Detection Techniques for DoS ……
Detection Techniques for DoS Attacks
DoS Detection Techniques என்பது network அல்லது server-ல் abnormal traffic, unusual request rate, resource usage spike, protocol misuse போன்ற signs-ஐ identify செய்து DoS attack நடக்கிறதா என்பதை கண்டறியும் methods ஆகும். Simple definition: D…
Premium — locked
Advanced
11 min
68 cards
6 MCQs v3
This is a premium lesson. You can see the shape of every card — unlock to read them.
Unlock
Definition
DoS Detection Techniques என்பது network அல்லது server-ல் abnormal traffic, unusual request rate, resource usa……
Explanation
Why detection is needed
DoS attack ஆரம்பித்த உடனே detect செய்யவில்லை என்றால்: Server slow ஆகும் Website unavail……
Explanation
Main detection techniques
DoS detection techniques-ஐ முக்கியமாக: Traffic Monitoring Threshold-Based Detection Signature-Based Detection……
Explanation
1. TRAFFIC MONITORING…
Definition
Network traffic-ஐ continuously observe செய்து abnormal increase இருக்கிறதா என்று பார்க்கும் technique. Monito……
Definition
1. THRESHOLD-BASED DETECTION…
Definition
ஒரு predefined limit set செய்……
Explanation
Example
Normal maximum: 500 requests/second Threshold: ……
Flow
Traffic ↓ Measure request rate ↓ Compare with th……
Real Life Example
Example
Suppose: Normal connections = 200 Threshold = 500 con……
Real Life Example
1. SIGNATURE-BASED DETECTION…
Definition
Already known DoS attack patterns-ஐ database-ல் store செய்து incoming traffic அதனுடன் match ஆகிறதா என்று பார்……
Explanation
Advantage
Known attacks-ஐ accurately de……
Explanation
Disadvantage
New அல்லது unknown attacks detect ச……
Explanation
1. ANOMALY-BASED DETECTION…
Definition
Normal network behaviour முதலில் learn செய்யப்படும……
Explanation
Example
Normal: 100-300 requests/sec Sudden……
Flow
Learn Normal Behaviour ↓ Monitor Curre……
Explanation
Advantage
Unknown/new attacks detect செ……
Explanation
Disadvantage
False alarms அதிகமாக இருக்கலா……
Comparison
Signature vs anomaly
Comparison
1. RATE-BASED DETECTION…
Comparison
Rate-based detection-ல் ஒரு source எவ……
Explanation
Example
Normal IP: 20 requests/sec Suspicious IP: 3000 requests/sec அதனால……
List
1. FLOW-BASED DETECTION…
Explanation
Network flow information analyze செய்யப்படும். ஒரு flow பொதுவாக: Source IP + Destination IP + Sourc……
Real Life Example
Example
Thousands of source IP addresses: ↓ Same destin……
Real Life Example
1. STATISTICAL DETECTION…
Real Life Example
Normal traffic statistical values calculate செய்யப்படும். Examples: Average Mean Variance Standard deviation……
Real Life Example
1. IDS-BASED DETECTION…
Real Life Example
IDS = Intrusion Detection System Network traffic monitor செய்து suspicious behaviour detect செய்யும். Types: ……
Explanation
Nids
NIDS monitor: Network packets Protocol behaviour Traffi……
Explanation
Hids
HIDS monitor: CPU usage RAM usage Logs Processes C……
Explanation
1. IPS-BASED DETECTION…
Explanation
IPS = Intrusion Prevention System IDS: Detects and alerts I……
Comparison
Ids vs ips
Comparison
1. RESOURCE MONITORING…
Comparison
Server resource usage continuously monitor செய்யப்படுகிறத……
Explanation
Example
CPU normal = 30% Attack time = 100% Memory normal =……
List
1. SYN FLOOD DETECTION…
Explanation
SYN Flood detect செய்ய: Count: SYN packets மற்றும் Completed TCP connections Compa……
List
1. ICMP FLOOD DETECTION…
Explanation
ICMP traffic volume monitor செய்யப்படும். Normal: Few ping packets Attack: Th……
List
1. HTTP FLOOD DETECTION…
Explanation
Web server logs analyze செய்யலாம். Look for: Huge GET requests Huge POST requests Repeated URL requ……
List
1. LOG ANALYSIS…
Explanation
Server logs ஒரு important detection source. Analyze: Access logs Firewall logs Web……
List
1. IP REPUTATION ANALYSIS…
Explanation
Known malicious IP addresses மற்றும் suspicious network sources i……
List
1. GEOLOCATION-BASED DETECTION…
Explanation
Normal users mainly India-லிருந்து வருகிறார்கள் என்று வைத்துக்கொள்ளுங்கள். Suddenly thousands of r……
List
1. MACHINE LEARNING-BASED DET……
Explanation
Modern systems Machine Learning பயன்படுத்தி normal traffic மற்றும் attack traffic classify செய்யலாம். Input f……
Table
Detection by attack type
Explanation
Common attack indicators
DoS attack detection-க்கு common signs: Sudden traffic spike Abnormally high packet rate Many requests from s……
Explanation
False positive
An important concept: False Positive Normal activity-ஐ attack என்று system தவறாக detect செய்வது. Online exam ……
Explanation
False negative
Actual attack நடக்கிறது. ஆனால் detection system: Normal traffic என்று identify செய்கி……
Comparison
Important comparison
Signature-Based Known attack pattern வேண்டும். Known attack → Good detection Anomaly-B……
Remember
SATR S = Signature A = Anomaly T = Thre……
TRB Point
TRB / NET / SET exam-க்கு முக்கியமான points: Signature-based detection → Known attack patterns Anomaly-based ……
MCQ
Which detection technique com……
MCQ
Which technique detects devia……
MCQ
A large number of half-open c……
MCQ
IDS stands for:…
MCQ
Which system can actively blo……
MCQ
Normal traffic incorrectly de……
Summary
DoS Detection Techniques | |--- Traffic Monitoring |--- Threshold-Based |--- Signature-Based |--- Anomaly-Bas……
Text size
Theme
Contents
Print / PDF