{"id":"https://openalex.org/W2987595184","doi":"https://doi.org/10.1109/tifs.2019.2950121","title":"Multiplexed Asymmetric Attacks: Next-Generation DDoS on HTTP/2 Servers","display_name":"Multiplexed Asymmetric Attacks: Next-Generation DDoS on HTTP/2 Servers","publication_year":2019,"publication_date":"2019-10-29","ids":{"openalex":"https://openalex.org/W2987595184","doi":"https://doi.org/10.1109/tifs.2019.2950121","mag":"2987595184"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2019.2950121","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2019.2950121","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5027025279","display_name":"Amit Praseed","orcid":"https://orcid.org/0000-0003-3965-0118"},"institutions":[{"id":"https://openalex.org/I11880225","display_name":"National Institute of Technology Karnataka","ror":"https://ror.org/01hz4v948","country_code":"IN","type":"education","lineage":["https://openalex.org/I11880225"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Amit Praseed","raw_affiliation_strings":["Department of Computer Science and Engineering, National Institute of Technology Karnataka, Surathkal, India"],"raw_orcid":"https://orcid.org/0000-0003-3965-0118","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, National Institute of Technology Karnataka, Surathkal, India","institution_ids":["https://openalex.org/I11880225"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5059811306","display_name":"P. Santhi Thilagam","orcid":"https://orcid.org/0000-0002-8359-1330"},"institutions":[{"id":"https://openalex.org/I11880225","display_name":"National Institute of Technology Karnataka","ror":"https://ror.org/01hz4v948","country_code":"IN","type":"education","lineage":["https://openalex.org/I11880225"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"P. Santhi Thilagam","raw_affiliation_strings":["Department of Computer Science and Engineering, National Institute of Technology Karnataka, Surathkal, India"],"raw_orcid":"https://orcid.org/0000-0002-8359-1330","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, National Institute of Technology Karnataka, Surathkal, India","institution_ids":["https://openalex.org/I11880225"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I11880225"],"apc_list":null,"apc_paid":null,"fwci":2.1844,"has_fulltext":false,"cited_by_count":39,"citation_normalized_percentile":{"value":0.88759174,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":"15","issue":null,"first_page":"1790","last_page":"1800"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.8765926361083984},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8404040932655334},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.7389997243881226},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.7027637958526611},{"id":"https://openalex.org/keywords/trinoo","display_name":"Trinoo","score":0.6969819068908691},{"id":"https://openalex.org/keywords/application-layer-ddos-attack","display_name":"Application layer DDoS attack","score":0.598854124546051},{"id":"https://openalex.org/keywords/multiplexing","display_name":"Multiplexing","score":0.5227020978927612},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.44957056641578674},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4228125214576721},{"id":"https://openalex.org/keywords/blocking","display_name":"Blocking (statistics)","score":0.41968560218811035},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.2570359408855438},{"id":"https://openalex.org/keywords/telecommunications","display_name":"Telecommunications","score":0.14934250712394714},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.14229843020439148}],"concepts":[{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.8765926361083984},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8404040932655334},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.7389997243881226},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.7027637958526611},{"id":"https://openalex.org/C43639116","wikidata":"https://www.wikidata.org/wiki/Q7843050","display_name":"Trinoo","level":5,"score":0.6969819068908691},{"id":"https://openalex.org/C120865594","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Application layer DDoS attack","level":4,"score":0.598854124546051},{"id":"https://openalex.org/C19275194","wikidata":"https://www.wikidata.org/wiki/Q222903","display_name":"Multiplexing","level":2,"score":0.5227020978927612},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.44957056641578674},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4228125214576721},{"id":"https://openalex.org/C144745244","wikidata":"https://www.wikidata.org/wiki/Q4927286","display_name":"Blocking (statistics)","level":2,"score":0.41968560218811035},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.2570359408855438},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.14934250712394714},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.14229843020439148},{"id":"https://openalex.org/C204787440","wikidata":"https://www.wikidata.org/wiki/Q188504","display_name":"Alternative