Abstract

The Internet has witnessed a steady rise in malicious traffic including DDoS and worm attacks. In this paper, we study the effect of malicious traffic on the background traffic by analyzing recent traces from two different locations. We show that malicious traffic causes an increase in the average DNS latency by 230% and an increase in the average web latency by 30% even on highly over-provisioned links. We also study the effect of the recent linux slapper worm. Using packet-level simulations based on an empirically derived model of the worm, we demonstrate that the effect of worm-infected hosts can be disastrous when they trigger a DDoS attack.

Date

2003

Authors

Kun-chan Lan, Alefiya Hussain, Debojyoti Dutta

Journal

Passive and Active Measurement Workshop (PAM)