A Proactive Design to Detect Denial of Service Attacks Using SNMP-MIB ICMP Variables

TL;DR

This paper presents a proactive system that detects various Denial of Service attacks using SNMP-MIB and ICMP variables, achieving high accuracy and effective traffic differentiation.

Contribution

It introduces a novel detection system leveraging ICMP variables and algorithms to accurately identify and differentiate DOS attacks from normal network traffic.

Findings

Achieved approximately 99.6% accuracy in detecting ICMP Echo, HTTP Flood, and Slowloris attacks.

Succeeded in distinguishing normal traffic from various DOS attacks with 100% effectiveness.

Demonstrated the effectiveness of ICMP variables in proactive DOS attack detection.

Abstract

Denial of Service (DOS) attack is one of the most attack that attract the cyber criminals which aims to reduce the network performance from doing its intended functions. Moreover, DOS Attacks can cause a huge damage on the data Confidentiality, Integrity and Availability. This paper introduced a system that detects the network traffic and varies the DOS attacks from normal traffic based on an adopted dataset. The results had shown that the adopted algorithms with the ICMP variables achieved a high accuracy percentage with approximately 99.6 in detecting ICMP Echo attack, HTTP Flood Attack, and Slowloris attack. Moreover, the designed model succeeded with a rate of 100 in varying normal traffic from various DOS attacks.