Aries Building Systems understands the struggle in Puerto Rico to get school systems back in operation. All modular classroom buildings are capable of handling small to large scale school systems with optional water treatment systems and gas generators.
Aries Building Systems understands Puerto Rico's struggle to get school systems back in operation so tomorrow's leaders can get back in the classroom.
As clean water supply and electricity continue to be a lingering issue in Puerto Rico following the devastation caused by Hurricane Maria, Aries Building Systems is prepared to offer their state-of-the-art modular classrooms so students can get back in school. All modular buildings from Aries Building Systems come with optional gas generators capable of powering small to large scale school systems and water treatment systems to provide a fresh and clean water supply.
Aries Building Systems has the supply to meet the immediate demand for stable and sturdy modular buildings with all the requirements and comforts that school administrators and students need to begin again. As thousands of families and students flock stateside to re-enter the school systems they desperately need, Aries Building Systems is offering onsite delivery and set-up to make the rebuilding process as quick and simple as possible—click here to learn about their financing options.
Because their manufacturing capabilities allow them to build your facility off site while simultaneously progressing land development on site, Aries Building Systems can complete projects in just half the time of traditional construction. Every modular buildings is under stringent codes and regulations, so you'll never have to worry about the quality and safety of your modular facility.
Government officials and school board administrators alike should consider Aries Buildings Systems to aid in the rebuilding process in Puerto Rico and to help facilitate the processes necessary to get students back in school with the stability that they deserve. Although an ample supply of modular buildings are available, Aries Building Systems is also capable of customizing modular classroom buildings to cater to every need that Puerto Rico has in regards to specific school and classroom requirements.
Be sure to check out Aries Building Systems here or call now to see how they can work with you to get your students back in the classroom today—(888) 981-6137.


Don't forget you can join us on Twitter, we're @BescotBanter, where we'll bring you pre and post match coverage as the Saddlers look to secure three crucial points against the Posh.
O'Connor, who was speaking after his side had slipped to a seventh defeat in eight league outings as Wycombe Wanderers secured three crucial points on Easter Monday, insisted that he will not pick players who haven't got a will to fight, before calling upon his squad to step up to the challenge.
Keates, who watched as his side were unlucky not to take more than a point from the Posh, admitted that he was lost for words as the Saddlers once again failed to make the most of a large number of goal-scoring opportunities as they were held to a draw.
The Saddlers arrived at this weekend's game on the back of last Saturday's dismal defeat to then bottom-of-the-table Bradford City, a match which saw them concede four goals without reply as the Bantams took advantage of a dreadful performance.
Keates, who watched as his side suffered a four-nil drubbing at the hands of the struggling Bantams, reiterated his stance that the level of performance will not be tolerated before revealing that the he and his squad have spoken both individually and collectively and are keen to put the match behind them.
Keates, who returned to the club last season - replacing then-boss Jon Whitney - saw his side collect thirteen of a possible fifteen points over the month as they registered an opening-day victory over Plymouth Argyle and a draw at Scunthorpe United, before recording three successive victories, against Gillingham, AFC Wimbledon and Rochdale respectively.
Walsall manager Jon Whitney has spoken to BBC WM Sport following Tuesday evening's 2-1 defeat to Peterborough United and admitted that some individual errors cost his side as they end February with two defeats on the bounce.
The Saddlers looked to bounce back from Saturday's defeat to League One leaders Blackburn Rovers as they travelled to London Road and took on managerless Peterborough United on Tuesday evening. We were in attendance, and you can read our match report below.
Walsall manager Jon Whitney has spoken ahead of this evening's League One clash with managerless Peterborough United, and called upon his side to replicate their second-half showing against league leaders Blackburn Rovers as they look to take an important step towards securing their future in the third tier.
Walsall midfielder George Dobson has spoken to the press ahead of this evening's League One clash with Peterborough United and looked back to last weekend's defeat to league leaders Blackburn Rovers, insisting there are plenty of positives to take from the game.
Walsall manager Jon Whitney has been listed among the potential candidates for the newly vacant managerial position at the Saddlers' League One rivals Peterborough United, with the 47-year-old named alongside Steve Evans, Uwe Rosler, Mark Warburton and many others.
Walsall FC have confirmed a new date for the Saddlers' League One clash with Peterborough United, which was originally scheduled to take place at London Road on Saturday, 6th January 2018, but was postponed due to our opponents Emirates FA Cup commitments.
Walsall FC have confirmed that the Saddlers' League One match clash with Peterborough United, which was scheduled to take place at London Road on Saturday, 6th January 2018, has been postponed due to Posh's Emirates FA Cup commitments.
Walsall manager Jon Whitney spoke to BBC WM 95.6 following Saturday afternoon's League One draw with high-flying Peterborough United, and insisted that his team deserved the point as they bounced back from their midweek defeat to Rotherham.
The Saddlers returned to League One action on Saturday afternoon as they took on Peterborough United at Banks's Stadium. We were in attendance and you can read our match report below.
Jon Whitney - "Our Pride Has Been Dented But We Have a Chance to Put it Right"
Saddlers manager Jon Whitney has spoken ahead of Saturday afternoon's League One clash with Peterborough United, and has insisted that he and his team have looked back at the midweek defeat to Rotherham United and are determined to right the wrongs as they take on the Posh.


Today we were informed by Epsilon Interactive, our national email service provider, that your email address was exposed due to unauthorized access of their system. Robert Half uses Epsilon to send marketing and service emails on our behalf.
We deeply regret this has taken place and any inconvenience this may have caused you. We take your privacy very seriously, and we will continue to work diligently to protect your personal information. We were advised by Epsilon that the information that was obtained was limited to email addresses only.
Please note, it is possible you may receive spam email messages as a result. We want to urge you to be cautious when opening links or attachments from unknown third parties. We ask that you remain alert to any unusual or suspicious emails.
As always, if you have any questions, or need any additional information, please do not hesitate to contact us at customersecurity@rhi.com.


text:
Skip to main content ABC Home
Home - About the ABC
The ABC Board
The ABC Leadership Team
ABC Advisory Council
ABC at a glance
ABC History
How the ABC is run
What governs and guides us
Director of ABC Regional & Local, Michael Mason, announces his departure from the ABC
Posted 17th October 2018
Director of ABC Regional & Local, Michael Mason, announced today that he would be leaving the ABC in early December. In a statement to staff Mr Mason said that when he accepted the new role as Director Regional & Local, he did so with a view that he would revisit that decision after twelve months.
"After 34 years at the ABC and the last five years as Director of Radio and then Regional & Local, I can honestly say I have been privileged to have had the opportunity to work alongside some of this country's greatest broadcasting and media talent – both in front of and behind the mic."
"I am aware that we have just experienced significant change at the highest levels within the ABC. I am also keenly aware of the incredible depth and talent that exists in both the ABC's executive leadership team and the Regional & Local executive team and it is for this reason that I believe now is the right time for me to step down as Director," Mr Mason said.
Mr Mason said his decision to leave the ABC was made in early August before the departure of former Managing Director Michelle Guthrie and former Chairman, Justin Milne and was in no way linked to those events.
The role of Director of Regional & Local will be advertised internally as soon as possible with the aim of appointing a new director before Michael's departure in mid-December. Until that process is completed, Head of Specialist, Judith Whelan, will act as Director of Regional & Local.
Judith Whelan has worked in the media for more than 30 years and was most recently in the role of ABC Head of Specialist, where she oversaw coverage of Arts, Science, Health & Technology, Religion & Ethics, Education and Society & Culture across all the ABC's platforms. She has also overseen RN, Grandstand and the ABC's Capital City local radio network in her former position as Head of Spoken Content within the former Radio division.
SEARCH About the ABC
ABC Publicity Media Room
ABC Corrections & Clarifications
ABC on LinkedIn
Hiring mini-mes? How to spot similarity bias and encourage diversity at work - ABC Life
Hiring mini-mes? How to spot similarity bias and encourage diversity at work: https://ab.co/2KjDd2C
Update / 3m ago
Recruitment Adviser, Adelaide
Adelaide, AU
Recruitment Adviser, Sydney
Forty years in public broadcasting - what has and hasn't changed
Editorial Director Alan Sunderland wraps up with the ABC this week, retiring after a long and distinguished career. On Backstory, Alan reflects o…
ABC Regional Storyteller Scholarships Announced
This year's ABC Regional Storyteller Scholarship has been awarded to two content makers with disability from regional NSW and Queensland. Congr…
All ABC on LinkedIn
Interested in working at the nation's largest national broadcaster, and the independent source of Australian conversations, culture and stories? Visit ABC Careers.
ABC International Development
The ABC International Development team uses its media expertise to connect and empower people in the Asia-Pacific region, and globally, to have a voice. Learn more.
The ABC has grown remarkably since it launched on 1 July 1932. This is a snapshot of our achievements, programs and personalities and celebrates the ABC's contribution to Australian life for more than 80 years.
The ABC and Australian music
Access ABC / 08 Jan 2019
Religion, Ethics and the ABC
Access ABC / 08 Nov 2018
Keeping the media accountable
From the Editorial Director / 10 Sep 2018
Life…as we know it
From the Editorial Director / 06 Aug 2018
Explore the ABC
Featured stories*
Popular stories*
People*
ABC Appeals
ABC Tours
Programs*
triplej
Unearthed
Children's TV Guide
More from ABC
We acknowledge Aboriginal and Torres Strait Islander peoples as the First Australians and Traditional Custodians of the lands where we live, learn and work.

