Application-layer DDoS in dynamic Web-domains: Building defenses against next-generation attack behavior

摘要

Current state-of-the art in the field of application-layer DDoS protection is generally designed, and thus effective, only for static Web-domains. To the best of our knowledge, our work is the first one to study the problem of application-layer DDoS defense in Web-domains of dynamic content and/or organization, and under next-generation bot/attack behavior. The main contributions of this paper are twofold: (1) we discuss the relevance of a branch of data mining theory - known as data streams with concept drift - to the problem of application-layer DDoS defense in dynamic Web-domains, (2) we present the outline of our next-generation anti-DDoS system that is intended for dynamic Web-domains facing different sophisticated variants of application-layer DDoS attacks.