The Experts below are selected from a list of 2097 Experts worldwide ranked by ideXlab platform

S.h.c. Haris - One of the best experts on this subject based on the ideXlab platform.

  • Packet analysis using packet filtering and traffic monitoring techniques
    2010 International Conference on Computer Applications and Industrial Electronics, 2010
    Co-Authors: S.h.c. Haris, R. B. Ahmad, M.a.h.a. Ghani, Ghossoon M. Waleed
    Abstract:

    Malicious attackers intended to annihilate the availability of network server with threats such as Transmission Control Protocol (TCP) Synchronized (SYN) Flood. The attackers usually make the server exhausted and unavailable in order to complete the TCP Three-Way Handshake mechanism. Detecting TCP SYN Flood in the Hypertext Transfer Protocol (HTTP) is the main problem in this paper. Anomaly detection is used to detect TCP SYN flood attack focusing in payload and unusable area. The unusual Three-Way Handshake mechanism is also being analyzed. The results show that the proposed detection method using the combination of packet filtering and traffic monitoring can detect TCP SYN Flood in the network.

  • TCP SYN flood detection based on payload analysis
    2010 IEEE Student Conference on Research and Development (SCOReD), 2010
    Co-Authors: S.h.c. Haris, R. B. Ahmad, M.a.h.a. Ghani, Ghossoon M. Waleed
    Abstract:

    Transmission Control Protocol (TCP) Synchronized (SYN) Flood has become a problem to the network management to defend the network server from being attacked by the malicious attackers. The malicious attackers can easily exploit the TCP Three-Way Handshake by making the server exhausted and unavailable with spoofed Internet Protocol (IP) address. The main problem in this paper is how to detect TCP SYN flood through network. This paper used anomaly detection to detect TCP SYN flood attack based on payload and unusable area in Hypertext Transfer Protocol (HTTP). The results show that the proposed detection method can detect TCP SYN Flood in the network through the payload.

  • Detecting TCP SYN Flood Attack Based on Anomaly Detection
    2010 Second International Conference on Network Applications Protocols and Services, 2010
    Co-Authors: S.h.c. Haris, R. B. Ahmad, M.a.h.a. Ghani
    Abstract:

    Transmission Control Protocol (TCP) Synchronized (SYN) Flood has become a problem to the network management to defend the network server from being attacked by the malicious attackers. The malicious attackers can easily exploit the TCP Three-Way Handshake by making the server exhausted and unavailable. The main problem in this paper is how to detect TCP SYN flood through network. This paper used anomaly detection to detect TCP SYN flood attack based on payload and unusable area. The results show that the proposed detection method can detect TCP SYN Flood in the network through the payload.

Hanwei Wu - One of the best experts on this subject based on the ideXlab platform.

  • an improved security tcp Handshake protocol with authentication
    International Conference on Internet Technology and Applications, 2011
    Co-Authors: Hanwei Wu
    Abstract:

    TCP Three-Way Handshake protocol has a variety of security risks for the absence of safety certification, not enabling to make immense modification in it if maintained compatibility with the protocol.In this paper, we present an improvement by using the alternative items of TCP packets, on this basis of which a security protocol is designed with authentication. The new protocol is compatible wth the original protocol, adding authentication against various attacks. The formal analysis proves that the security protocol is in accordance with established safety goals.

Ghossoon M. Waleed - One of the best experts on this subject based on the ideXlab platform.

  • Packet analysis using packet filtering and traffic monitoring techniques
    2010 International Conference on Computer Applications and Industrial Electronics, 2010
    Co-Authors: S.h.c. Haris, R. B. Ahmad, M.a.h.a. Ghani, Ghossoon M. Waleed
    Abstract:

    Malicious attackers intended to annihilate the availability of network server with threats such as Transmission Control Protocol (TCP) Synchronized (SYN) Flood. The attackers usually make the server exhausted and unavailable in order to complete the TCP Three-Way Handshake mechanism. Detecting TCP SYN Flood in the Hypertext Transfer Protocol (HTTP) is the main problem in this paper. Anomaly detection is used to detect TCP SYN flood attack focusing in payload and unusable area. The unusual Three-Way Handshake mechanism is also being analyzed. The results show that the proposed detection method using the combination of packet filtering and traffic monitoring can detect TCP SYN Flood in the network.

