Detection of Multicast Video Flooding Attack using the Pattern of Bandwidth Provisioning Efficiency

Abstract

The rapid increase of distributed denial-of-service (DDoS) attacks, which deplete a link bandwidth and service resource by sending a tremendous flooding of traffic to a victim server, has threatened fundamental network service stability. First, this letter analyzes the unique properties of multicast video delivery, which is vulnerable to malicious video flooding attacks. Second, the effectiveness of the observation of bandwidth provisioning efficiency in the detection of anomalous patterns of multicast flooding is discussed and a traffic-sharing density-based flooding detection (TDFD) mechanism is proposed. Numerical analysis and simulation results are given to validate the performance of the TDFD.