redpajama_set_name: RedPajamaCommonCrawl


text:
ScreenwritingScreenwriting Process
Top 5 Common Problems In Screenplays
By The Fiction Writer	December 2, 2018 April 9th, 2019 No Comments
Top 5 Screenwriting Pitfalls To Avoid
In any business there are many common mistakes that are made by millions of people on a daily basis. Screenwriting and the movie business is no exception. There are no perfect screenplays that exist by any means, however there are tons of screenplays that get passed over for the same reasons. Below are five common examples of why readers may get bored with the screenplay you worked so hard to finish.
#1: The Overall Story Is Just…Boring
This may seem obvious, but the main culprit for this issue is that your concept may not be strong enough. Developing a strong concept that resonates with people is one half of the equation and executing that concept in a creative way is the other half. So, those are two pieces of a puzzle you will need to get right just to keep people awake while they read your script.
The concept is the core idea that runs throughout the entire screenplay. Your screenplay's concept should get you excited just thinking about it and although it doesn't have to be original — it has to feel original.
Solution #1
One way you can begin creating your concept is to start with a question such as "What if…?" What if aliens invaded our planet on Independence Day? What if a mercenary robot was sent from the future to kill a woman before she gave birth to a boy who grows up to be the world's only savior? What if a spy was sent undercover to infiltrate a group of criminals and discovered he has been fighting for the wrong side of justice?
You can also think of movies you felt were pretty bad and use those as a starting point. That's right — bad movies can serve as a jumping off point for your awesome concept. As a writer, you shouldn't just think of a bad movie like the average consumer. Use it as an opportunity to exercise your brain on what YOU would have done to improve things. What would YOU have done differently that could have saved this story from being a flop? Would you have had a more interesting villain? How would you have changed the overall plot if you had total control? After you've answered some of those questions you just might find that you have a completely new storyline on your hands!
Once you've come up with a story concept, challenge yourself to go a step further by making sure the story actually says something. I'm not talking about the dialogue within the story — but the story itself. What's the purpose of this story? Does it have a theme? If not, then think about what it is your hero will learn once he reaches his goal. He or she should not be the same person they started out as in the beginning of the story. The plot to your cool concept is really just a visual way of showing how your characters resolve their inner journey or flaw.
In the boxing drama Rocky — Sylvester Stallone didn't just play a boxer who wanted to beat the champion. He played a small time boxer who got a rare chance to fight the heavy weight champion by the stroke of luck. Rocky didn't believe in himself. He didn't have any real self esteem and believed he was a loser. He took the fight to prove to himself that he wasn't a bum — and he was willing to risk his life in the ring to prove it. The story's concept is more of a love story and has a strong theme about self doubt. it wasn't just a boxing movie. Get it?
If you'd like to dig into more ways of how to create a strong concept check out the eBook below.
Learn to Write Stronger Story Concepts, Themes & Loglines
How to Name Your Fictional Characters
#2: Your Screenplay Starts Off Too Slow
Not that your story always has to begin with explosions, fist fights and car chases but at some point the audience is going to expect something interesting to happen related to the overall plot. Unlike a novel, a screenplay is meant to be written with brevity broken up into beats and moments. Within those beats and moments should be emotional experiences that move the story forward at all times. Just because you intend for a character to die a slow death doesn't mean it should literally be a slow read. Always keep in mind how your script would play out if you were watching it in the movies. One of the key things most great scripts share in common is good pacing.
Pacing isn't a set speed at which things must happen, however things should happen at a pace that feels organic and natural to the audience. A lot of times genre plays a key role in how you pace your story. If you're writing a horror film then perhaps show us something creepy or scary every five to ten pages. In a thriller, we'll expect a certain amount of suspense and action. Within a comedy the basic idea is to keep the crowd laughing, so whether there's a punchline every ten pages will depend on the story — but for God's sake make sure you get to the point!
#3: The Writer Runs Out Of Gas At The Mid-Point
Like any long journey, you can't finish unless you know where you're going. Imagine yourself having to navigate through a jungle. If your map is clear and to the point you will be able to get through with no problems. Now, picture yourself trying to get through that same jungle without a map. You'd be wandering around until you eventually died! Crafting an effective story is the same way. You need to know where your main character is going otherwise you'll bore your audience to death.
A lot of writers get stuck at the mid-point because of many reasons. They haven't thought the entire story through to the end, they're unclear what the character's goal is, the characters never change thus creating an extremely long first act…the list goes on. So how do you get through this part of your story known as the mid-point? Well, let's take a look at what should happen in your second act. Here's a quote from Syd Field:
An important scene in the middle of the script, often a reversal of fortune or revelation that changes the direction of the story.
What is your character's worst nightmare? In the second act of the story — show us. Ramp up the danger and fear factor for your main character. Turn the heat up. Your story should take us on a rollercoaster ride filled with emotions. That is not to say there has to be massive alien invasions and buildings exploding, but there should be some type of change in the tone of the story. The stakes get raised, a ticking clock appears, the A & B storylines come to head…any of these will do. Just don't bore us with the same stuff you showed us in the first act.
#4: The Climax Doesn't Hit The Audience Or Reader Hard Enough
If your audience or readers have made it to the third act of your story, then chances are they're expecting your hero to face a major setback. This is your story's climax. The climax is the point of no return for your main character. It is the psychological or physical challenge that forces the main character to commit themselves totally to their goal. If you've managed to keep the audience interested up until this point and they make it all the way to the end, yet they feel UNSATISFIED…this may be one of your weak points.
Let's take a look at some examples — WARNING: SPOILER ALERT.
Rocky IV tells the story of how retired heavyweight champion Rocky Balboa witnesses his best friend Apollo Creed get murdered in the boxing ring by a challenger named Ivan Drago. Drago seems like an unstoppable killing machine and is quickly challenged by Rocky who must travel and train in the Soviet Union to get revenge. Rocky risks his life in the ring as he gets beat to a pulp, almost just as bad as Apollo. The climax happens when Rocky, barely standing, refuses to give up and shows so much heart that the Russian crowd begins cheering for him instead of Drago.
In Creed II, after winning the championship belt, Adonis (Apollo Creed's son) is immediately challenged by Drago's son. Adonis is filled with all types of emotions as he listens to the son of the man who killed his father taunt him in the media. Against Rocky's wishes, he faces Drago and gets knocked unconscious, almost losing his life the same way his father did. Drago is disqualified because of the type of punch he landed and the fight is called off. While Adonis is able to keep his championship belt, his injuries are serious and he realizes for the first time he is afraid, confused and doubts himself. The climax hits us when Creed is given a certain amount of time to either get back in the ring with another challenger or forfeit his belt. The media and public questions if he really is a champion if he doesn't fight Drago in a rematch. Adonis agrees to fight Drago again, this time having Rocky train him. He risks everything and there is no turning back. If he gets injured or killed, what will his fiance and new born baby do? Do you understand how the stakes are raised at this point and the goal becomes even more critical to achieve at this point?
In the movie Titanic, the climax happens when the entire ship is sinking and Rose has to make a split decision by escaping on a small lifeboat or waiting for Jack (her love interest) who is nowhere to be found at the moment.
Remember the original Karate Kid movie? Daniel is a new kid in town who gets bullied to the point of desperation. The bully named Johnny is a martial arts student and terrorizes him at every opportunity he gets. An older man named Mr. Miyagi teaches and trains Daniel martial arts and has Daniel challenge Johnny in a major karate tournament — Johnny accepts and agrees not to bully Daniel while he trains for the fight. During the tournament fight, which happens in the third act, Daniel fights his way to the finals to face his nemesis Johnny — until the climax hits us like a wrecking ball! Johnny's sensai instructs one of his students (Bobby) to disqualify himself by injuring Daniel just before he faces Johnny. Take a look at the scene for yourself.
This is what some would also refer to as an "all is lost" moment because Daniel is injured and it doesn't look like he will be able to face Johnny in a showdown. It's an emotional rollercoaster for the audience because we've been rooting for Daniel the entire story to take Johnny out and redeem himself.
So ask yourself, does your climax have a strong emotional impact on the reader or the audience? Or is it something we'd sleep though?
#5: The Characters Are Cliche Or Forgettable
Noone wants to spend over an hour watching a bunch of characters we've seen a million times before. There are a number of ways you can lose a reader or audience's attention with your characters if they're not crafted carefully and are not well thought out.
Make sure that your characters are all three dimensional in some kind of way. What do they do when they're in front of the public eye? How are they when they're around friends and family? What secrets do they have? Don't just show us a bunch of surface stuff like how pretty they are, what kind of car they drive, eye color, etc.
Here are a few things to avoid when you're developing and writing your characters into your story.
The characters talk a lot instead of showing us with actions.
It's a natural mistake to have your characters tell us everything in an exposition dump rather than creating clever ways to show us instead. You may think you're doing your best rendition of a character similar to someone from a Tarantino movie, but you're probably not. Dialogue is challenging to a lot of writers and is not something to just glaze over when doing your rewrites. Whatever you do, make sure your characters are mostly showing us instead of telling us…or doing both at the same time. The fastest way to put people to sleep is to make them listen to minute details within a conversation that are key to the plot. You'd be surprised how short the average person's attention span is.
You've modeled the main character after yourself.
No offense, but most likely your life isn't as interesting as you may think it is. If it's not something folks would want to pay money to see then you should probably avoid this common mistake. Using aspects of your life is okay, but when your character is confined to what you would and would not do then you'll run into problems creating this fictional story because you're stuck on it being realistic and synonymous with your personality.
We've seen this guy a hundred times before and your version is no different.
The hooker with a heart of gold, the nice guy that always finishes last, the hero who wakes up in the hospital and yanks out their IV's regardless of how bad they're hurt, the list goes on. It's okay to use cliche and tropes so long as you bring something new to the table.
You've got a token minority character in your story — but he or she is based off stereotypes and other characters you've seen before.
This one falls under the category of cliches and tropes, but not in a good way. For instance, if you're writing a minority character into your story ask yourself some of these questions:
Does the African character have to be a warlord or somehow completely uncivilized with the rest of the world?
Similarly, does the African American guy have to be a thug, criminal, servant or the most disposable character to be killed in the face of danger?
Does the Asian guy have to be a nerd or sexually awkward in some type of way? Quick examples: Kal Penn in Van Wilder, Steve Park in Fargo or Jet Li in Romeo Must Die who couldn't get a kiss from the love interest (Aaliyah) to save his life.
Also, avoid the Arab or middle eastern terrorist who is obsessed with taking down America. Arabs specifically have a long history of stereotypes within classic Hollywood films — everything from belly dancers, harem girls to oil sheiks.
Native Americans have been depicted as bloodthirsty warriors out to spill the white man's blood and kidnap or rape their women in classic cowboy and Indian movies — be sensitive to that as well.
Does your Latino male character have to be some form of a "latin lover" or the Latina female character portrayed as "exotic"? Hispanic characters in television have a history of being gardeners and lawn care people before having an occupation more akin to a lawyer or corporate professional.
The villain is overtly evil with no redeemable qualities.
Villains are humans too. Before they became a villain they probably started out the same way you did (assuming you're a good person lol). Try to think through scenarios that would make a normal person turn into a bad person. Did the justice system fail them when they witnessed a loved one murdered? Were they bullied all their life? Did they face some type of abuse? Do they suffer from mental illness? There are a multitude of options you can pick from to make the villain not only interesting, but compelling. Remember, he or she doesn't have to be likable, but we do need a reason to empathize with their motivations.
Story Ideas: 10 Secrets Your Characters Are Hiding
One way to make sure your characters are interesting is to give them a secret to hide. Check out the video above to see how this could affect your plot, the way your character acts or reacts within certain scenes.
Read Full Blog Post
ScreenwritingWriting Prompts
Secret Story Ideas & Writing Prompts
The Fiction WriterNovember 12, 2019
ScreenwritingStory Structure
30 Movie Plot Twists & How To Write Them
The Fiction WriterAugust 9, 2019
60 Story Ideas For Your Screenplay Or Novel
© 2020 The Fiction Story Room. View Our Terms & Conditions.


