Proceedings of EC2ND'07:
QuiGon : the first tool against Clone Attack on Internet Relay Chat
Thibaut Henin, Corinne Huguennet, arsouyes.org

Abstract
Clone attacks are a way to perform DDOS attack on Internet Relay Chat networks. There is no tool which prevent an IRC network against such attacks despite some handcrafted methods which are not so efficient. Here, we present qui-gon, the first tool which defeat clones attacks. It use a temporal oracle which detect attacks by measuring the connection rate; and another oracle which distinguish clones using probabilistic automata. These oracles learn the characteristic of the network in order to fit better to the network.

Download this paper: pdf