Barmina S.S.Kazan National Research Technical University named after A.N. Tupolev – KAI (KNRTU-KAI), Kazan, Republic of Tatarstan, Russian Federation molibdenbora@yandex.ru ORCID id: not available
Tadzhibaeva F.M.Kazan National Research Technical University named after A.N. Tupolev – KAI (KNRTU-KAI), Kazan, Republic of Tatarstan, Russian Federation frida.t.1465@gmail.com ORCID id: not available
Subject Denial-of-service attacks are performed by hackers targeting the computer system. It is a basic scheme for cyberattacks undermining a service, which leaves no legally substantive evidence. DDoS attacks are effectuated through several computers. Objectives The research is to forecast and examine the most common type of DDoS attacks lasting less than four hours and SYN flood attacks being on Top 10 of the internet attacks and causing serious breakdowns of web resources. Methods The research is based on a correlation analysis of time series of SYN flood and DDoS attacks of four hours and less, cross-correlation of time series. We forecast SYN flood attacks for the coming quarters of 2018 and 2019 by the exponential smoothing method. Results SYN floods are found to be of seasonal nature. DDoS attacks lasting less than four hours were also seasonal in Q1 of a calendar year, thereby making us expect more attacks in Q1 2019. Conclusions and Relevance We traced a correlation between SYN flood attacks and DDoS attacks lasting less than four hours and showed their seasonality. The article provides the forecast of SYN flood attacks for the end of 2018 and beginning of 2019. The data allows for respective preparatory actions in order to protect web resources from SYN flood attacks.
Keywords: DDoS attack, SYN flood, forecasting, web resource, information protection
References:
Kharitonov V.S., Cheryapkin D.P. [DDoS attack: Classification and characteristics]. Postulat, 2016, no. 12, p. 45. (In Russ.) URL: Link
Bondarenko M.S. [Overviewing methods and tools to perform DDoS attacks]. Vestnik Voronezhskogo instituta vysokikh tekhnologii=Bulletin of Voronezh Institute of High Technologies, 2017, no. 4, pp. 59–63. (In Russ.)
Tumbinskaya M.V. [Organizational support to IT infrastructure management in the information security system of an enterprise]. Natsional'nye interesy: prioritety i bezopasnost' = National Interests: Priorities and Security, 2015, no. 1, pp. 31–41. URL: Link (In Russ.)
Tumbinskaya M.V. [Secure information system model of Internet banking]. Prikladnaya informatika = Applied Informatics, 2015, vol. 10, no. 5, pp. 62–72. URL: Link (In Russ.)
Revenkov P.V., Berdyugin A.A. [Cybersecurity in the Internet of Things and electronic banking]. Natsional'nye interesy: prioritety i bezopasnost' = National Interests: Priorities and Security, 2016, vol. 12, iss. 11, pp. 158–169. URL: Link (In Russ.)
Chirkov D.K., Sarkisyan A.Zh. [High technology crime: Tendencies and perspectives]. Voprosy bezopasnosti = Security Issues, 2013, no. 2, pp. 160–181. (In Russ.) URL: Link
Terent'ev A.M. [Choice of adequate information security software PC in Russia]. Natsional'nye interesy: prioritety i bezopasnost' = National Interests: Priorities and Security, 2012, no. 33, pp. 37–42. URL: Link (In Russ.)
Zhukov Yu.V. Osnovy veb-khakinga: napadenie i zashchita [The basics of web hacking: attack and defense]. St. Petersburg, Piter Publ., 2012, 208 p.
Biryukov A.A. Informatsionnaya bezopasnost': zashchita i napadenie [Information security: protection and attack]. Moscow, DMK Press Publ., 2012, 474 p.
Shan'gin V.F. Informatsionnaya bezopasnost' i zashchita informatsii [Information security and information defense]. Moscow, DMK Press Publ., 2014, 702 p.
Listopad M.E., Korotchenko S.E. [Improving the method for evaluation of the information security system in Russia]. Natsional'nye interesy: prioritety i bezopasnost' = National Interests: Priorities and Security, 2017, vol. 13, iss. 6, pp. 1162–1175. URL: Link (In Russ.)
Zhidko E.A., Popova L.G. [Information security of Russia in modernization: Statement of the problem]. Informatsiya i bezopasnost' = Information and Security, 2011, no. 2, pp. 181–190. (In Russ.)
Zefirov S.L. [The problem of measuring and evaluating the information security of an organization]. Otkrytoe obrazovanie = Open Education, 2011, no. 2-2, pp. 134–137. (In Russ.)
Sapunov P. Osnovy prognozirovaniya. Innovatsionnye protsessy i ustoichivost' natsional'noi ekonomiki [Principles of forecasting. Innovative processes and sustainability of the national economy]. Moscow, Izdatel'skie resheniya Publ., 2016, 50 p.
Kuznetsov D.A. [System-information models of forecasting of dynamics of development of economic systems]. Prikladnaya informatika = Applied Informatics, 2010, no. 6, pp. 3–9. URL: Link (In Russ.)
