{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,3]],"date-time":"2026-08-03T21:02:23Z","timestamp":1785790943007,"version":"3.56.0"},"reference-count":121,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"1","license":[{"start":{"date-parts":[[2019,1,1]],"date-time":"2019-01-01T00:00:00Z","timestamp":1546300800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2019,1,1]],"date-time":"2019-01-01T00:00:00Z","timestamp":1546300800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2019,1,1]],"date-time":"2019-01-01T00:00:00Z","timestamp":1546300800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Commun. Surv. Tutorials"],"published-print":{"date-parts":[[2019]]},"DOI":"10.1109\/comst.2018.2870658","type":"journal-article","created":{"date-parts":[[2018,9,17]],"date-time":"2018-09-17T21:37:31Z","timestamp":1537220251000},"page":"661-685","source":"Crossref","is-referenced-by-count":149,"title":["DDoS Attacks at the Application Layer: Challenges and Research Perspectives for Safeguarding Web Applications"],"prefix":"10.1109","volume":"21","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-3965-0118","authenticated-orcid":false,"given":"Amit","family":"Praseed","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8359-1330","authenticated-orcid":false,"given":"P. Santhi","family":"Thilagam","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/JISIC.2014.21"},{"key":"ref38","first-page":"29","article-title":"Denial of service via algorithmic complexity attacks","author":"crosby","year":"2003","journal-title":"Proc Usenix Security Symp"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1504\/IJICS.2015.073028"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/ICSESS.2015.7339229"},{"key":"ref31","article-title":"A survey on detection and defense of application layer DDoS attacks","author":"vadlamani","year":"2013"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1504\/IJTMCC.2013.056440"},{"key":"ref37","year":"2011","journal-title":"Effective Denial of Service Attacks Against Web Application Platforms"},{"key":"ref36","year":"2011","journal-title":"Apache HTTPD Security Advisory"},{"key":"ref35","first-page":"195","article-title":"Taxonomy of slow DoS attacks to Web applications","author":"cambiaso","year":"2012","journal-title":"Proc Int Conf Security Comput Netw Distrib Syst"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2016.10.005"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.4036\/iis.2013.173"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/ELEKTRO.2012.6225571"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2013.031413.00127"},{"key":"ref20","author":"ristic","year":"2011","journal-title":"TLS Renegotiation and Denial of Service Attacks"},{"key":"ref22","year":"2016","journal-title":"Kaspersky DDoS Intelligence Report for Q1 2016"},{"key":"ref21","year":"2017","journal-title":"Global DDoS Threat Landscape Q1 2017"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/ISTAFRICA.2014.6880664"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2006.253270"},{"key":"ref101","doi-asserted-by":"publisher","DOI":"10.1109\/GLOCOM.2008.ECP.397"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1007\/s00450-009-0092-6"},{"key":"ref100","first-page":"596","article-title":"DDOS attack detection system based on analysis of users’ behaviors for application layer","volume":"1","author":"meng","year":"2017","journal-title":"Proc IEEE Int Conf Comput Sci Eng (CSE) Embedded Ubiquitous Comput (EUC)"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1002\/sec.1328"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2007.47"},{"key":"ref51","first-page":"1","article-title":"I’m not a human: Breaking the Google reCAPTCHA","author":"sivakorn","year":"2016","journal-title":"Black Hat"},{"key":"ref59","first-page":"524","article-title":"SQL injection attack mechanisms and prevention techniques","author":"chandrashekhar","year":"2011","journal-title":"Proc Int Conf Adv Comput Netw Security"},{"key":"ref58","doi-asserted-by":"crossref","first-page":"292","DOI":"10.1007\/978-3-540-24852-1_21","article-title":"SQLrand: Preventing SQL injection attacks","author":"boyd","year":"2004","journal-title":"Proc Int'l Conf Applied Cryptography and Network Security"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1145\/1108473.1108496"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1145\/1101908.1101935"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/SCEECS.2012.6184829"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/ICWS.2011.22"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/TENCONSpring.2013.6584511"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom.2016.0098"},{"key":"ref40","year":"2014","journal-title":"Single