text:
Menu ⤬
Frieze Art Fair - The Cartier Award 2007
https://www.neme.org/blog/frieze-art-fair-the-cartier-award-2007
Frieze Art Fair
Regent&8217;s Park, London
The Cartier Award for emerging artists living outside the UK is a major initiative by Frieze Projects, the curatorial programme of Frieze Art Fair, in collaboration with Gasworks and sponsored by Cartier.
Artists are invited to propose a new work to be realised at Frieze Art Fair 2007 which will be produced under the auspices of Frieze Projects.
Projects may take the form of site-specific installation; performance; film; video and print work.
The Cartier Award includes:
3 month residency at Gasworks from mid September to mid December 2007 including accommodation, per diems and travel expenses
Project production costs of up to £10,000
An artist&8217;s fee of £1,000
The Cartier Award selection committee 2007 is:
Kitty Anderson (Associate Curator, Frieze Projects)
Hervé Chandes (Director, Cartier Foundation for Contemporary Art, Paris)
Mia Jankowicz (Residency Coordinator, Gasworks)
Matthieu Laurette (Artist)
The Cartier Award is open to non UK based artists within 5 years of graduating from an undergraduate or postgraduate degree.
The deadline for applications is Friday 5 January 2007.
Gasworks is a contemporary arts organisation in South London housing 12 artists&8217; studios and presenting a programme of exhibitions, residencies, international fellowships and educational projects.
Cartier has a long-standing relationship with contemporary art. Twenty two years ago the company established the Cartier Foundation for Contemporary Art in Paris – a unique example of corporate patronage for contemporary art.
Cartier is the Associate Sponsor of Frieze Art Fair supporting Frieze Projects and the Cartier Award.
The directors of Frieze Art Fair recently announced the appointment of Neville Wakefield as curator of Frieze Projects at Frieze Art Fair.
Neville Wakefield is an independent curator, critic and editor based in New York. He most recently curated Defamation of Character, an international group exhibition on show until January 2007 at MOMA/PS1 in New York. Earlier this year he co-founded and co-produce Destricted, a series of films about the presentation of sexuality in art.
⇚ Tomma Abts Wins Turner Prize 2006
Renascence 07: Call for New Media ⇛
5 Jan 205
Proposals for the NeMe Arts Centre [New Threads] Project
Respublika!
State Machines
Submit a call
Submit a text
NeMe on YouTube
Reprogramming earth
The event of a thread - Seminar
Echigo-Tsumari Art Triennale 2021 call
Covid-19; a resource
Mirror Palace of Democracy
The Event of a Thread. Global Narratives in Textiles
The Idea of the Avant Garde-And What it Means Today 2
Respublika! publication review
Search Site NeMeRespublikaForum Search
© 2006-2021 NeMe and/or respective contributors. 2004-2021 The content in the Blog section of this site is licensed under a Creative Commons Attribution 4.0 International license.
Privacy policy (Modified on 22 May 2020 at 03:56:31 AM)
This site archives 1,913 posts since it was launched 17 years, 11 months and 30 days ago and it was last modified on 17 January 2021 at 10:40:14 AM.
To make sure that this website remains accessible in the European Union, we are forced to include this superfluous notice to inform you that this website, like most of the websites in the world, works best with cookies. We do not profile you or use the data for any commercial purposes except to study ways to enhance user experience in ours sites. We hope that you are happy with that, and that you will help us continue this research by accepting our cookies but, unlike with other websites, surfing our site in privacy is still possible should you decide not to. You can find out more about our use of cookies by reading our privacy policy.


text:
Rakt Kalyan: Hindi Translation of Girish Karnad's Tale Danda
Annual Student Production 2018-19
Rakt Kalyan
Original play Tale Danda by Girish Karnad
Directed by Sunil Shanbag
Translation by Ram Gopal Bajaj
Written in 1989 in the backdrop of mandirmandal conflict, this play draws parallels in the socioreligious, political and economic conditions between southern India in the 12th century A.D during Bhakti Movement and the current times as we see them today. Eight hundred years ago in the city of Kalyan a man called Basavanna assembled a congregation of poets, mystics, social revolutionaries and philosophers  unmatched in their creativity and social commitment. They opposed idolatry, rejected temple worship, upheld equality of sexes, and condemned the caste system. Events take a violent turn when they act on their beliefs and an upper caste Brahmin girl is married to a nonBrahmin boy. Rakt Kalyan (TaleDanda) is a story spanning a few weeks that shows how a vibrant, prosperous society is plunged into anarchy and terror.
Director Profile: Sunil Shanbag
Sunil Shanbag is a Mumbai based theatre director and producer. He is the cofounder and artistic director of Theatre Arpana, and Tamaasha Theatre. Over the past 35 years, Sunil's work across various genres of theatre practice has focussed on the complex nature of contemporary India, on stage as well as in various alternative spaces. His work spans across themes and issues that concern modern Indian society, across class, caste, gender and other inequalities. Major productions include Cotton 56, Polyester 84, S*x, M*rality, and Cens*rship, Stories in a Song, Loretta, and most recently, a reimagining of the 1945 iconic play by Prithviraj Kapoor, Deewar. His work is seen at major theatre festivals across the country, and has also been presented over two seasons at the Shakespeare Globe Theatre in London. He has been associated with Theatre Freiburg in Germany. Sunil Shanbag has recently been awarded the Sangeet Natak Akademi award for theatre direction, 2017.
Writer Profile: Girish Karnad
Girish Raghunath Karnad (Born 19 May 1938) is an Indian actor, film director, Kannada writer, playwright and a Rhodes Scholar, who predominantly works in South Indian cinema and Bollywood. His rise as a playwright in the 1960s, marked the coming of age of modern Indian playwriting in Kannada, just as Badal Sarkar did in Bengali, Vijay Tendulkar in Marathi, and Mohan Rakesh in Hindi. He is a recipient of the 1998 Jnanpith Award, the highest literary honour conferred in India.
For four decades Karnad has composed plays, often using history and mythology to tackle contemporary issues. He has translated his plays into English and has received acclaim. His plays have been translated into some Indian languages and directed by directors like Ebrahim Alkazi, B. V. Karanth, Alyque Padamsee, Prasanna, Arvind Gaur, Satyadev Dubey, Vijaya Mehta, Shyamanand Jalan, Amal Allana and Zafer Mohiuddin. He is active in the world of Indian cinema working as an actor, director and screenwriter, in Hindi and Kannada cinema, and has earned awards. He was conferred Padma Shri and Padma Bhushan by the Government of India and won four Filmfare Awards, of which three are Filmfare Award for Best Director – Kannada and the fourth a Filmfare Best Screenplay Award.
For entry: RSVP at info@thedramaschoolmumbai.in


Storseisundet Bridge is the longest of the eight bridges that make up the Atlanterhavsveien ("The Atlantic Road"), the road connection from the mainland Romsdal Peninsula to the island of Averøya in Møre og Romsdal county, Norway.
It is a bridge on one of Norway's most scenic and popular tourist roads – the Atlantic Ocean Road (Atlanterhavsveien in Norwegian). The bridge named Storseisundet makes a sharp bend as it jumps over a number of small islands and waterways. The approach to the bridge looks scary as the bridge seems to end abruptly and as if any attempt to proceed would result into the vehicle flying out and dropping into the waters below.


text:
Чемпіонат світу з хокею із шайбою 2019 (Дивізіон І) — чемпіонат світу з хокею із шайбою ІІХФ, який пройшов в двох групах: Група А Будапешт (Угорщина) та Група В Пекін (КНР).

Група А

Підсумкова таблиця

Нагороди
Найкращі гравці, обрані дирекцією ІІХФ
 Найкращий воротар:  Ена Нюстрем
 Найкращий захисник:  Шарлотт Віттіш
 Найкращий нападник:  Фанні Гаспарич
Джерело: IIHF.com

Група B

Підсумкова таблиця

Нагороди
Найкращі гравці, обрані дирекцією ІІХФ
 Найкращий воротар:  Крістіана Апрсіте
 Найкращий захисник:  Парк Чхе-лін
 Найкращий нападник:  Савіне Віленга
Джерело: IIHF.com

Примітки

Посилання
Група А
Група В

Чемпіонат світу з хокею із шайбою серед жінок
2019 у хокеї з шайбою

redpajama_set_name: RedPajamaWikipedia


Most Recent Extreme Handjobs Videos!
This is the place for unusual and cruel handjobs. Humiliating. Rough. Painful. The girls you see on this site take revenge handjobs on boyfriends, peeping Toms, relatives, officers, bosses or any man who crosses them. They are beautiful, they are angry, and they want revenge. They are real girls. These are real handjobs. Reality handjobs! Don't cross your GF or wife or you might end up here!
Featuring 4 Clips / 45 minutes of video!


