National Conference on Computing, Communication & Electrical Systems November 2016 - Proceedings
Mitigation of Flood based DDoS Attack using Captcha - A Review 1Gursharanjeet
Kaur,2 Pawan Luthra,3 Sunny Behal, 4Krishan kumar
1
Department of Computer Science Engineering, SBS state technical campus Ferozepur, M.Tech student , Punjab(152004), India,
[email protected]
2
Department of Computer Science Engineering, SBS state technical campus Ferozepur, Punjab(152004), India
3
Department of Computer Science Engineering, SBS state technical campus Ferozepur , Punjab(152004), India 4
UIET, Punjab University Chandigarh, India
termed as Application Layer Attacks [2,3,4]. In recent the DDoS attacks are increasing rapidly. There are many number of attack tools are available that are used to generate the attacks on websites. These tools generate the similar looking real traffic as well as attack traffic. Therefore, the security of web site or web services becomes a very immense issue. That’s why the websites use the concept of Captcha to diminish the flooded DDoS attacks and differentiate between the human and bots apart [5].In recent years Captcha comes in distinct pattern. A few of them are based on optical character recognition. Such as Text based Captcha and others are based on Nonoptical character recognition such as Video based Captcha, Audio based Captcha. A Captcha is mostly used to prevent auto script attacks.
Abstract - Distributed Denial of Services (DDoS) flooding attacks are becoming the very biggest risk to the loyalty of the internet. Web server faces much kind of attacks like block networks, activity degrades. Due to these kinds of attacks a lot of sources and the bandwidth are wasted. Many approaches are used to detect the attack, but this paper describes the different types of Captcha techniques, used to verify user and bots. The concept of Captcha is used in the front of the web site or web application. CAPTCHA (completely automated public Turing test to tell computer and human apart).To figure out real users and the automated software the concept of Captcha is used. The Captcha is also known as human interactive proof (HIP) or Reverse Turing test depends upon the Artificial Intelligence. The concept of Captcha ultimately provides the better security and minimizes automatic registration to web service. . Keywords - Attack tools, DDoS, Captcha, Application, Issue and Drawback of the Captcha..
Some of these types of Captcha have been cracked with the help of different types of bots programs or software’s. For examples Text based Captcha is broken by using the technique of segmentation , Image based Captcha is broken by using the concept of machine learning and Audio based Captcha is damaged by using the mechanism of Automatic speech recognition[6].
1. Introduction A DDoS attack is a vengeful attempt from various systems to make machine or network assets (resources) become unavailable to its real users, usually by cut off or hold up the services joined to the Internet [1].
1.1 Distributed Denial of Service Distributed Denial-of-Service (DDoS) attacks are same to the Denial-of-Service (DoS) attacks performed from multiple computers. All the computers generate the huge amount of data packets. These data packets are sent towards the target system. A very large number of users overload resources of the target system. Such as CPU, memory and bandwidth etc.Mirkovic et al[7] and Peng et al[8]have separates the DDoS attacks in to two types: Flooding attacks and Vulnerability attacks. Flooding attacks exhaust resources such as network bandwidth by sending the large number of data packets to the target
DDoS attacks are generated through the well standardized, distributed and remotely managed networks. Due to this settled computer can be used for dispatching the huge numbers of attacks requests to the objective system. DDoS attacks primarily cause incredible behavior in the form of inability to access the special website or a work and slow the system or network performance. Due to this reason the objective or target systems respond slowly or fully smashed. DDoS attacks disrupt the resources of real users like CPU , disk , memory ,database bandwidth etc.The type of disruption in the real user services are International Journal of Computer Science and Network ISSN : 2277 – 5420 Impact Factor : 1.02 www.IJCSN.org
11
National Conference on Computing, Communication & Electrical Systems November 2016 - Proceedings
computer. Vulnerability attacks use the expected behavior of HTTP and TCP protocols. Targets: The most common targeted sectors of DDoS flood attacks are industry, popular web sites and gaming sectors. From the last few years, DDoS attacks are continuously launched on these sectors mainly. As per the report of VeriSign 43 percent attacks are occurring on the media and 41 percent DDoS attacks targeted the IT service or web sites in Q2/2014.According to Prolexic the game industry was more affected by DDoS attack in 2014[11]. DDoS Incidents: The attacker/raider users misuse their energy and effort to make attack called botnet, attackers use less secured systems to lunch such attacks. The main aim behind DDoS attacks are Criminal and commercial nature. Criminal who extortion their users and demand high amount of payments. Competitors who destruct/damage their opponents business and image in the market. The Various DDoS attacks against very popular site like Yahoo, CNN Amazon in 2000, my doom virus attack on website SCO in 2003, another DDoS attack was launched in June 2004 on server CDN ,which blocked the access of many site for more the 2 hours, Due to this attack some affected site are yahoo, Microsoft and Google[10]. The recent DDoS attacks occurred from 2014 to 2016 are discussed in [table 1], [11] Table 1: Recent DDoS incidents
International Journal of Computer Science and Network ISSN : 2277 – 5420 Impact Factor : 1.02 www.IJCSN.org
12
ERROR: typecheck OFFENDING COMMAND: .setglobal STACK: {(TimesNewRoman,BoldItalic)(_)search {exch pop exch pop cvn dup findfont /FontName get eq }{pop false }ifelse } {(TimesNewRoman,BoldItalic)(_)search {exch pop exch pop cvn dup findfont /FontName get eq }{pop false }ifelse } /TimesNewRoman,BoldItalic true false