Request HTTP Flood (Multiple VERB Single Request)"},{"key":"ref4","year":"2015","journal-title":"Analysis of Vikingdom DDoS Attacks on U S Government Sites"},{"key":"ref3","year":"2017","journal-title":"Anonymous Attacks Spanish Government Sites"},{"key":"ref6","year":"2012","journal-title":"Anonymous Turns Its DDoS Cannons on India"},{"key":"ref5","year":"2017","journal-title":"Irish Government Websites Taken Down By DDoS Attacks"},{"key":"ref8","year":"2018","journal-title":"Gits Club GitHub Code Tub With Record-Breaking 1 35Tbps DDoS Drub"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2003.1211347"},{"key":"ref7","year":"2016","journal-title":"DDoS Attacks Plague Olympic & Brazilian Government Websites"},{"key":"ref9","year":"2017","journal-title":"Bitcoin gold website down following ddos attack"},{"key":"ref46","year":"2010","journal-title":"XML Flooding"},{"key":"ref45","year":"2014","journal-title":"HTTP Flood Attack"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2008.926503"},{"key":"ref47","year":"2010","journal-title":"DNS Flooding"},{"key":"ref42","year":"2016","journal-title":"HTTP\/2 In-depth analysis of the top four flaws of the next generation protocol"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/EST.2017.8090408"},{"key":"ref44","author":"morgan","year":"2014","journal-title":"XML Schema DTD and Entity Attacks A Compendium of Known Techniques"},{"key":"ref43","year":"2017","journal-title":"XML External Entity (XXE) Processing"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1109\/ICWS.2006.102"},{"key":"ref72","doi-asserted-by":"crossref","first-page":"1097","DOI":"10.1016\/j.jnca.2010.06.004","article-title":"Cloud security defence to protect cloud computing against HTTP-DoS and XML-DoS attacks","volume":"34","author":"chonka","year":"2011","journal-title":"J Netw Comput Appl"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2014.03.003"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1016\/j.compeleceng.2012.07.004"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1155\/2013\/821315"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1109\/ICRITO.2015.7359289"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1109\/CCP.2011.44"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1109\/NSS.2010.69"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1109\/ICCTICT.2016.7514608"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.3390\/e18100350"},{"key":"ref60","first-page":"13","article-title":"A classification of SQL-injection attacks and countermeasures","volume":"1","author":"halfond","year":"2006","journal-title":"Proc IEEE Int Symp Secure Softw Eng"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-016-0359-4"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2016.08.094"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/IC2E.2014.38"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2015.7249476"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2016.20"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/ICCUBEA.2015.60"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1109\/CISIS.2010.53"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1109\/IISA.2013.6623707"},{"key":"ref2","year":"2016","journal-title":"2016 DDoS Attack Statistics"},{"key":"ref69","first-page":"60","article-title":"Analysis of slow read DoS attack","author":"park","year":"2014","journal-title":"Proc IEEE Int Symp Inf Theory Appl (ISITA)"},{"key":"ref1","year":"2012","journal-title":"Cyber Security on the Offense A Study of IT Security Experts"},{"key":"ref109","doi-asserted-by":"publisher","DOI":"10.1109\/VOIPMS.2006.1638123"},{"key":"ref95","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2008.923716"},{"key":"ref108","first-page":"23","article-title":"Detection of denial of service attacks against domain name system using neural networks","volume":"6","author":"rastegari","year":"2009","journal-title":"Int J Comput Sci Issues"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2014.6883402"},{"key":"ref107","first-page":"37","article-title":"Spoof detection for preventing DoS attacks against DNS servers","author":"guo","year":"2006","journal-title":"Proc 26th IEEE Int Conf Distrib Comput Syst (ICDCS)"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2017.7997376"},{"key":"ref106","doi-asserted-by":"publisher","DOI":"10.1145\/2740070.2631442"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2009.5199191"},{"key":"ref105","doi-asserted-by":"publisher","DOI":"10.1145\/1455770.1455796"},{"key":"ref91","doi-asserted-by":"publisher","DOI":"10.1109\/COMPSAC.2015.240"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2007.42"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.1007\/s12652-013-0196-5"},{"key":"ref103","first-page":"185","article-title":"Detecting