Everyone, of course, wants to have a beautiful and interesting design out of their house, especially using wireless outdoor lighting. What does it mean? Well, this design will completely give and add the unique look out of your house. Easily, you can use this great idea anywhere. Do you know them, guys? Yea, it may be on the decks, the beautiful garden or park, the clean pools, or it can be around the walkways. It is according to your desire and needs.
In designing wireless outdoor lighting, there is a thing which is the most significant to pay attention. What is it? Can you guess it? Yea that is right. It is the position of the light which will be arranged. Besides, it is better for you to know that the light of the wireless is green. So, you do not need to think about the direction to allocate the electricity for each lamp which will be used.
Related to the position of the light, you can choose freely. Commonly, the light position is designed to beautify something so that the suggestion for you is to provide any things around it to get the most excellent look.
If you want to have a pool which has an attractive look, you may add the wireless light around it. You can design the light with the unique shape and well order. In this case, you are allowed to select many shapes which are variables that you want. Surely, it can be appropriate for your pool look, and you can place the attractive light around the pool.
You need to know that the color of the light is also the important thing in decorating out of your house. If you can combine some colors and they can be harmony, the outdoor will look more gorgeous. Take for an example; you use a classic idea on your wooden decks. So, to get a stylish look, you can combine the decks with a nice floor and also the bright light.
For the additional information, you may also add the wireless outdoor lighting on the walkways. Besides, you can add it near the flower beds in your beautiful garden. All of them perfectly will make the outdoor look more amazing and unique.
The wireless outdoor lighting works with a battery which has the function to save and supply the energy. Hence, it is better for you to convince and check the battery is secure.
In decorating the wireless outdoor lighting, there is an offer about the shape of the light. Completely, it is available in many varieties of lamp's shape. They can be circle, square, and also some unique shapes. All of them are pretty to be applied out of your house in designing your outdoor.
Those components above can be your great ways of embellishing the wireless outdoor lighting. If you have a good and creative capability to apply all of them to design your outdoor, it will make the outside look more attractive to visit by everyone. Additionally, they will also feel comfortable when they are there.


Come hear Amory Lovins speak at Catawba College Keppel Auditorium on Wednesday, April 17, 2019 at 6:30pm. He has advised the US Dept of Energy and Defense, briefed over 20 heads of state, and consulted for scores of industries and governments worldwide.
In North Carolina, Lovins has helped to launch the energy efficiency revolution that has saved NC's college and university campuses over $1 billion.
The event is free, but registration is required. Registration and more information here.


Space-efficient and easy to use, the unique design makes them cool to the touch, meeting or Safety is the most important thing we build into every Empire High-Efficient Heater. quiet ignition. Inshot Burners facilitate smooth operation.
The Space-Ray Cold Blocker industrial strength infrared heater is made especially for residential garages, workshops, or virtually any small unheated space. and quiet operation makes it the preferred heater when compared to forced air heaters.
High Efficiency Space Heating and Domestic Hot Water ALL-IN-ONE. 95% AFUE Digital Display Standard Outdoor Reset Quiet Operation Features Direct Vent/Sealed Combustion High Efficiency Condensing Stainless Steel Wall Mounted Gas Boiler with Built in "Tank-in-Tank"Indirect Fired Water Heater.
ARMY SPACE HEATER (ASH), ELECTRIC POWERED, MULTI-FUEL, 120,000 BTU, MODEL H120 NSN 4520-01-367-2739 TM 9-4520-258-14 OPERATING INSTRUCTIONS 2-1 OPERATOR PREVENTIVE 2-5 MAINTENANCE CHECKS AND The quiet operation allows use in areas where personnel work or sleep.


