loading...
Exploiting the Transients of Adaptation for RoQ Attacks on Internet Resources
Berlin, Germany October 05-October 08
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/ICNP.2004.134810912th IEEE International Conference on ...
 This Article 
 
PDF
HTML
 
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
Mina Guirguis, Boston University
Azer Bestavros, Boston University
Ibrahim Matta, Boston University
We expose an unorthodox adversarial attack that exploits the transients of a system's adaptive behavior, as opposed to its limited steady-state capacity. We show that a well orchestrated attack could introduce significant inefficiencies that could potentially deprive a network element from much of its capacity, or significantly reduce its service quality, while evading detection by consuming an unsuspicious, small fraction of that element's hijacked capacity. This type of attack stands in sharp contrast to traditional brute-force, sustained high-rate DoS attacks, as well as recently proposed attacks that exploit specific protocol settings such as TCP timeouts. We exemplify what we term as Reduction of Quality (RoQ) attacks by exposing the vulnerabilities of common adaptation mechanisms. We develop control-theoretic models and associated metrics to quantify these vulnerabilities. We present numerical and simulation results, which we validate with observations from real Internet experiments. Our findings motivate the need for the development of adaptation mechanisms that are resilient to these new forms of attacks.
Citation:
Mina Guirguis, Azer Bestavros, Ibrahim Matta, "Exploiting the Transients of Adaptation for RoQ Attacks on Internet Resources," icnp, pp.184-195, 12th IEEE International Conference on Network Protocols (ICNP'04), 2004
Usage of this product signifies your acceptance of the Terms of Use.