返回
A feature selection-based method for DDoS attack flow classification
DOI:10.1016/j.future.2022.02.006.png)
摘要
En 中文
Distributed Denial of Service (DDoS) attacks still be a great threat to the availability of online servers. To defend against attacks, the challenge is not only detecting DDoS attacks as they occur but also identifying, and thus blocking the attack flows. However, existing classification methods cannot accurately and efficiently differentiate between attack flows and benign flows. In this paper, we propose a DDoS attack flow classification system, named SAFE, to accurately and quickly identify attack flows in network layer. First, SAFE chooses the optimal features by removing the redundant features and selecting the most informative features. Second, a threshold tuning method is proposed to identify the best threshold for each feature. Finally, an aggregated feature-based linear classifier is proposed to weight the selected features for classification. Since the proposed method monitors the flows in network layer, it can detect the traditional DDoS attack flows as well as the attack flows launched by Internet of Thing (IoT) devices. Comprehensive experiments are carried out on one IoT and two sophisticated DDoS attacks to evaluate the classification performance of the proposed method. The comparison results show that SAFE can achieve better classification performance than the state-of-the-art methods in terms of classification accuracy and efficiency. (c) 2022 Elsevier B.V. All rights reserved.
Keyword:
DDoS attacks
Flow classification
Machine learning
Feature selection
期刊
F
IF:
6.1
论文数:
6.9K
被引数:
2.3W
机构
引用论文
ICMPv6-Based DoS and DDoS Attacks Detection Using Machine Learning Techniques, Open Challenges, and Blockchain Applicability: A Review
IEEE ACCESS
IF3.6
FlowGuard: An Intelligent Edge Defense Mechanism Against IoT DDoS AttacksFlowGuard: 针对IoT DDoS攻击的智能边缘防御机制
Towards sFlow and adaptive polling sampling for deep learning based DDoS detection in SDNSDN中基于深度学习的DDoS检测的sFlow和自适应轮询采样
The use of the area under the roc curve in the evaluation of machine learning algorithmsroc曲线下面积在机器学习算法评价中的应用
PATTERN RECOGNITION
IF7.6
Passban IDS: An Intelligent Anomaly-Based Intrusion Detection System for IoT Edge DevicesPassban IDS: 面向物联网边缘设备的基于异常的智能入侵检测系统