text:
Journal of Computer Networks and Communications
Indexed in Web of Science
To receive news and publication updates for Journal of Computer Networks and Communications, enter your email address in the box below.
Full-Text PDF
Linked References
ePub 14
PDF 551
Volume 2019, Article ID 1283472, 10 pages
https://doi.org/10.1155/2019/1283472
Review of Recent Detection Methods for HTTP DDoS Attack
Ghafar A. Jaafar, Shahidan M. Abdullah, and Saifuladli Ismail
Razak Faculty of Technology and Informatics, Universiti Teknologi Malaysia (UTM), 54100 Kuala Lumpur, Malaysia
Correspondence should be addressed to Ghafar A. Jaafar; moc.liamg@sratsafa
Received 7 June 2018; Revised 9 November 2018; Accepted 12 December 2018; Published 10 January 2019
Academic Editor: Gianluigi Ferrari
Copyright © 2019 Ghafar A. Jaafar et al. This is an open access article distributed under the Creative Commons Attribution License, which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.
With increment in dependency on web technology, a commensurate increase has been noted in destructive attempts to disrupt the essential web technologies, hence leading to service failures. Web servers that run on Hypertext Transfer Protocol (HTTP) are exposed to denial-of-service (DoS) attacks. A sophisticated version of this attack known as distributed denial of service (DDOS) is among the most dangerous Internet attacks, with the ability to overwhelm a web server, thereby slowing it down and potentially taking it down completely. This paper reviewed 12 recent detection of DDoS attack at the application layer published between January 2014 and December 2018. A summary of each detection method is summarised in table view, along with in-depth critical analysis, for future studies to conduct research pertaining to detection of HTTP DDoS attack.
A second quarter security report produced by Kaspersky [1] indicated that the source attack of DDoS originated from 86 nations with attack duration up to 122 hours. The report illustrated increment in HTTP DDoS attack from 8.43% to 9.38%. Johnson Singh et al. [2] claimed that 540 Gbps DDoS attack occurred on 31st August 2016 against a federal government official website of Rio Olympic 2016 and the Ministry of Brazilian Sport. Based on the report produced by Arbor Networks (Worldwide Infrastructure Security Report (No. XII), 2017) [3] published in Q1 for the year 2017, attacks that occurred at the application layer were the most targeted, wherein 80% of the target attacked HTTP and 81% targeted at the Domain Name System (DNS).
Meng et al. [4] explained that execution of DDoS attacks at the application layer is complex to detect, because such attacks may be able to mimic a legal request with the purpose of using the system resources. A web server uses the HTTP and Hypertext Transfer Protocol Secure (HTTPS) protocols to process request from users. These protocols are widely used in commercial to operate business routines among banks, credit card payment gateways, government web servers, online shopping servers, social media servers, and broadcasting servers, to name a few. The consequence of the DDoS attack against a web server leads to monetary loss and loss of trust amongst people [5]. Najafabadi et al. [6] explained that the HTTP protocol is designed to have request and response, so as to allow communication to take place between client and web server.
This paper presents the recent detection methods of DDoS attack at the application layer and highlights several recommendations for future research. To the best of the authors' knowledge, no recent review has been produced regarding this topic. The rest of the paper is organised as follows: Section 2 describes DDoS attack at the application layer. Section 3 explains the types of DDoS attacks at application layers. Section 4 lists attack strategies performed by the attack. Section 5 elaborates web server architecture. Section 6 presents four defence techniques against DDoS. Section 7 depicts the recent detection methods of DDoS attack. Section 8 provides a critical analysis of the current detection, and lastly, the paper is concluded in Section 9.
2. DDoS Attack at Application Layers
DDoS attacks launched at the application layer pose challenges to detect as the request packet appears similar to the normal request packet [5, 7, 8]. Configuration and function related to application may lead to DDoS attack at the application layer [9], and the consequences of this attack may exhaust resources, such as network bandwidth, CPU processing, and memory [10]. Jin et al. [11] explained that HTTP DDoS attacks occur when legitimate HTTP requests are initiated in large numbers.
DDOS attacks launched at the application layer require lower bandwidth to prevent legitimate users from surfing a web server, apart from mimicking traffic close to the authentic traffic [12]. The three factors that make DDOS detection difficult at the application layer are as follows [13]: (1) obscurity, HTTP protocol uses Transmission Control Protocol (TCP) and User Datagram Protocol (UDP) connections to run its operation, hence the intricacy to differentiate legitimate from illegitimate traffic; (2) efficiency, HTTP DDOS attack only requires fewer connections to initiate a DDOS attack; and (3) lethality, the capability of the attack to overwhelm a web server immediately, thus resulting in service breakdown regardless of the type of hardware and its performance.
Protocol weaknesses at the application layer allow cyber intruders to exploit and execute malicious activities via HTTP, File Transfer Protocol (FTP), and telnet, among others [13]. DDoS attack at the application layer focuses on sending large amounts of GET request to a web server, and detection of this attack becomes more complicated when flash crowd is implemented. A flash crowd refers to the increasing number of legitimate HTTP GET request received by a web server due to several events, such as result announcements, new product launches, and breaking news [14]. Iyengar and Ganapathy [15] mentioned that flash crowds occur when plenty of authentic concurrent incoming connections are received by a web server in a short period of time. Ni et al. [10] explained that HTTP DDoS attacks occur due to higher request rate by a small group, while flash crowd increases the number of clients.
The source of DDoS is distributed as it is derived from various locations, including botnet participation to generate plenty of traffic against a server. Zargar et al. [12] explained the use of botnet in an HTTP communication, which poses challenge to track botnet structure called command and control. Botnet is created by using the HTTP protocol that dismisses command-and-control server, such as IRC-based botnet, since a web-based bot receives instruction periodically during a web request. Web-based botnets are stealthier as they can hide within authentic traffic. Botnets launched at the application layer are of two types: botnets that control and are configured by complicated Personal Home Page (PHP) script via protocol HTTP or HTTPS and web-based botnets that operate to report a website statistics [16]. Kolias et al. [17] explained in the light of Internet of Things (IoT) that popularity of IoT makes the devices a great tool to launch cyberattack. The IoT device is constantly connected to the Internet with naive security level, and these devices are vulnerable to botnet, thus may generate a vast number of DDOS attack traffics. The largest DDoS attack reported generated 1.2 TBps after using IoT devices, such as printer and camera home router, to launch the attack [18]. The existence of DDoS as services, such as boosters or stresses, simplifies the execution of the attack [19]. Besides, HTTP DDoS tools available for download without cost also contribute to cyberattack.
3. Types of DDOS Attack at Application Layer
Many studies have analysed (see [12, 13, 20–22]) the DDOS attack at the application layer based on the following categories.
3.1. Session Flooding Attack
Resources of a server become exhausted when session request rates get higher than valid users. This malicious activity may result in DDOS flooding attack, for instance, HTTP GET/POST flooding attack. In executing this attack, an attacker requires a large authentic HTTP request, and typically, a botnet is used as its ability to generate a valid request, commonly exceeding 10 requests in a second. This attack only requires a botnet to successfully initiate an attack.
3.2. Request Flooding Attack
This attack occurs when an attacker initiates a vast number of requests in one session. This request is larger than the request of a valid user. The HTTP GET/POST session is an instance of attack in this category that takes advantage from HTTP 1.1 feature, which allows more than one request within a single HTTP session. The structure of HTTP 1.1 allows the attacker to limit the HTTP session rate. The use of HTTP 1.1 also causes the attacker to bypass defence mechanism of session rate of a number of security systems. Rai and Challa [23] claimed that the botnet is used for this attack. The botnet is designed to have a command-and-control structure that allows cyber intruders to issue a command to botnet machines. The impacted machines are known as botnet-listed in command-and-control server as they give instruction to the botnet to launch HTTP GET flood. This attack can exhaust server resources as the botnet sends plenty of HTTP GET flood requests to a server.
3.3. Asymmetric Attack
Cyber intruders use HTTP session that contains high workload of requests, which is generated by downloading huge files or excessive running queries from a database server.
3.4. Slow Request/Response Attack
An attacker sends high workload of requests to initiate attack in the form of a session. The consequence of this attack introduces inaccessibility against a server as the attacker partially sends HTTP requests that grow quickly and repeatedly, update slowly, and never close. This continuous attack will make an available socket of a server to be full due to these requests. Another example of this attack is HTTP fragmentation, where the connection of HTTP is held for some time to bring down the server. Rai and Challa [23] asserted that the attack operates under a threshold limit to complicate the victim with malicious traffic that resembles legitimate traffic. The Slowloris attack is the example from this attack category, and it works by sending a large amount of simultaneous HTTP requests, be it GET or POST, to a server. A server will continuously open separate connections as each HTTP request fails to complete its connection. The consequence of this attack denies users from gaining connection to a server as the server concurrent connection is exhausted.
4. DDOS Attack Strategies at Application Layer
Singh et al., [9] categorised HTTP DDOS attacks into several subclasses, as follows.
4.1. Server Load
The attacker uses botnet to continuously send malicious requests against a web server aggressively, hence causing the server to drop legitimate requests as the web server resources run out.
4.2. Increasing
The attacker uses the low request value to initiate attack and slowly raises the value. This behaviour of attack is difficult to detect as malicious HTTP traffic does not send requests aggressively to the server during the attack.
4.3. Constant
Cyber intruders must specify a number of request rates to be sent to the victim HTTP web server. The request number is called constant as it has the same number as when the botnet sends malicious requests to a web server.
4.4. Target Web Page
HTTP DDOS attack occurs at single and multiple web pages, where the attacker imitates legitimate users access pattern to deceive attack detection. The web pages are accessed by botnets that mimic the human access pattern.
4.5. Single Web Pages Attack
The attacker uses a single web page that belongs to a website. The botnet continuously send malicious HTTP requests to the web server.
4.6. Main Page Attack
Cyber intruders specifically focus on the main page of the websites to deny access among legitimate users. The traffic botnet is used to repeatedly send malicious requests to the HTTP server. The impact of this attack only occurs on the main page of the website, while the subpages of the website are not affected.
4.7. Dominant Page Attack
Cyber intruders figure out web pages that are sought by legitimate users for access. The attacker then focuses on that page to execute HTTP DDOS attacks in order to prevent a legitimate user from accessing the greater interest of the web pages. This attack only affects web pages with greater interest for users to browse.
4.8. Multiple Page Attack
A cyber attacker initiates the attack at multiple web pages from a website. This technique avoids detection as the malicious HTTP request imitates a human access pattern. For instance, a human will open more than one web page to find information while surfing a website. During this attack, pages that exist in the website will not be accessible as the attacker targets multiple web pages.
4.9. Reply Flood Attack
The botnet command by the attacker sends an HTTP traffic at an inflated rate to gain a resource of the web server to prevent the web server to surf legitimate HTTP request. The attacks work by gaining human access pattern to prohibit the detection system from blocking the malicious request.
4.10. Rare Change Page Attack
The common structure of a web system will group a page into a specific group to make the page content more structured and user-friendly. Since the arrangement of the web page is grouped, the attacker may compromise the group page by commanding botnet to that web page. Because the web page is designed in the group, the page becomes the most targeted group. This attack prevents a user from opening a web page that belongs to a specific group.
4.11. Frequent Changes Attack
An attacker performs attack into a web page that belongs to different categories. This attack will rotate the sent malicious request to distinct web page categories. This attack only affects specific categories of the website, as other web pages are still accessible during the attack.
4.12. Hot Pages Attack
Each web-based system will have frequent open pages. Hence, cyber intruders attack the most visited pages to prevent legitimate users from accessing, as the main objective for the DDOS attack is to avoid users from opening the pages.
4.13. Web Proxy Attack
The attacker uses the proxy server as a mediator to generate attack traffic. The use of the proxy server to generate attack traffic introduces difficulties in detecting the source attack. Multiple proxy servers are used to generate plenty of HTTP requests to overwhelm the web server.
5. Web Server Architecture
Clients' requests for online services initiate an HTTP GET request to a server. Prior to this, a TCP connection must be established before a client can successfully obtain response from a web server. Singh et al. [9] listed the processes involved in HTTP GET requests. First, a web server listens to an incoming connection, including TCP connection, as this connection must be established prior to other stages. In the second stage, socket queue, which is responsible for holding the entire HTTP GET request until a dedicated thread, is assigned to serve the request. Third, the request queue is accountable to process and respond to individual request. Upon completing these processes, the web server sends an HTTP response. During the HTTP GET flood attacks, the request queue becomes full immediately, thus dropping the incoming requests sent by authentic users. Figure 1 illustrates the typical architecture of a web server during HTTP GET request and response.
Figure 1: Web server architecture.
A web server does not perform filtering to determine if an HTTP GET request is genuine or fake [9]. During the HTTP GET flood attack, a web server will continuously receive and process the request as it assumes the request is from authentic sources. The continuity of such requests at a higher rate will collapse a web server as it is unable to process a valid HTTP GET request. Beitollahi and Deconinck [24] and Sree and Bhanu [25] mentioned that an HTTP GET flood attack can stress bandwidth and outbound traffic, memory, CPU cycles, and input and output devices.