medicine","level":2,"score":0.0},{"id":"https://openalex.org/C142724271","wikidata":"https://www.wikidata.org/wiki/Q7208","display_name":"Pathology","level":1,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2019.2950121","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2019.2950121","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","score":0.4399999976158142,"id":"https://metadata.un.org/sdg/9"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320325255","display_name":"Ministry of Electronics and Information technology","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":31,"referenced_works":["https://openalex.org/W842097883","https://openalex.org/W1595859951","https://openalex.org/W1660261345","https://openalex.org/W1779735989","https://openalex.org/W1971111941","https://openalex.org/W2008789452","https://openalex.org/W2070220341","https://openalex.org/W2111942706","https://openalex.org/W2124589355","https://openalex.org/W2134598092","https://openalex.org/W2155589792","https://openalex.org/W2162969618","https://openalex.org/W2170874246","https://openalex.org/W2187529641","https://openalex.org/W2187970900","https://openalex.org/W2748868501","https://openalex.org/W2758836598","https://openalex.org/W2766692711","https://openalex.org/W2767050622","https://openalex.org/W2783291460","https://openalex.org/W2792146358","https://openalex.org/W2808653558","https://openalex.org/W2888872082","https://openalex.org/W2892142441","https://openalex.org/W2903018681","https://openalex.org/W2950351416","https://openalex.org/W6623414159","https://openalex.org/W6676707958","https://openalex.org/W6687045514","https://openalex.org/W6743493502","https://openalex.org/W6754357002"],"related_works":["https://openalex.org/W2783466926","https://openalex.org/W4286539397","https://openalex.org/W1968168724","https://openalex.org/W2204131204","https://openalex.org/W2754163055","https://openalex.org/W4322008378","https://openalex.org/W2383770723","https://openalex.org/W2186749541","https://openalex.org/W2360429410","https://openalex.org/W4256682929"],"abstract_inverted_index":{"Distributed":[0],"Denial":[1],"of":[2,27,55,184,198],"Service":[3],"(DDoS)":[4],"attacks":[5,39,122,155,169],"using":[6,44,87,123],"the":[7,25,74,147,182,196,213],"HTTP":[8,78],"protocol":[9,149],"have":[10],"started":[11],"gaining":[12],"popularity":[13],"in":[14,20,128,140,232,277],"recent":[15,18],"years.":[16],"A":[17],"trend":[19],"this":[21,141,192],"direction":[22],"has":[23,57,94,136,177],"been":[24,58,138,179],"use":[26],"computationally":[28],"expensive":[29],"requests":[30,79,127],"to":[31,51,76,110,118,152,203,279],"launch":[32,119,153],"attacks.":[33],"These":[34],"attacks,":[35],"called":[36,223],"Asymmetric":[37,209,226,261],"Workload":[38],"can":[40,114,166,244,270],"bring":[41,245],"down":[42,246],"servers":[43],"limited":[45],"resources,":[46],"and":[47,67,80,89,99,186],"are":[48],"extremely":[49],"difficult":[50],"detect.":[52],"The":[53],"introduction":[54],"HTTP/2":[56,148,164,200],"welcomed":[59],"by":[60,73,86],"developers":[61],"because":[62],"it":[63],"improves":[64],"user":[65],"experience":[66],"efficiency.":[68],"This":[69],"was":[70],"made":[71,95],"possible":[72],"ability":[75],"transport":[77],"their":[81],"associated":[82],"inline":[83],"resources":[84],"simultaneously":[85],"Multiplexing":[88,185],"Server":[90,187,267],"Push.":[91],"However":[92],"multiplexing":[93,113,231],"request":[96],"traffic":[97],"bursty":[98],"rendered":[100],"DDoS":[101,121,154,168,210,220,227],"detection":[102],"mechanisms":[103],"based":[104],"on":[105,161,181,263],"connection":[106],"limiting":[107],"obsolete.":[108],"Contrary":[109],"its":[111],"intention,":[112],"also":[115,256],"be":[116],"misused":[117],"sophisticated":[120],"multiple":[124],"high":[125],"workload":[126],"a":[129,218,224,233,247,251,259,264],"single":[130],"TCP":[131],"connection.":[132],"However,":[133],"sufficient":[134,175],"research":[135,144,176],"not":[137,159,178],"done":[139,180],"area.":[142],"Existing":[143],"demonstrates":[145],"that":[146,240,258],"allows":[150],"users":[151],"easily,":[156],"but":[157],"does":[158],"focus":[160],"whether":[162],"an":[163,199,204,208,242,272,280],"server":[165,201,206,248,265],"handle":[167],"more":[170],"efficiently":[171],"or":[172],"not.":[173],"Also,":[174],"possibility":[183],"Push":[188,268],"being":[189],"misused.":[190],"In":[191],"work,":[193],"we":[194],"analyse":[195],"performance":[197],"compared":[202],"HTTP/1.1":[205],"under":[207],"attack":[211,221,243],"for":[212],"same":[214],"load.":[215],"We":[216,238,255],"propose":[217],"new":[219],"vector":[222],"Multiplexed":[225,260],"attack,":[228],"which":[229],"uses":[230],"different":[234],"way":[235],"than":[236],"intended.":[237],"show":[239,257],"such":[241],"with":[249,266],"just":[250],"few":[252],"attacking":[253],"clients.":[254],"Attack":[262],"enabled":[269],"trigger":[271],"egress":[273],"network":[274],"layer":[275,282],"flood":[276],"addition":[278],"application":[281],"attack.":[283]},"counts_by_year":[{"year":2026,"cited_by_count":5},{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":9},{"year":2023,"cited_by_count":8},{"year":2022,"cited_by_count":7},{"year":2021,"cited_by_count":5},{"year":2020,"cited_by_count":2}],"updated_date":"2026-07-29T09:40:50.615796","created_date":"2025-10-10T00:00:00"}