DDoS Detection Algorithm Based on Preprocessing Network Traffic Predicted Method and Chaos Theory

Yonghong Chen

doi:10.1109/LCOMM.2013.031913.130066

DDoS Detection Algorithm Based on Preprocessing Network Traffic Predicted Method and Chaos Theory

2013-05-01

47

PRE

AI

DOI：10.1109/LCOMM.2013.031913.130066

原文链接

原文求助

摘要

En 中文

Distributed denial-of-service (DDoS) flooding attacks still pose great threats to the Internet even though various approaches and systems have been proposed. In this paper, we firstly pre-process network traffic by cumulatively averaging it with a time range, and using the simple linear AR model, and then generate the prediction of network traffic. Secondly, assuming the prediction error behaves chaotically, we use chaos theory to analyze it and then propose a novel network anomaly detection algorithm (NADA) to detect the abnormal traffic. With this abnormal traffic, we lastly train a neural network to detect DDoS attacks. Our preliminary experiments and analyses indicate that our proposed DDoS detection algorithm can accurately and effectively detect DDoS attacks.

Keyword:

Distributed denial-of-service (DDoS)

anomaly detection

AR model

chaotic

DDoS Detection Algorithm Based on Preprocessing Network Traffic Predicted Method and Chaos Theory

摘要

期刊

机构

引用论文