6. HTTP DDoS Detection
There are several phases that are involved in defencing DDoS attack, and prior studies [20, 26] explained four phases involved as follows.
6.1. Prevention
The prevention phase focuses on protecting a system against an attack by applying appropriate security appliances at varied places. Besides that, prevention also protects server resources and ensures that online services are ready to surf the genuine client. DDoS attacks launched through automated tools allows several programs to access certain web pages without human intervention. Possible prevention against this type of attack through website design is to allow only the authentic user to access web server services and resource. Web design should be efficient that could not be delayed by the attacker.
6.2. Mitigation
The mitigation phase is applied when an attack occurs, and a suitable security countermeasure is executed to handle the attack or to slow down the attack. A mitigation technique operates by stopping the attack. Formation of DDoS mitigation is considered better when the attack traffic recognised as normal is minimal, which is also known as false positive rate. Apart from that mitigation technique supposed to block a source IP address of illegitimate traffic that generates the attack, this process will directly guarantee the authentic client to be able to access a web service.
6.3. Detection
The detection phase requires analysis of the running system to discover malicious traffic that leads to DDoS attack. Detection involves a sophisticated approach to identify large illegal GET request traffic against a web server. Most of the detection techniques were applied to form DDoS detection known as pattern matching, clustering, statistical methods, deviation analysis, associations, and correlation. Formation of detection usually employs data history as the main source to train the data to generate a threshold which will be assigned to a parameter via a specific method to count the GET request received. The false positive rate refers to incorrect classification of attack traffic predicted as genuine, and effective DDoS detection generates a minimal false positive rate.
6.4. Monitoring
As for the monitoring phases, necessary information about a host or network is obtained by using tools, such as network monitoring software. Monitoring is conducted in real time as it becomes compulsory for detection of DDoS attack. A process of monitoring becomes complicated when the attacker utilised botnet that is situated at multiple locations around the world to launch DDoS attack at a minimal rate. According to [27], dynamic monitoring is required in order to constitute defences for attacks. Figure 2 presents the graphical view of the defence life cycle.
Figure 2: DDoS defence life cycle.
7. Recent Detection Methods for HTTP DDoS Attack
This section focuses on the recent HTTP DDoS detection techniques proposed and applied since the past five years based on the published work.
Hameed and Ali [19] introduced a framework called HADEC to detect live high-rate DDoS attack that occurs at network and application layers, such as TCP-SYN, HTTP GET, UDP, and ICMP. The framework is composed of two main components: detection server and capture server. Live DDoS detection begins by capturing the server that is responsible to capture live network traffic and transfer the log to the detection server for processing. The detection calculates incoming packet for UDP, ICMP, and HTTP to detect an attack if the source connection exceeds the predefined threshold. The proposed detection provides low-cost solutions for financial institution, as well as small and medium companies.
Behal et al. [28] proposed a detection method called D-FACE to detect four traffic types: legitimate user, low-rate, high-rate, and flash event traffic. The detection employs entropy difference that contains normal traffic flow, while the value of source IP entropy is the detection matrix to reckon the attack. The detection begins with extraction of the related header that classifies the network into a unique network flow. Segregation of low-rate, high-rate, and flash event traffic is based by comparing the current incoming traffic rate in each time window and based on information traffic value.
Singh et al. [29] introduced a method that detects HTTP DDoS attack via the machine-learning approach to distinguish botnet from legitimate users in detecting attack traffic, authentic traffic, and flash traffic. The proposed system is deployed as proxy and performs inspection against user behaviour instead of monitoring the entire traffic. The proposed work detects the botnet source and examines user behaviour to detect malicious request against the web server.
Sreeram and Vuppala [30] proposed a machine-learning matrix with a bio-inspired bat algorithm to allow fast and early detection of HTTP DDoS attacks. The work incorporated time intervals, instead of user sessions, and packet patterns to generate a detection algorithm. The time interval uses machine-learning matrix by assigning a value of maximum sessions for one-time interval and computing a number of sessions in one-time interval to detect DDoS attack at application layers. The matrix also accounts for two pages of HTTP GET request. The frequency of a web page accessed by users and the time gap between first page request and second page are determined to monitor user behaviour.
Aborujilah and Musa [31] introduced cloud-based detection of HTTP DDoS by using statistical approach with the covariance matrix. The detection introduced two algorithms known as training and testing to recognise a different type of HTTP flooding attack based on attack behaviour. A training algorithm was used to construct normal patterns of network traffic, and the testing algorithm was used to determine the types of traffic received. The outcomes obtained from this research had been evaluated by using the confusion matrix to measure detection performance and provide results of internal and external cloud environment.
Singh and De [32] employed multilayer perceptron with a genetic algorithm (MLP-GA) to detect HTTP DDoS attack. The proposed detection utilised four parameters to generate detection at application layers. A normal user has specific time interval, as an authentic user searches and reads when accessing a web page and when moving to other pages. The detection technique suggested by the researchers counts the number of HTTP GET requests received by the web server and calculates the number of IP addresses targeting the server over 20 seconds. The proposed detection also inspects the port number used by HTTP DDoS, as ports used by HTTP DDoS attackers are varied and remain open. The detection method employed fixed frame length to conduct detection, as according to these researchers, HTTP DDoS attackers employ static protocol lengths.
Hoque et al. [33] proposed a method for detection of DDoS at the application layer in real time at the victim end. The proposed work utilised software and hardware adopted from the framework created to distinguish normal from fake traffic in real time. The three main components incorporated into the framework were preprocessor, hardware module, and security manager, which processed source IPs, source IPs index variation, and packet rate, to detect the attack.
Johnson Singh et al. [2] introduced a detection scheme to reckon high and low rates of DDoS attack. The detection was performed by computing a number of HTTP GET request, entropy, and variance for each connection. The HTTP GET requests were counted within 20 s time window.
Liao et al. [34] proposed a detection technique based on user access frequencies, specifically focusing on request time interval and frequency request to detect DDoS attacks at the application layer. The time interval refers to the present and the next HTTP GET requests. The time interval for a standard user may be larger when compared to those of an attacker, as a normal user will spend more time browsing interesting pages. For instance, the time interval for normal browsing is 246 seconds for the first page and around 572 seconds to open the next page. However, in the case of DDoS attacks, the time interval for the present and subsequent requests is shorter.
Shiaeles and Papadaki [35] introduced multilayer IP spoofing to detect application layer DDoS attack against the web server. The proposed detection method is called fuzzy hybrid spoofing detection (FHSD) and used source MAC address, hop count, geographical of IP address, operating system (OS) passive fingerprinting, and web browser user agents. In order to decrease false positive and false negative, cross inspection was performed via operating passive fingerprinting and HTTP user agents. Passive operating fingerprinting and HTTP user agents were used to confirm the name of the OS used by a client. The proposed work also detects botnet in a local network using MAC address and IP paring. The limitation of the proposed work refers to the database that stores information required to update daily for better results.
Wang et al. [36] proposed a detection technique for HTTP flooding attacks based on web browsing clicks called HTTP soldier. It displayed the ability to distinguish normal user from malicious one through the use of large-deviation probability. The technique highly relied on web page popularity to detect HTTP flood attack. The operation of HTTP soldier used a predefined threshold to be compared with large-deviation probability. The large-deviation probability may affect some normal users. The researchers clearly mentioned that a single URL attack was ineffective to detect by using their technique. This study employed simulation software to evaluate their proposed detection and only measured false-positive rate.
Nam and Djuraev [37] proposed a detection technique based on the workload of the source node. This technique used multiple levels to protect a web server. The first layer allowed or rejected a received connection by inspecting the source IP address with the whitelist. The registered IP addresses were allowed to establish a connection with web servers to obtain service, while the connection of nonregistered IP addresses was dropped. The allowed IP addresses were inspected, and if they behaved maliciously, the connection would be dropped, and the IP addresses would be blacklisted. The researchers stressed that their work has limitation when legitimate user access a server for streaming services or when downloading huge file, as this can lead to false positive. The result of this study sheds light on server response time. The outcome shows that the proposed defence system detects DDoS attacks after 90 seconds and the server response time goes back to normal upon detection of attack.
8. Critical Analysis
8.1. Results
Based on the results reported by each author, only Sreeram and Vuppala [30] evaluated their proposed solution by using a complete matrix of detection (e.g., true positive, true negative, false positive, false negative, precision, recall, specificity, and accuracy). This review found that Aborujilah and Musa and Singh and De [31, 32] only employed true and false detection matrix to assess their proposed methods. Meanwhile, other studies were uncertain as some evaluated detection rate, false positive, and accuracy, failed in providing a full detection matrix, as explained above. This constraint must be prevented to ensure that the proposed work is ready to be deployed in producing environment, apart from having the ability to work precisely in detecting all attack scenarios.
A complete detection matrix allows future researches to improve detection performance, hence resulting in full detection matrix that should be executed and shared publicly. Implementation of the confusion matrix that measures detection performance is the best option as this matrix has a wide range of measurement of detection. The matrix has also been utilised by many researchers [38–45].
8.2. Dataset
The experiment datasets utilised by prior scholars were mixed, while some relied only on one dataset [30, 36, 37]. The use of only one dataset as reference (e.g., benchmark and analysis) seems insufficient as HTTP DDoS attack patterns are varied. Further analysis performed [2, 28, 29, 31–35] took into account more than one dataset. Nevertheless, the used datasets were obsolete to perform comparison and analysis. Critical inspection against researchers who employed more than one dataset showed that they also executed their experiments to obtain the dataset. Old datasets should be avoided as they contain obsolete and meaningless data [9], while retrieving real cutting-edge attack dataset is challenging as they are unavailable publicly [46].
8.3. Self-Generate Dataset
Future direction for detection of HTTP DDoS attack should focus on the self-generate dataset by utilising real HTTP tools. The actual tools are available for download and can be used for multiple purposes such as investigation and evaluate a proposed work. The self-generate dataset is a solution that can be deployed by future researches in resolving issues related to old dataset and not publicly share. There are many DDoS tools, such as HOIC, LOIC, HULK, Rudy, DDOSIM, Bonesi, PyLoris, XOIC, and Slowloris, highlighted and utilised by prior researchers [2, 20, 32, 35].
8.4. Evaluation Method
This review also found that a few researchers evaluated their proposed work by using simulation software [30–32, 36]. On the other hand, some [2, 19, 28, 33–35] performed real experiments to evaluate their outcomes and found only one study [37] assessed their work by using simulation software and experimental works.
A proposed work should be evaluated by considering a wide range of network architectures and potential attack strategies that may be utilised by an attacker for detection purpose. The good evidence for this statement can be supported by studies performed by Singh et al. [9], who mentioned that network address translation (NAT) and web proxies led to complexity and could result in incorrect detection outcomes. The evaluation of a proposed work should weigh in a wide range of network designs, along with lists of potential attack strategies, so as to ensure that the proposed detection method has the ability to work outside the academic world and not merely for education purposes. Singh et al. [9] outlined a list of approaches used by attackers to launch DDoS against web pages of online services, which may serve as reference for future research. In order to achieve this goal, several challenging factors must be faced, such as time constraint, knowledge about network and security, hardware and software to purchase, and viable configuration.
8.5. Detection Method for Future Work
Future research studies should focus on providing solutions that are practical for implementation in the actual environment, apart from using real HTTP DDoS tools when evaluating their proposed detection techniques, so as to offer benefits to both the parties, academic and industry. This is because a proposed detection method should not only work to achieve an academic target but also offer an option for the world cyber security in detecting HTTP DDoS attacks. The proposed solutions to DDoS are academic interest, and only some have been implemented in real time [47, 48]. The use of real tools of HTTP DDoS attack will help to gain input about the current attack strategies and prediction about a future attack.
8.6. Detection Techniques
The parameter used to generate detection is verities. This review revealed that the use of the right parameter is important to ensure that the proposed detection method is able to detect HTTP DDoS attack. This review also discovered that the detection method of HTTP DDoS is built based on three main elements: (1) technique, e.g., IP spoofing; (2) parameter, e.g., TCP header; and (3) flow, e.g., operation flow [2, 30–32, 34–37]. A component selection for the three elements mentioned above is crucial as it leads to detection quality, e.g., true positive, true negative, false positive, false negative, precision, recall, specificity, and accuracy. A future researcher has to consider the main elements stated above to ease formation of the proposed detection technique.
