WiP: Characterizing the Impact of Multiplexed DoS Attacks on HTTP and Detection

Application layer Denial of Service attacks can severely impact the services and at worst render them useless. As many of these come in the form of flooding attacks, traditional detection methods work with thresholds. These are easy to evade using multiplexed attacks where multiple type of attacks are launched in parallel. In this paper, we study the impact of multiplexed attacks using carefully chosen behavioral parameters. Subsequently, we use the observations to propose detection methods. By experimenting with three types of attacks and their combinations against HTTP, we show that using the behavioral parameters, these attacks can be detected.