DNS amplification attacks","author":"kambourakis","year":"2007","journal-title":"Proc Int Workshop Critical Inf Infrastruct Secur"},{"key":"ref102","doi-asserted-by":"publisher","DOI":"10.1109\/ICCI-CC.2014.6921448"},{"key":"ref111","doi-asserted-by":"publisher","DOI":"10.1109\/IWQOS.2006.250469"},{"key":"ref112","doi-asserted-by":"publisher","DOI":"10.1109\/icc.2011.5963248"},{"key":"ref110","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2009.04.007"},{"key":"ref98","doi-asserted-by":"publisher","DOI":"10.4304\/jsw.9.4.985-990"},{"key":"ref99","doi-asserted-by":"publisher","DOI":"10.1109\/HASE.2015.28"},{"key":"ref96","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2008.925628"},{"key":"ref97","first-page":"1","article-title":"Web DDoS detection schemes based on measuring user’s access behavior with large deviation","author":"wang","year":"2011","journal-title":"Proc IEEE Globe Telecommun Conf (GLOBECOM)"},{"key":"ref10","year":"2016","journal-title":"Guardian HSBC suffers online banking cyber-attack The Guardian"},{"key":"ref11","year":"2012","journal-title":"Leading U S Banks Targeted in DDoS Attacks"},{"key":"ref12","year":"2016","journal-title":"Dyn Analysis Summary of Friday October 21 Attack"},{"key":"ref13","year":"2016","journal-title":"Hackers Leave Finnish Residents Cold After DDoS Attack Knocks Out Heating Systems"},{"key":"ref14","year":"2017","journal-title":"DDoS Attacks Delay Trains Stymie Transportation Services in Sweden"},{"key":"ref15","year":"2016","journal-title":"Massive Cyber-Attack Grinds Liberia’s Internet to a Halt"},{"key":"ref118","doi-asserted-by":"publisher","DOI":"10.1109\/IWCMC.2011.5982572"},{"key":"ref16","year":"2014","journal-title":"Bitcoin Hit By Massive DDoS Attack As Tensions Rise"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1109\/GLOCOMW.2013.6824989"},{"key":"ref117","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2018.02.025"},{"key":"ref17","year":"2017","journal-title":"Critical Infrastructure Not Ready for DDoS Attacks FOI Data Report"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1109\/SMC.2013.34"},{"key":"ref18","year":"2016","journal-title":"DDoS Threat Landscape Report 2015–16"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1186\/1687-1499-2011-50"},{"key":"ref119","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2011.12.012"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2000.839316"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-23204-1_14"},{"key":"ref114","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2014.2302298"},{"key":"ref113","first-page":"10","article-title":"New algorithm for SIP flooding attack detection","volume":"4","author":"allawi","year":"2013","journal-title":"Int J Comput Sci Telecommun"},{"key":"ref116","doi-asserted-by":"publisher","DOI":"10.5120\/3067-4192"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2017.09.004"},{"key":"ref115","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2016.2632071"},{"key":"ref120","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2017.03.018"},{"key":"ref89","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCNT.2012.6395941"},{"key":"ref121","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCN.2011.6005946"},{"key":"ref85","first-page":"213","article-title":"Detection of application layer DDoS attacks using information theory based metrics","volume":"10","author":"devi","year":"2012","journal-title":"Proc CS IT-CSCP"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2013.08.002"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.1155\/2018\/9463653"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.1109\/ICCSNT.2012.6526103"}],"container-title":["IEEE Communications Surveys & Tutorials"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9739\/8649699\/08466561.pdf?arnumber=8466561","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,7,13]],"date-time":"2022-07-13T20:53:00Z","timestamp":1657745580000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8466561\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019]]},"references-count":121,"journal-issue":{"issue":"1"},"URL":"https:\/\/doi.org\/10.1109\/comst.2018.2870658","relation":{},"ISSN":["1553-877X","2373-745X"],"issn-type":[{"value":"1553-877X","type":"electronic"},{"value":"2373-745X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2019]]}}}