8.7. Level of Attack
Based on the review presented in Table 1, no study has proposed a solution that is able to detect three types of DDoS attacks: flash crowd, high-rate, and low-rate DDoS attack. Most studies focused on detecting HTTP DDoS at the high rate, while only one researcher focused on low-rate HTTP DDoS attack. The detection scope should extend to cater to all types of HTTP DDoS, as the techniques reviewed in this paper tend to propose solutions in a segregated manner. A list of researchers specified DDoS attack at application down to several categories: request flooding, session flooding, and asymmetric and slow request [12, 13, 20–22]. This appears to be a great indicator for future research studies to look deep down the attack patterns.
Table 1: Summary of recent detection techniques of HTTP DDoS attack.
8.8. Learn Programming and Explore Attack Codes
HTTP DDoS tools, such as GoldenEye, UFONET, Wreckquest, and HULK, are available for download, and they are written in the python programming language. Thus, learning programming language can bring us to a step forward in detecting HTTP DDoS and prediction of future attacks by exploring the attack code with consideration of DDoS attack strategies, as outlined by Singh et al. [9]. Exploration of the code enhances our understanding towards the behaviour of HTTP DDoS, apart from discovering appropriate strategies to counter the attack.
8.9. Academic and Industry
Academic and industry have to cooperate in sharing attack logs for academic purposes. Behal and Kumar [49] conducted a study related to DDoS using prior dataset and drew some limitations against publicly available dataset as the dataset was captured from the network layer and had concealed information about the application layer. Hence, an industry that receives real dataset or received HTTP DDoS attack should filter and remove private data related to its web server so as to ensure no data leakage. The attack pattern would give direct impact as a researcher is able to write HTTP DDoS code based on the pattern and to seek solution, thus highlighting the importance of programming.
8.10. Mixed HTTP Traffic
HTTP DDoS attack has a number of attack strategies to mix the traffic to be more complex for detection; thus, the future work to detect DDoS attack should cater varied types of attack strategies, such as attack that comes from proxy, botnet, and web crawler simultaneously. Besides, the use of the IoT device may lead to worse circumstance of HTTP DDoS as the attacker may utilise a botnet that originates from such devices to recruit a cyber army to launch attack against a web server. Table 1 indicates that all the proposed solutions catered to only the HTTP protocol that applied port 80 to detect an attack. Hence, future research studies should consider HTTPS protocol detection in an in-depth manner. Zolotukhin et al. [50] explained that most of the latest studies seemed to focus on HTTP DDoS attack, while leaving detection of HTTPS protocol for DDoS in the dark.
This paper presents a review of the recent detection methods in recognising DDoS attack at the application layer. Researches related to DDoS attack have gained much attention, particularly those that occur at the application layer. The detection of DDoS attack is rather challenging as the traffic has the ability to mimic the genuine GET request. Due to many forms of devices that can be affected by botnet, such as IoT devices and existence of DDoS as services, the detection of such attack can become significantly complex. The recent techniques employed to detect HTTP DDoS attack have produced various approaches for detection purposes. However, it should be noted that challenges need to be identified and overcome for different types of DDoS attack strategies. The critical analysis has outlined several points that one would need to give closer attention for future research.
The authors declare that they have no conflicts of interest.
This review paper was compiled at University Technology Malaysia (UTM).
Kaspersky, DDoS attacks in Q2 2017, 2017, https://securelist.com/ddos-attacks-in-q2-2017/79241/.
K. Johnson Singh, K. Thongam, and T. De, "Entropy-based application layer DDoS attack detection using artificial neural networks," Entropy, vol. 18, no. 10, p. 350, 2016. View at Publisher · View at Google Scholar · View at Scopus
Worldwide Infrastructure Security Report (No. XII), 2017, https://pages.arbornetworks.com/rs/082-KNA-087/images/12th_Worldwide_Infrastructure_Security_Report.pdf.
B. Meng, W. Andi, X. Jian, and Z. Fucai, "DDOS attack detection system based on analysis of users' behaviors for application layer," in Proceedings of IEEE International Conference on Computational Science and Engineering (CSE) and IEEE International Conference on Embedded and Ubiquitous Computing (EUC), Guangzhou, China, July 2017.
H. Beitollahi and G. Deconinck, "Analyzing well-known countermeasures against distributed denial of service attacks," Computer Communications, vol. 35, no. 11, pp. 1312–1332, 2012. View at Publisher · View at Google Scholar · View at Scopus
M. M. Najafabadi, T. M. Khoshgoftaar, C. Calvert, and C. Kemp, "User behavior anomaly detection for application layer ddos attacks," in Proceedings of 2017 IEEE International Conference on Information Reuse and Integration (IRI), San Diego, CA, USA, August 2017.
K. Subramanian, P. Gunasekaran, and M. Selvaraj, "Two layer defending mechanism against DDoS attacks," International Arab Journal of Information Technology (IAJIT), vol. 12, no. 4, 2015. View at Google Scholar
X. Yuan, C. Li, and X. Li, "DeepDefense: identifying DDoS attack via deep learning," in Proceedings of 2017 IEEE International Conference on Smart Computing (SMARTCOMP), Hong Kong, China, May 2017.
K. Singh, P. Singh, and K. Kumar, "Application layer HTTP-GET flood DDoS attacks: research landscape and challenges," Computers and Security, vol. 65, pp. 344–372, 2017. View at Publisher · View at Google Scholar · View at Scopus
T. Ni, X. Gu, H. Wang, and Y. Li, "Real-time detection of application-layer DDoS attack using time series analysis," Journal of Control Science and Engineering, vol. 2013, pp. 1–6, 2013. View at Publisher · View at Google Scholar · View at Scopus
W. Jin, Z. Min, Y. Xiaolong, L. Keping, and X. Jie, "HTTP-sCAN: detecting HTTP-flooding attack by modeling multi-features of web browsing behavior from noisy web-logs," China Communications, vol. 12, no. 2, pp. 118–128, 2015. View at Publisher · View at Google Scholar · View at Scopus
S. T. Zargar, J. Joshi, and D. Tipper, "A survey of defense mechanisms against distributed denial of service (DDoS) flooding attacks," IEEE Communications Surveys and Tutorials, vol. 15, no. 4, pp. 2046–2069, 2013. View at Publisher · View at Google Scholar · View at Scopus
N. Hoque, D. K. Bhattacharyya, and J. K. Kalita, "Botnet in DDoS attacks: trends and challenges," IEEE Communications Surveys and Tutorials, vol. 17, no. 4, pp. 2242–2270, 2015. View at Publisher · View at Google Scholar · View at Scopus
R. Saravanan, S. Shanmuganathan, and Y. Palanichamy, "Behavior-based detection of application layer distributed denial of service attacks during flash events," Turkish Journal of Electrical Engineering and Computer Sciences, vol. 24, pp. 510–523, 2016. View at Publisher · View at Google Scholar · View at Scopus
N. C. S. N. Iyengar and G. Ganapathy, "An effective layered load balance defensive mechanism against DDoS attacks in cloud computing environment," International Journal of Security and Its Applications, vol. 9, no. 7, pp. 17–36, 2015. View at Publisher · View at Google Scholar · View at Scopus
E. Alomari, S. Manickam, B. Gupta, S. Karuppayah, and R. Alfaris, "Botnet-based distributed denial of service (DDoS) attacks on web servers: classification and art," 2012, http://arxiv.org/abs/1208.0403. View at Google Scholar
C. Kolias, G. Kambourakis, A. Stavrou, and J. Voas, "DDoS in the IoT: mirai and other botnets," Computer, vol. 50, no. 7, pp. 80–84, 2017. View at Publisher · View at Google Scholar · View at Scopus
N. Woolf, "DDoS attack that disrupted internet was largest of its kind in history, experts say, The Guardian," October 2016, https://www.theguardian.6com/technology/2016/oct/26/ddos-attack-dyn-mirai-botnet.
S. Hameed and U. Ali, "HADEC: hadoop-based live DDoS detection framework," EURASIP Journal on Information Security, vol. 2018, no. 1, p. 11, 2018. View at Publisher · View at Google Scholar · View at Scopus
V. Kumar and K. Kumar, "Classification of DDoS attack tools and its handling techniques and strategy at application layer," in Proceedings of International Conference on Advances in Computing, Communication, and Automation (ICACCA)(Fall), pp. 1–6, Dehradun, India, September 2016.
S. Ranjan, R. Swaminathan, M. Uysal, A. Nucci, and E. Knightly, "DDoS-shield: DDoS-resilient scheduling to counter application layer attacks," IEEE/ACM Transactions on Networking, vol. 17, no. 1, pp. 26–39, 2009. View at Publisher · View at Google Scholar · View at Scopus
S. Yadav and S. Subramanian, "Detection of application layer DDoS attack by feature learning using stacked AutoEncoder," in Proceedings of 2016 International Conference on Computational Techniques in Information and Communication Technologies (ICCTICT), New Delhi, India, March 2016.
A. Rai and R. K. Challa, "Survey on recent DDoS mitigation techniques and comparative analysis," in Proceedings of 2016 Second International Conference on Computational Intelligence & Communication Technology (CICT), pp. 96–101, Ghaziabad, India, February 2016. View at Publisher · View at Google Scholar · View at Scopus
H. Beitollahi and G. Deconinck, "ConnectionScore: a statistical technique to resist application-layer DDoS attacks," Journal of Ambient Intelligence and Humanized Computing, vol. 5, no. 3, pp. 425–442, 2013. View at Publisher · View at Google Scholar · View at Scopus
T. R. Sree and S. M. S. Bhanu, "HADM: detection of HTTP GET flooding attacks by using Analytical hierarchical process and Dempster-Shafer theory with MapReduce," Security and Communication Networks, vol. 9, no. 17, pp. 4341–4357, 2016. View at Publisher · View at Google Scholar · View at Scopus
A. Shameli-Sendi, M. Pourzandi, M. Fekih-Ahmed, and M. Cheriet, "Taxonomy of Distributed Denial of Service mitigation approaches for cloud computing," Journal of Network and Computer Applications, vol. 58, pp. 165–179, 2015. View at Publisher · View at Google Scholar · View at Scopus
X. Yi and Y. Shun-Zheng, "Monitoring the application-layer DDoS attacks for popular websites," IEEE/ACM Transactions on Networking, vol. 17, no. 1, pp. 15–25, 2009. View at Publisher · View at Google Scholar · View at Scopus
S. Behal, K. Kumar, and M. Sachdeva, "D-FACE: an anomaly based distributed approach for early detection of DDoS attacks and flash events," Journal of Network and Computer Applications, vol. 111, pp. 49–63, 2018. View at Publisher · View at Google Scholar · View at Scopus
K. Singh, P. Singh, and K. Kumar, "User behavior analytics-based classification of application layer HTTP-GET flood attacks," Journal of Network and Computer Applications, vol. 112, pp. 97–114, 2018. View at Publisher · View at Google Scholar · View at Scopus
I. Sreeram and V. P. K. Vuppala, "HTTP flood attack detection in application layer using machine learning metrics and bio inspired bat algorithm," Applied Computing and Informatics, 2017, in press. View at Publisher · View at Google Scholar
A. Aborujilah and S. Musa, "Cloud-based DDoS HTTP attack detection using covariance matrix approach," Journal of Computer Networks and Communications, vol. 2017, Article ID 7674594, 8 pages, 2017. View at Publisher · View at Google Scholar · View at Scopus
K. J. Singh and T. De, "MLP-GA based algorithm to detect application layer DDoS attack," Journal of Information Security and Applications, vol. 36, pp. 145–153, 2017. View at Publisher · View at Google Scholar · View at Scopus
N. Hoque, H. Kashyap, and D. K. Bhattacharyya, "Real-time DDoS attack detection using FPGA," Computer Communications, vol. 110, pp. 48–58, 2017. View at Publisher · View at Google Scholar · View at Scopus
Q. Liao, H. Li, S. Kang, and C. Liu, "Application layer DDoS attack detection using cluster with label based on sparse vector decomposition and rhythm matching," Security and Communication Networks, vol. 8, no. 17, pp. 3111–3120, 2015. View at Publisher · View at Google Scholar · View at Scopus
S. N. Shiaeles and M. Papadaki, "FHSD: an improved IP spoof detection method for web DDoS attacks," Computer Journal, vol. 58, no. 4, pp. 892–903, 2014. View at Publisher · View at Google Scholar · View at Scopus
J. Wang, X. Yang, M. Zhang, K. Long, and J. Xu, "HTTP-SoLDiER: an HTTP-flooding attack detection scheme with the large deviation principle," Science China Information Sciences, vol. 57, no. 10, pp. 1–15, 2014. View at Publisher · View at Google Scholar · View at Scopus
S. Y. Nam and S. Djuraev, "Defending HTTP web servers against DDoS attacks through busy period-based attack flow detection," KSII Transactions on Internet and Information Systems, vol. 8, no. 7, pp. 2512–2531, 2014. View at Publisher · View at Google Scholar · View at Scopus
A. R. Kang and A. Mohaisen, "Automatic alerts annotation for improving DDoS mitigation systems," in Proceedings of 2016 IEEE Conference on Communications and Network Security (CNS), Philadelphia, PA USA, October 2016.
S. Lakshminarasimman, S. Ruswin, and K. Sundarakantham, "Detecting DDoS attacks using decision tree algorithm," in Proceedings of 2017 Fourth International Conference on Signal Processing, Communication and Networking (ICSCN), Chennai, India, March 2017.
Q. Liao, H. Li, S. Kang, and C. Liu, "Feature extraction and construction of application layer DDoS attack based on user behavior," in Proceedings of 2014 33rd Chinese Control Conference (CCC), Nanjing, China, July 2014.
I. Mukhopadhayay, S. Polle, and P. Naskar, "Simulation of denial of service (DoS) attack using matlab and xilinx," IOSR Journal of Computer Engineering (IOSR-JCE), vol. 16, no. 3, pp. 119–125, 2014. View at Publisher · View at Google Scholar
J. D. Ndibwile, A. Govardhan, K. Okada, and Y. Kadobayashi, "Web server protection against application layer DDoS attacks using machine learning and traffic authentication," in Proceedings of 2015 IEEE 39th Annual Computer Software and Applications Conference, Taichung, Taiwan, July 2015.
D. Peraković, M. Periša, I. Cvitić, and S. Husnjak, "Artificial neuron network implementation in detection and classification of DDoS traffic," in Proceedings of 2016 24th Telecommunications Forum (TELFOR), Belgrade, Serbia, November 2016.
K. J. Singh and T. De, "Analysis of application layer DDoS attack detection parameters using statistical classifiers," Internetworking Indonesia, vol. 9, no. 2, pp. 23–31, 2017. View at Google Scholar
I. Sofi, A. Mahajan, and V. Mansotra, "Machine learning techniques used for the detection and analysis of modern types of DDoS attacks," Learning, vol. 4, no. 6, 2017. View at Google Scholar
S. Yadav and S. Selvakumar, "Detection of application layer DDoS attack by modeling user behavior using logistic regression," in Proceedings of 2015 4th International Conference on Reliability, Infocom Technologies and Optimization (ICRITO)(Trends and Future Directions), Noida, India, September 2015.
S. Behal and K. Kumar, "Detection of DDoS attacks and flash events using novel information theory metrics," Computer Networks, vol. 116, pp. 96–110, 2017. View at Publisher · View at Google Scholar · View at Scopus
S. Behal, K. Kumar, and M. Sachdeva, "Characterizing DDoS attacks and flash events: review, research gaps and future directions," Computer Science Review, vol. 25, pp. 101–114, 2017. View at Publisher · View at Google Scholar · View at Scopus
S. Behal and K. Kumar, "Trends in Validation of DDoS Research," in Proceedings of International Conference on Computational Modeling and Security (CMS 2016), Bengaluru, India, February 2016.
M. Zolotukhin, T. Hämäläinen, T. Kokkonen, and J. Siltanen, "Increasing web service availability by detecting application-layer DDoS attacks in encrypted traffic," in Proceedings of 2016 23rd International Conference on Telecommunications (ICT), pp. 1–6, Thessaloniki, Greece, February 2016.


