Sensors, Vol. 20, Pages 3820: Recent Analysis of Forged Request Headers Constituted by HTTP DDoS

Sensors, Vol. 20, Pages 3820: Recent Analysis of Forged Request Headers Constituted by HTTP DDoS
Sensors doi: 10.3390/s20143820
Authors:
Abdul Ghafar Jaafar
Saiful Adli Ismail
Mohd Shahidan Abdullah
Nazri Kama
Azri Azmi
Othman Mohd Yusop

Application Layer Distributed Denial of Service (DDoS) attacks are very challenging to detect. The shortfall at the application layer allows formation of HTTP DDoS as the request headers are not compulsory to be attached in an HTTP request. Furthermore, the header is editable, thus providing an attacker with the advantage to execute HTTP DDoS as it contains almost similar request header that can emulate a genuine client request. To the best of the authors’ knowledge, there are no recent studies that provide forged request headers pattern with the execution of the current HTTP DDoS attack scripts. Besides that, the current dataset for HTTP DDoS is not publicly available which leads to complexity for researchers to disclose false headers, causing them to rely on old dataset rather than more current attack patterns. Hence, this study conducted an analysis to disclose forged request headers patterns created by HTTP DDoS. The results of this study successfully disclose eight forged request headers patterns constituted by HTTP DDoS. The analysis was executed by using actual machines and eight real attack scripts which are capable of overwhelming a web server in a minimal duration. The request headers patterns were ex...

Source: Sensors - July 7, 2020 Category: Biotechnology Authors: Abdul Ghafar Jaafar Saiful Adli Ismail Mohd Shahidan Abdullah Nazri Kama Azri Azmi Othman Mohd Yusop Tags: Article Source Type: research