Survey of low rate DoS attack detection mechanisms
Rejo Rajan Mathew, Vijay D. Katkar · 2011
As opposed to the conventional DoS attacks, Low rate DOS attacker injects a short burst of traffic periodically to fill up the bottleneck buffers right before the expiration of the sender's RTO. This forces the sender's TCP connections to timeout with very low throughput. These attacks are hard to detect and prevent, as most of the DoS attack detection systems are triggered by high- rate traffic. This paper presents the survey of techniques available for detecting Low rate DoS attacks and compares them using various parameters.