  • TCP SYN flood detection based on payload analysis
    2010 IEEE Student Conference on Research and Development (SCOReD), 2010
    Co-Authors: S.h.c. Haris, R. B. Ahmad, M.a.h.a. Ghani, Ghossoon M. Waleed
    Abstract:

    Transmission Control Protocol (TCP) Synchronized (SYN) Flood has become a problem to the network management to defend the network server from being attacked by the malicious attackers. The malicious attackers can easily exploit the TCP Three-Way Handshake by making the server exhausted and unavailable with spoofed Internet Protocol (IP) address. The main problem in this paper is how to detect TCP SYN flood through network. This paper used anomaly detection to detect TCP SYN flood attack based on payload and unusable area in Hypertext Transfer Protocol (HTTP). The results show that the proposed detection method can detect TCP SYN Flood in the network through the payload.

M.a.h.a. Ghani - One of the best experts on this subject based on the ideXlab platform.

  • Packet analysis using packet filtering and traffic monitoring techniques
    2010 International Conference on Computer Applications and Industrial Electronics, 2010
    Co-Authors: S.h.c. Haris, R. B. Ahmad, M.a.h.a. Ghani, Ghossoon M. Waleed
    Abstract:

    Malicious attackers intended to annihilate the availability of network server with threats such as Transmission Control Protocol (TCP) Synchronized (SYN) Flood. The attackers usually make the server exhausted and unavailable in order to complete the TCP Three-Way Handshake mechanism. Detecting TCP SYN Flood in the Hypertext Transfer Protocol (HTTP) is the main problem in this paper. Anomaly detection is used to detect TCP SYN flood attack focusing in payload and unusable area. The unusual Three-Way Handshake mechanism is also being analyzed. The results show that the proposed detection method using the combination of packet filtering and traffic monitoring can detect TCP SYN Flood in the network.

  • TCP SYN flood detection based on payload analysis
    2010 IEEE Student Conference on Research and Development (SCOReD), 2010
    Co-Authors: S.h.c. Haris, R. B. Ahmad, M.a.h.a. Ghani, Ghossoon M. Waleed
    Abstract:

    Transmission Control Protocol (TCP) Synchronized (SYN) Flood has become a problem to the network management to defend the network server from being attacked by the malicious attackers. The malicious attackers can easily exploit the TCP Three-Way Handshake by making the server exhausted and unavailable with spoofed Internet Protocol (IP) address. The main problem in this paper is how to detect TCP SYN flood through network. This paper used anomaly detection to detect TCP SYN flood attack based on payload and unusable area in Hypertext Transfer Protocol (HTTP). The results show that the proposed detection method can detect TCP SYN Flood in the network through the payload.

  • Detecting TCP SYN Flood Attack Based on Anomaly Detection
    2010 Second International Conference on Network Applications Protocols and Services, 2010
    Co-Authors: S.h.c. Haris, R. B. Ahmad, M.a.h.a. Ghani
    Abstract:

    Transmission Control Protocol (TCP) Synchronized (SYN) Flood has become a problem to the network management to defend the network server from being attacked by the malicious attackers. The malicious attackers can easily exploit the TCP Three-Way Handshake by making the server exhausted and unavailable. The main problem in this paper is how to detect TCP SYN flood through network. This paper used anomaly detection to detect TCP SYN flood attack based on payload and unusable area. The results show that the proposed detection method can detect TCP SYN Flood in the network through the payload.

Ansgar Fehnker - One of the best experts on this subject based on the ideXlab platform.

  • MARS@ETAPS - Evaluating the Stream Control Transmission Protocol Using Uppaal
    Electronic Proceedings in Theoretical Computer Science, 2017
    Co-Authors: Shruti Saini, Ansgar Fehnker
    Abstract:

    The Stream Control Transmission Protocol (SCTP) is a Transport Layer protocol that has been proposed as an alternative to the Transmission Control Protocol (TCP) for the Internet of Things (IoT). SCTP, with its four-way Handshake mechanism, claims to protect the Server from a Denial-of-Service (DoS) attack by ensuring the legitimacy of the Client, which has been a known issue pertaining to the Three-Way Handshake of TCP. This paper compares the Handshakes of TCP and SCTP to discuss its shortcomings and strengths. We present an Uppaal model of the TCP Three-Way Handshake and SCTP four-way Handshake and show that SCTP is able to cope with the presence of an Illegitimate Client, while TCP fails. The results confirm that SCTP is better equipped to deal with this type of attack.