Detection and prediction of resource-exhaustion vulnerabilities

João Antunes, Nuno Ferreira Neves, Paulo Verissimo

Research output: Chapter in Book/Report/Conference proceedingConference contribution

18 Scopus citations

Abstract

Systems connected to the Internet are highly susceptible to denial-of-service attacks that can compromise service availability, causing damage to customers and providers. Due to errors in the design or coding phases, particular client-server interactions can be made to consume much more resources than necessary easing the success of this kind of attack. To address this issue we propose a new methodology for the detection and identification of local resource-exhaustion vulnerabilities. The methodology also gives a prediction on the necessary effort to exploit a specific vulnerability, useful to support decisions regarding the configuration of a system, in order to sustain a certain attack magnitude. The methodology was implemented in a tool called PREDATOR that is able to automatically generate malicious traffic and to perform post-processing analysis to build accurate resource usage projections on a given target server. The validity of the approach was demonstrated with several synthetic programs and well-known DNS servers. © 2008 IEEE.
Original languageEnglish (US)
Title of host publicationProceedings - International Symposium on Software Reliability Engineering, ISSRE
Pages87-96
Number of pages10
DOIs
StatePublished - Dec 1 2008
Externally publishedYes

Fingerprint Dive into the research topics of 'Detection and prediction of resource-exhaustion vulnerabilities'. Together they form a unique fingerprint.

Cite this