text:
The IRA Charitable Rollover allows individual retirement account holders age 70 ½ and older to make qualified charitable distributions (QCD) up to $100,000 per year (and up to $200,000 per year for married couples) from their IRA to the IEEE Foundation without having to count the transfers as income for federal tax purposes. Since no tax is incurred on the withdrawal, gifts do not qualify for an income tax charitable deduction, but are eligible to be counted toward an individual's minimum required distribution beginning at age 72.
Important Provisions of the IRA Charitable Rollover:
Distributions must be made directly to a qualified charity by the plan administrator of an IRA. Retirement assets in 401(k), 403(b), SEP, or SIMPLE plans do not qualify but may be rolled into a new or existing IRA and transferred to the charity.
Distributions may only be made to 501(c)(3) tax exempt organizations and cannot be made to donor advised funds, private foundations, or supporting organizations.
Distributions may not be used to fund life-income gifts such as charitable gift annuities, charitable remainder trusts, or pooled income funds.
What is a IRA Charitable Rollover?
The IRA Charitable Rollover, or qualified charitable distribution (QCD), is a special provision allowing certain donors to exclude from taxable income—and count toward their required minimum distribution—certain transfers of Individual Retirement Account (IRA) assets that are made directly to public charities, including the IEEE and IEEE Foundation. Since it was first made available in tax year 2006, many donors age 70 ½ or older have used this popular option to support the areas of their choice with tax-wise gifts ranging from $100 to $100,000 (and up to $200,000 for married couples).
How does this help me?
IRA Charitable Rollover makes it easier to use IRA assets, during lifetime, to support your favorite charities.
Why will lifetime IRA gifts be easier?
Under current law, withdrawals from traditional IRAs and certain Roth IRAs are taxed as income, even if they are immediately directed to a charity. The donor receives an income tax deduction for his or her donation, but various other federal, and sometimes state, tax rules can prevent the deduction from fully offsetting this taxable income. As a result, many donors have chosen not to use IRA assets for lifetime gifts. The IRA Charitable Rollover eliminates this problem.
What gifts qualify for a IRA Charitable Rollover?
A gift that qualifies, technically termed a "qualified charitable distribution," is:
Made by a donor age 70 ½ or older.
Transferred from a traditional or Roth IRA directly to a permissible public charity, such as the IEEE or IEEE Foundation. (If giving in this manner, please tell your broker or fund manager to name you as the donor on the transfer, and if your gift is intended for a particular area have the broker specify that as well.)
Completed during the applicable tax year.
Is there a limit on the amount that can be given?
Yes, there is a limit. An individual taxpayer's total IRA Charitable Rollover gifts cannot exceed $100,000 per tax year. Married couples can donate up to $200,000 per year.
What about the required minimum distribution?
If you have not already taken your required minimum distribution in a given year, a qualifying rollover gift can count toward satisfying this requirement.
Is an income tax deduction also available?
No. The gift would be excluded from income, so providing a deduction in addition to that exclusion would create an inappropriate double tax benefit.
Why are Roth IRAs included? Aren't withdrawals from a Roth IRA tax-free?
Withdrawals from a Roth IRA may be tax-free only if the account has been open for longer than five years or if certain other conditions apply. Otherwise, withdrawals are taxed as if they came from a traditional IRA. Therefore, certain Roth IRAs could benefit from a IRA Charitable Rollover.
Can other retirement plans, such as 401(k) and 403(b) accounts, be used?
No. However, it may be possible to make a tax-free transfer from such other accounts to an IRA, from which a charitable rollover can then be made.
Is my IRA Charitable Rollover gift eligible for an income tax charitable deduction?
No. Donors of qualified IRA gifts do not receive a federal income tax charitable deduction for the IRA gift, as they are not being taxed on the withdrawal.
Can a gift be made to any charity?
No. Excluded are:
Donor advised funds;
Supporting organizations; and
Private foundations.
Who can benefit from using the IRA Charitable Rollover to make a gift?
People with significant assets in an IRA.
People making gifts that are large, relative to their income. (Because a charitable rollover is not included in taxable income, it does not count against the usual percentage limitations on using income tax charitable deductions.)
People who do not itemize.
Can a rollover gift be used to pay my pledged support to the IEEE or IEEE Foundation?
Yes. You can honor your pledge with one or more qualified IRA Charitable Rollover transfers of up to $100,000 per person (and $200,000 for married couples), per calendar year.
Can a rollover gift be used to fund a charitable remainder trust or charitable gift annuity?
No. The donor cannot receive any benefits in return for the gift. This includes life income plan payments.
Are there any benefits that a donor can receive?
The only permissible benefits from a IRA Charitable Rollover gift are those that would not reduce the tax deduction for which the donor would have otherwise qualified. At the IEEE and IEEE Foundation, a charitable IRA rollover gift is allowed to count toward naming opportunities and toward recognition society memberships such as the Heritage Circle and Goldsmith Legacy League.
What if a withdrawal does not meet the requirements of a IRA Charitable Rollover?
It simply will be included in taxable income as other IRA withdrawals currently are.
Is the IRA Charitable Rollover right for everyone?
While this is a great option, other types of gifts may provide donors with more tax benefits. As with any gift planning question, donors should consult their tax professionals for specific advice.
Can I still make a gift with an IRA beneficiary designation?
Absolutely. Whether or not you choose to make a IRA Charitable Rollover gift, you can still designate the IEEE or IEEE Foundation as a beneficiary to receive IRA assets after your lifetime. The lifetime IRA Charitable Rollover is simply another option for donors who would like to see their philanthropy at work now.
If I made a IRA Charitable Rollover gift in other tax years, can I do this again for the current tax year?
Yes. The current law extends the IRA Charitable Rollover provision indefinitely—with no expiration date—allowing individuals to make qualifying gifts every tax year.
May I make a gift from my IRA if I have already taken my required minimum distribution (RMD)?
Yes. You can exclude up to $100,000 (per IRA account owner and up to $200,000 for married couples) from gross income for qualified charitable donations. The donation counts toward your RMD but is not limited by your RMD.
Are there other tax advantages to gifting through a qualified IRA?
Yes. Qualified IRA gifts are not subject to percentage of adjusted gross income (AGI) limitations for charitable contributions and are not reportable as income for federal income tax or for Social Security income purposes. The amounts withdrawn are not subject to state income taxes in most states. Donors who do not itemize deductions on their federal income tax returns may benefit from qualified IRA gifts for their exclusion from gross income. Amounts withdrawn from an IRA account are removed from the donor's taxable estate. Talk to your tax advisor to see which benefits apply to your specific situation.
Are IRA distributions already taken by me eligible to gift as qualified charitable distributions?
No. However, you can make gifts from IRA distributions that do not meet the requirements of a qualified charitable distribution. In such cases, the IRA distribution would be recognized as income for income tax purposes and typically would be eligible for a federal income tax charitable deduction.
Senior Campaigns Manager
The information on this site is for educational purposes only and is not intended as legal, tax, or investment advice. If you are considering a gift of securities to the IEEE Foundation, we highly recommend you consult with your own tax and legal advisors to determine the best options for you.