A SCHEDULING APPROACH
2014Co-Authors: Jamali Shahram, Shaker GholamAbstract:The TCP Connection management protocol sets a position for a classic Denial of Service (DoS) attack, called the SYN flooding attack. In this attack attacker sends a large number of TCP SYN segments, without completing the third handshaking step to quickly Exhaust Connection resources of the victim server. Therefore it keeps TCP from handling legitimate requests. This paper proposes that SYN flooding attack can be viewed metaphorically as result of an unfair scheduling that gives more opportunity to attack requests but prevents legal Connections from getting services. In this paper, we present a scheduling algorithm that ejects the half Connection with the longest duration, when number of half open Connections reaches to the upper bound. The simulation results show that the proposed defense mechanism improves performance of the under attack system in terms of loss probability of requests and share of regular Connections from system resources.
Gholam Shaker - One of the best experts on this subject based on the ideXlab platform.
-
PSO-SFDD: Defense against SYN flooding DoS attacks by employing PSO algorithm
Computers & Mathematics With Applications, 2011Co-Authors: Shahram Jamali, Gholam ShakerAbstract:A DoS attack can be regarded as an attempt of attackers to prevent legal users from gaining a normal network service. The TCP Connection management protocol sets a position for a classic DoS attack, namely, the SYN flood attack. In this attack some sources send a large number of TCP SYN segments, without completing the third handshake step to quickly Exhaust Connection resources of the under attack system. This paper models the under attack server by using the queuing theory in which attack requests are recognized based on their long service time. Then it proposes a framework in which the defense issue is formulated as an optimization problem and employs the particle swarm optimization (PSO) algorithm to optimally solve this problem. PSO tries to direct the server to an optimum defense point by dynamically setting two TCP parameters, namely, maximum number of Connections and maximum duration of a half-open Connection. The simulation results show that the proposed defense strategy improves the performance of the under attack system in terms of rejection probability of Connection requests and efficient consumption of buffer space.
Shaker Gholam - One of the best experts on this subject based on the ideXlab platform.
-
DEFENSE AGAINST SYN FLOODING ATTACKS: A SCHEDULING APPROACH
2014Co-Authors: Jamali Shahram, Shaker GholamAbstract:The TCP Connection management protocol sets a position for a classic Denial of Service (DoS) attack, called the SYN flooding attack. In this attack attacker sends a large number of TCP SYN segments, without completing the third handshaking step to quickly Exhaust Connection resources of the victim server. Therefore it keeps TCP from handling legitimate requests. This paper proposes that SYN flooding attack can be viewed metaphorically as result of an unfair scheduling that gives more opportunity to attack requests but prevents legal Connections from getting services. In this paper, we present a scheduling algorithm that ejects the half Connection with the longest duration, when number of half open Connections reaches to the upper bound. The simulation results show that the proposed defense mechanism improves performance of the under attack system in terms of loss probability of requests and share of regular Connections from system resources.
Legendi Linus - One of the best experts on this subject based on the ideXlab platform.
-
Construction of engine Connection adapter
Högskolan i Skövde Institutionen för ingenjörsvetenskap, 2019Co-Authors: Jalderyd Emil, Legendi LinusAbstract:Examensarbetets mål är att utveckla och konstruera en ny uppkopplingslösning för motorer som genomgår kvalitetssäkring hos Volvo Lastvagnar. Examensarbetet är genomfört som den avslutande delen av studierna på maskiningenjörsprogrammet på Högskolan i Skövde. Ökade kundkrav på tillverkningsföretag har lett till ökade krav på individanpassade produkter. Detta sätter större krav på produktvariationer som i sin tur leder till produktionsvariationer. Volvo Lastvagnar tillverkar idag en stor mängd motorvarianter som ställer ökade krav på en mer flexibel anslutningslösning för att koppla upp dessa motorvarianter för kvalitetssäkring och testkörning. Dagens uppkopplingslösning är bristfällig, improviserad och icke flexibel. Volvo Lastvagnar har uttryckt en önskan att förbättra uppkopplingen av turboaggregatets avgashus vid kvalitetssäkringsprocessen inför en effektivisering av motorprovet. Projektet inleddes med en omfattande litteraturstudie för att undersöka hur produktionsvariation och krav på en mer flexibel uppkoppling kan lösas genom produktdesign. Variationerna som påverkade uppkopplingen mellan de olika motorerna kartlades och lades som grund för vidare arbete. Flertalet koncept gällande hantering av motorvariatoner togs fram och utvärderades med hjälp av 3D-printade prototyper. Ett slutgiltigt koncept beräknades, dimensionerades och konstruerades. Resultatet visade att det går att möta den stora produktionsvariationen med hjälp av robust design. Resultatet visade också att dagens uppkoppling är överdimensionerad och bristfällig. Författarna till denna rapport rekommenderar Volvo Lastvagnar att fortsätta arbetet med att implementera uppkopplingslösningen i produktion för att utföra verkliga tester och optimera lösningen ytterligare.The goal of the thesis work is to develop and construct a new solution for connecting engines that goes through a quality check at the testing facility at Volvo Trucks. The thesis work is the final segment of the mechanical engineering program at the University of Skövde. Growing demands within manufacturing have led to higher requirements regarding customized products. This puts a higher demand on product variety which leads to greater varieties in production. Volvo Trucks manufactures a variety of engines which requires a more flexible way of connecting these different types of engines in the testing facility for testing and quality checks. The current state of this Connection is inadequate, improvised and non-flexible. Volvo Trucks have expressed a wish to improve the quality- and testing process regarding the Exhaust Connection of the engines, as Volvo Trucks are planning a future reconstruction of the testing facility. The project started by performing an extensive literature review to investigate how variety in production and demands for a more flexible Connection can be solved through product design. The variations that affected the Connection between the different motor types and the testing facility were documented and used as a foundation for further work. A number of concepts regarding the handling of the different motor types were developed and reviewed with 3D-printed prototypes. A final concept was calculated, dimensioned and constructed. The result shows that it is possible to handle the vast variation in production with the help of robust design. The result also showed that the present Connections are oversized and insufficient. The authors of this report recommend that Volvo Trucks should continue with implementing the new Connection in production to perform tests and develop this Connection further