HTTP-GET Flood Prevention Method by Dynamically Controlling Multiple Types of Virtual Machine Resources

• Item type: Journal(1)
• 公開日: 2015-09-15
• タイトル: HTTP-GET Flood Prevention Method by Dynamically Controlling Multiple Types of Virtual Machine Resources
• タイトル / 言語: en
• タイトル: HTTP-GET Flood Prevention Method by Dynamically Controlling Multiple Types of Virtual Machine Resources
• 言語: eng
• キーワード / 主題Scheme: Other
• キーワード / 主題: [特集：社会に浸透していくコンピュータセキュリティ技術] network, DoS, virtual machine, HTTP-GET flood
• 資源タイプ / 資源タイプ識別子: http://purl.org/coar/resource_type/c_6501
• 資源タイプ: journal article
• 著者所属: Faculty of Engineering, Toyohashi University of Technology
• 著者所属: Faculty of Engineering, Toyohashi University of Technology
• 著者所属: Internet Initiative Japan Inc.
• 著者所属(英): en
• 著者所属(英): Faculty of Engineering, Toyohashi University of Technology
• 著者所属(英): en
• 著者所属(英): Faculty of Engineering, Toyohashi University of Technology
• 著者所属(英): en
• 著者所属(英): Internet Initiative Japan Inc.
• 著者名: Mizuki, Watanabe; Ryotaro, Kobayashi; Masahiko, Kato
• 著者名(英): Mizuki, Watanabe; Ryotaro, Kobayashi; Masahiko, Kato
• 論文抄録 / 内容記述タイプ: Other
• 論文抄録 / 内容記述: Currently, Web services are widely utilized to disclose company information, and offer online services and e-commerce. As these services have become an essential part of our everyday lives, the public is greatly inconvenienced when they are disrupted. Denial of service (DoS) attacks exert adverse influences on Web services. We focus on HTTP-GET Flood attacks, which are manually operable DoS attacks. It is possible to simply block manually operable DoS attacks such as F5 attacks on the server side; however, such measures could be noticed by the attackers. Therefore, to prevent the attacker changing their method of attack, it is possible to overcome the attack by redirecting the attack to another system, for which a previous study has proposed a feasible technique located in the service provider. The previous study assumes a correlation between the CPU resource and the request error rate. However, the Web Server actually has multiple resources. Therefore, it is important to be able to control the server resources rather than the CPU and the memory. The operational implementation of the proposed method and the evaluation experiments confirm the effectiveness of the proposed method.; \n------------------------------; This is a preprint of an article intended for publication Journal of; Information Processing(JIP). This preprint should not be cited. This; article should be cited as: Journal of Information Processing Vol.23(2015) No.5 (online); DOI http://dx.doi.org/10.2197/ipsjjip.23.655; ------------------------------
• 論文抄録(英) / 内容記述タイプ: Other
• 論文抄録(英) / 内容記述: Currently, Web services are widely utilized to disclose company information, and offer online services and e-commerce. As these services have become an essential part of our everyday lives, the public is greatly inconvenienced when they are disrupted. Denial of service (DoS) attacks exert adverse influences on Web services. We focus on HTTP-GET Flood attacks, which are manually operable DoS attacks. It is possible to simply block manually operable DoS attacks such as F5 attacks on the server side; however, such measures could be noticed by the attackers. Therefore, to prevent the attacker changing their method of attack, it is possible to overcome the attack by redirecting the attack to another system, for which a previous study has proposed a feasible technique located in the service provider. The previous study assumes a correlation between the CPU resource and the request error rate. However, the Web Server actually has multiple resources. Therefore, it is important to be able to control the server resources rather than the CPU and the memory. The operational implementation of the proposed method and the evaluation experiments confirm the effectiveness of the proposed method.; \n------------------------------; This is a preprint of an article intended for publication Journal of; Information Processing(JIP). This preprint should not be cited. This; article should be cited as: Journal of Information Processing Vol.23(2015) No.5 (online); DOI http://dx.doi.org/10.2197/ipsjjip.23.655; ------------------------------
• 書誌レコードID / 収録物識別子タイプ: NCID
• 書誌レコードID / 収録物識別子: AN00116647
• 書誌情報: 情報処理学会論文誌; 巻 56, 号 9, 発行日 2015-09-15
• ISSN / 収録物識別子タイプ: ISSN
• ISSN / 収録物識別子: 1882-7764